{"id":"MGASA-2016-0119","summary":"Updated git packages fix security vulnerability","details":"There is a buffer overflow vulnerability possibly leading to remote code\nexecution in git. It can happen while pushing or cloning a repository with\na large filename or a large number of nested trees (CVE-2016-2315,\nCVE-2016-2324).\n\nThe git package has been updated to version 2.7.4, which fixes this issue,\nas well as several other bugs.\n\nThe cgit package bundles git, and its bundled copy of git has also been\nupdated to version 2.7.4.\n","modified":"2026-04-16T06:24:18.103894924Z","published":"2016-03-25T06:38:37Z","upstream":["CVE-2016-2315","CVE-2016-2324"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2016-0119.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=18013"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.4.0.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.5.0.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.6.0.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.6.2.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.6.3.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.6.4.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.0.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.1.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.2.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.3.txt"},{"type":"WEB","url":"https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317981"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2016/03/15/5"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2016/03/16/9"}],"affected":[{"package":{"name":"git","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/git?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0119.json"}},{"package":{"name":"cgit","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/cgit?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-1.2.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0119.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}