Vulnerability CVE-2019-1351: Information
Description
A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| git | sisyphus | 2.24.1-alt1 | 2.42.2-alt1 | ALT-PU-2019-3258-1 | 242631 | Fixed |
| git | p10 | 2.24.1-alt1 | 2.33.8-alt1 | ALT-PU-2019-3258-1 | 242631 | Fixed |
| git | p9 | 2.24.1-alt1 | 2.25.4-alt1 | ALT-PU-2019-3259-1 | 242632 | Fixed |
| git | p8 | 2.24.1-alt1 | 2.24.1-alt1 | ALT-PU-2019-3276-1 | 242633 | Fixed |
| git | c10f1 | 2.24.1-alt1 | 2.42.1-alt1 | ALT-PU-2019-3258-1 | 242631 | Fixed |
| git | c9f2 | 2.24.1-alt1 | 2.42.1-alt1 | ALT-PU-2019-3259-1 | 242632 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351 |
|
| openSUSE-SU-2020:0123 |
|
| GLSA-202003-30 | |
| openSUSE-SU-2020:0598 | |
| https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/ |