[Secure-testing-team] Bug#701586: git: CVE-2013-0308: Incorrect IMAP server's SSL x509.v3 certificate validation

[Salvatore Bonaccorso]

Package: git
Version: 1:1.7.10.4-2
Severity: important
Tags: security patch

Hi,

the following vulnerability was published for git.

CVE-2013-0308[0,1]:
Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

Upstream commit is [1] (not checked if complete).

For further information see:

[0] http://security-tracker.debian.org/tracker/CVE-2013-0308
[1] http://marc.info/?l=git&m=136134619013145&w=2
[2] https://github.com/gitster/git/commit/0ee7198f457c8ea031b09b528cfd88f0f0e630d8

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore