Package: git
Version: 1:1.7.10.4-2
Severity: important
Tags: security patch

Hi,

the following vulnerability was published for git.

CVE-2013-0308[0,1]:
Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send 
command

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

Upstream commit is [1] (not checked if complete).

For further information see:

[0] http://security-tracker.debian.org/tracker/CVE-2013-0308
[1] http://marc.info/?l=git&m=136134619013145&w=2
[2] 
https://github.com/gitster/git/commit/0ee7198f457c8ea031b09b528cfd88f0f0e630d8

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

_______________________________________________
Secure-testing-team mailing list
Secure-testing-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-team

Reply via email to