Git gitweb 未明远程指令执行漏洞

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Ubuntu Ubuntu Linux 7.10 i386

Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb

http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb

Ubuntu git-core_1.5.2.5-2ubuntu0.1_i386.deb

http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_i386.deb

Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb

http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb

Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb

http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb

Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb

http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb

Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb

http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb

Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb

http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb

来源: BID

名称: 33215

链接:http://www.securityfocus.com/bid/33215

来源: VUPEN

名称: ADV-2009-0175

链接:http://www.frsirt.com/english/advisories/2009/0175

来源:issues.rpath.com

链接:https://issues.rpath.com/browse/RPL-2936

来源: bugzilla.redhat.com

链接:https://bugzilla.redhat.com/show_bug.cgi?id=479715

来源: UBUNTU

名称: USN-723-1

链接:http://www.ubuntu.com/usn/USN-723-1

来源: BUGTRAQ

名称: 20090113 rPSA-2009-0005-1 git gitweb

链接:http://www.securityfocus.com/archive/1/archive/1/500008/100/0/threaded

来源: MLIST

名称: [oss-security] 20090123 Re: CVE request -- git

链接:http://www.openwall.com/lists/oss-security/2009/01/23/2

来源: MLIST

名称: [oss-security] 20090121 Re: CVE request -- git

链接:http://www.openwall.com/lists/oss-security/2009/01/21/7

来源: MLIST

名称: [oss-security] 20090120 Re: CVE request -- git

链接:http://www.openwall.com/lists/oss-security/2009/01/20/1

来源: GENTOO

名称: GLSA-200903-15

链接:http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml

来源: DEBIAN

名称: DSA-1708

链接:http://www.debian.org/security/2009/dsa-1708

来源: wiki.rpath.com

链接:http://wiki.rpath.com/Advisories:rPSA-2009-0005

来源: SECUNIA

名称: 34194

链接:http://secunia.com/advisories/34194

来源: SECUNIA

名称: 33964

链接:http://secunia.com/advisories/33964

来源: MISC

链接:http://repo.or.cz/w/git.git?a=commitdiff;h=516381d5

来源: SUSE

名称: SUSE-SR:2009:001

链接:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html

来源: bugs.debian.org

链接:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330