Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian 10 DLA-3239-2 Critical: Git Segmentation Fault Addresses Armhf

debian lts
Calendar Grey December 14, 2022
Dist Debian Esm H88
Debian LTS Advisory DLA-3240-1 addresses security vulnerability in curl affecting armhf architecture, providing update specifications.
In rare conditions, the previous git update released as DLA-3239-1 could generate a segmentation fault, which prevented its availability on armhf architecture

Summary

Multiple issues were found in Git, a distributed revision control
system. An attacker may cause other local users into executing
arbitrary commands, leak information from the local filesystem, and
bypass restricted shell.

Note: Due to new security checks, access to repositories owned and
accessed by different local users may now be rejected by Git; in case
changing ownership is not practical, git displays a way to bypass
these checks using the new 'safe.directory' configuration entry.

CVE-2022-24765

Git is not checking the ownership of directories in a local
multi-user system when running commands specified in the local
repository configuration. This allows the owner of the repository
to cause arbitrary commands to be executed by other users who
access the repository.

CVE-2022-29187

An unsuspecting user could still be affected by the issue reported
in CVE-2022-24765, for example when navigating as root into a

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

Package: git
Version: 1:2.20.1-2+deb10u6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here