Ubuntu 20.10 USN-4761-1 Critical Git Code Execution Risk

ubuntu

March 9, 2021

Git could be made to run programs if it received specially crafted network traffic.

Summary

Git could be made to run programs if it received specially crafted network

traffic.

Software Description:

- git: fast, scalable, distributed revision control system

Details:

Matheus Tavares discovered that Git incorrectly handled delay-capable

clean/smudge filters when being used on case-insensitive filesystems. A

remote attacker could possibly use this issue to execute arbitrary code.

Topics Covered

security advisory security issue critical code execution remote attack Ubuntu git

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  git                             1:2.27.0-1ubuntu1.1

Ubuntu 20.04 LTS:
  git                             1:2.25.1-1ubuntu3.1

Ubuntu 18.04 LTS:
  git                             1:2.17.1-1ubuntu0.8

Ubuntu 16.04 LTS:
  git                             1:2.7.4-0ubuntu1.10

In general, a standard system update will make all the necessary changes.