[Cucumber-linux-security] git (security update is available)

[Z5T1 <z5...@z5...>]

  Update Information

A security update is available for git for the following versions of
Cucumber Linux:

  * 1.0

Here are the details from the Cucumber 1.0 changelog:

+----------------+
Sun Aug 13 10:05:06 EDT 2017
dev-general/git upgraded from 2.10.1 to 2.10.4 to fix CVE-2017-1000117, a
	vulnerability in which a specially crafted "ssh://..." URL could
	result in an arbitrary program being executed on the client system. For
	more information see:
		https://public-inbox.org/git/xmq...@gi.../T/#u
		https://kernel.googlesource.com/pub/scm/git/git/+/0bfff8146f8c055fd95af4567286929ba8216fa7/Documentation/RelNotes/2.10.4.txt
		https://kernel.googlesource.com/pub/scm/git/git/+/5e0649dc65fe33e8cf38823350e9d7951f6a6346/Documentation/RelNotes/2.7.6.txt
		https://nvd.nist.gov/vuln/CVE-2017-1000117
* SECURITY FIX *
+----------------+

------------------------------------------------------------------------


  Installing the Update

The updated package can be installed via Pickle by running the following
commands (as root):

# pickle --update
# pickle

Make sure git is selected on the update list, and then select Ok. Pickle
will then install the updated package.

If you prefer to download the updated package manually, it can be found
at the following location:

Cucumber 1.0 i686:
http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-i686/dev-general/git-2.10.4-i686-1.txz

Cucumber 1.0 x86_64:
http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-x86_64/dev-general/git-2.10.4-x86_64-1.txz

To upgrade the package manually, download the new package and run the
following command (as root):

# upgradepkg git-2.10.4-i686-1.txz


------------------------------------------------------------------------
The Cucumber Linux Security Team
cuc...@li...
http://www.cucumberlinux.com/security.php