File _patchinfo of Package patchinfo.4789
<patchinfo incident="4789">
<issue id="1038395" tracker="bnc">VUL-0: CVE-2017-8386: git: escape out of git-shell</issue>
<issue id="2017-8386" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>tiwai</packager>
<description>
This update for git fixes the following issues:
- git 2.12.3:
* CVE-2017-8386: Fix git-shell not to escape with the starting dash name
(bsc#1038395)
* Fix for potential segv introduced in v2.11.0 and later
* Misc fixes and cleanups.
- git 2.12.2:
* CLI output fixes
* "Dump http" transport fixes
* various fixes for internal code paths
* Trailer "Cc:" RFC fix
- git 2.12.1:
* Reduce authentication round-trip over HTTP when the server
supports just a single authentication method.
* "git add -i" patch subcommand fixed to have a path selection
* various path verification fixes
* fix "git log -L..." buffer overrun
</description>
<summary>Security update for git</summary>
</patchinfo>