Synopsis:          Important: git security update
Advisory ID:       SLSA-2023:0978-1
Issue Date:        2023-02-28
CVE Numbers:       CVE-2022-23521
                   CVE-2022-41903
--

Security Fix(es):

* git: gitattributes parsing integer overflow (CVE-2022-23521)

* git: Heap overflow in `git archive`, `git log --format` leading to RCE
(CVE-2022-41903)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
--

SL7
  x86_64
    git-1.8.3.1-24.el7_9.x86_64.rpm
    git-daemon-1.8.3.1-24.el7_9.x86_64.rpm
    git-debuginfo-1.8.3.1-24.el7_9.x86_64.rpm
    git-gnome-keyring-1.8.3.1-24.el7_9.x86_64.rpm
    git-svn-1.8.3.1-24.el7_9.x86_64.rpm
  noarch
    emacs-git-1.8.3.1-24.el7_9.noarch.rpm
    emacs-git-el-1.8.3.1-24.el7_9.noarch.rpm
    git-all-1.8.3.1-24.el7_9.noarch.rpm
    git-bzr-1.8.3.1-24.el7_9.noarch.rpm
    git-cvs-1.8.3.1-24.el7_9.noarch.rpm
    git-email-1.8.3.1-24.el7_9.noarch.rpm
    git-gui-1.8.3.1-24.el7_9.noarch.rpm
    git-hg-1.8.3.1-24.el7_9.noarch.rpm
    git-instaweb-1.8.3.1-24.el7_9.noarch.rpm
    git-p4-1.8.3.1-24.el7_9.noarch.rpm
    gitk-1.8.3.1-24.el7_9.noarch.rpm
    gitweb-1.8.3.1-24.el7_9.noarch.rpm
    perl-Git-1.8.3.1-24.el7_9.noarch.rpm
    perl-Git-SVN-1.8.3.1-24.el7_9.noarch.rpm

- Scientific Linux Development Team