Upstream security fixes related to .gitmodules handling. From the [upstream announcement](https://public-inbox.org/git/xmqqy3g2flb6.fsf@gitster-ct .c.googlers.com/) :

```

  - Submodule 'names' come from the untrusted .gitmodules     file, but we blindly append them to $GIT_DIR/modules to     create our on-disk repo paths. This means you can do bad     things by putting '../' into the name. We now enforce     some rules for submodule names which will cause Git to     ignore these malicious names (CVE-2018-11235).

    Credit for finding this vulnerability and the proof of     concept from which the test script was adapted goes to     Etienne Stalmans.

  - It was possible to trick the code that sanity-checks     paths on NTFS into reading random piece of memory     (CVE-2018-11233). ```

Also fix a segfault in rev-parse with invalid input (#1581678) and install contrib/diff-highlight (#1550251).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New git packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.

This update for fixes the following security issues :

  - path sanity-checks on NTFS can read arbitrary memory     (CVE-2018-11233, boo#1095218)

  - arbitrary code execution when recursively cloning a     malicious repository (CVE-2018-11235, boo#1095219)

Upstream security fixes related to .gitmodules handling. From the [upstream announcement](https://public-inbox.org/git/xmqqy3g2flb6.fsf@gitster-ct .c.googlers.com/) :

```

  - Submodule 'names' come from the untrusted .gitmodules     file, but we blindly append them to $GIT_DIR/modules to     create our on-disk repo paths. This means you can do bad     things by putting '../' into the name. We now enforce     some rules for submodule names which will cause Git to     ignore these malicious names (CVE-2018-11235).

    Credit for finding this vulnerability and the proof of     concept from which the test script was adapted goes to     Etienne Stalmans.

  - It was possible to trick the code that sanity-checks     paths on NTFS into reading random piece of memory     (CVE-2018-11233). ```

A preliminary patch to resolve an issue with zlib on aarch64 is also included (RHBZ#1582555).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the git package has been released.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3671-1 advisory.

    Etienne Stalmans discovered that git did not properly validate git submodules files. A remote attacker     could possibly use this to craft a git repo that causes arbitrary code execution when git clone
    --recurse-submodules is used. (CVE-2018-11235)

    It was discovered that an integer overflow existed in git's pathname

    consistency checking code when used on NTFS filesystems. An attacker could use this to cause a denial of     service or expose sensitive information. (CVE-2018-11233)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.(CVE-2018-11233)

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs 'git clone
--recurse-submodules' because submodule 'names' are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with '../' in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.(CVE-2018-11235)

This update for git to version 2.16.4 fixes several issues. These security issues were fixed :

  - CVE-2018-11233: Path sanity-checks on NTFS allowed     attackers to read arbitrary memory (bsc#1095218)

  - CVE-2018-11235: Arbitrary code execution when     recursively cloning a malicious repository (bsc#1095219)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2147 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: arbitrary code execution when recursively cloning a malicious repository (CVE-2018-11235)

    * git: path sanity check in is_ntfs_dotgit() can read arbitrary memory (CVE-2018-11233)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
110299	Fedora 27 : git (2018-080a3d7866)	Nessus	Fedora Local Security Checks	2018/6/4	2024/9/26	high
110308	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : git (SSA:2018-152-01)	Nessus	Slackware Local Security Checks	2018/6/4	2024/9/26	high
110335	openSUSE Security Update : git (openSUSE-2018-557)	Nessus	SuSE Local Security Checks	2018/6/6	2024/9/25	high
120535	Fedora 28 : git (2018-75f7624a9f)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/2	high
333673	Photon OS 5.0: Git PHSA-2025-5.0-91-0590	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/11	low
110395	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Git vulnerabilities (USN-3671-1)	Nessus	Ubuntu Local Security Checks	2018/6/7	2024/8/27	high
110452	Amazon Linux 2 : git (ALAS-2018-1035)	Nessus	Amazon Linux Local Security Checks	2018/6/12	2024/9/24	high
120026	SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2018:1872-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/11	high
121953	Photon OS 2.0: Git PHSA-2018-2.0-0053	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/23	high
135580	SUSE SLES12 Security Update : git (SUSE-SU-2020:0992-1)	Nessus	SuSE Local Security Checks	2020/4/15	2022/5/13	critical
194012	RHEL 6 / 7 : rh-git29-git (RHSA-2018:2147)	Nessus	Red Hat Local Security Checks	2024/4/27	2024/11/5	high
123178	openSUSE Security Update : git (openSUSE-2019-410)	Nessus	SuSE Local Security Checks	2019/3/27	2024/6/12	high

检测

插件搜索

high

high

high

high

low

high

high

high

high

critical

high

high