File _patchinfo of Package patchinfo.4789

<patchinfo incident="4789">
  <issue id="1038395" tracker="bnc">VUL-0: CVE-2017-8386: git: escape out of git-shell</issue>
  <issue id="2017-8386" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>tiwai</packager>
  <description>
This update for git fixes the following issues:

- git 2.12.3:
 * CVE-2017-8386: Fix git-shell not to escape with the starting dash name
   (bsc#1038395)
 * Fix for potential segv introduced in v2.11.0 and later
 * Misc fixes and cleanups.
- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths   
  * Trailer "Cc:" RFC fix
- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun
</description>
  <summary>Security update for git</summary>
</patchinfo>
openSUSE Build Service is sponsored by