Debian DSA-4311-1 : git - security update
High Nessus Plugin ID 117957
Synopsis
The remote Debian host is missing a security-related update.
Description
joernchen of Phenoelit discovered that git, a fast, scalable,
distributed revision control system, is prone to an arbitrary code
execution vulnerability via a specially crafted .gitmodules file in a
project cloned with --recurse-submodules.
Solution
Upgrade the git packages.
For the stable distribution (stretch), this problem has been fixed in
version 1:2.11.0-3+deb9u4.