Ubuntu 20.04: USN-4825-1 Severe WebKitGTK Buffer Overflow Vulnerability

Note: Due to new security checks, access to repositories owned and
accessed by different local users may now be rejected by Git; in case
changing ownership is not practical, git displays a way to bypass
these checks using the new 'safe.directory' configuration entry.

CVE-2022-24765

Git is not checking the ownership of directories in a local
multi-user system when running commands specified in the local
repository configuration. This allows the owner of the repository
to cause arbitrary commands to be executed by other users who
access the repository.

CVE-2022-29187

An unsuspecting user could still be affected by the issue reported
in CVE-2022-24765, for example when navigating as root into a
shared tmp directory that is owned by them, but where an attacker
could create a git repository.

CVE-2022-39253

Exposure of sensitive information to a malicious actor. When
performing a local clone (where the source and target of the clone