Eclipse Community Forums: EGit / JGit » What is the action for CVE 2018-11234 and CVE 2018-11235?

Home » Eclipse Projects » EGit / JGit » What is the action for CVE 2018-11234 and CVE 2018-11235?(Vulnerability for Git with repos containing sub-modules)

Show: Today's Messages :: Show Polls :: Message Navigator

What is the action for CVE 2018-11234 and CVE 2018-11235? [message #1788556]

Wed, 30 May 2018 18:39

Andy Chapman

Messages: 4
Registered: July 2009

Junior Member

Is there a fix version of eGit or a way to link to a patched Git version installed outside eGit?

Useful links:
https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/
https://www.edwardthomson.com/blog/upgrading_git_for_cve2018_11235.html

Report message to a moderator

Re: What is the action for CVE 2018-11234 and CVE 2018-11235? [message #1788634 is a reply to message #1788556]

Wed, 30 May 2018 19:17

Matthias Sohn

Messages: 1268
Registered: July 2009

Senior Member

JGit and EGit which is based on JGit (not native git) are not affected by this vulnerability.
See https://bugs.eclipse.org/bugs/show_bug.cgi?id=535027

Report message to a moderator