Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 618
Alerts This Week
Warning Icon 1 618

Ubuntu: 22.04, 20.04, 18.04 USN-5686-1 Critical: Git Code Execution

ubuntu
Calendar Grey October 18, 2022
Dist Ubuntu Esm H88
Update Git on Ubuntu 22.04, 20.04, and 18.04 to fix vulnerabilities. Open Terminal, update package list, upgrade Git, verify version, and reboot if needed
Several security issues were fixed in Git.

Summary

Several security issues were fixed in Git.

Software Description:

- git: fast, scalable, distributed revision control system

Details:

Cory Snider discovered that Git incorrectly handled certain symbolic links.

An attacker could possibly use this issue to cause an unexpected behaviour.

(CVE-2022-39253)

Kevin Backhouse discovered that Git incorrectly handled certain command strings.

An attacker could possibly use this issue to arbitrary code execution.

(CVE-2022-39260)

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution ubuntu git symbolic links

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  git                             1:2.34.1-1ubuntu1.5

Ubuntu 20.04 LTS:
  git                             1:2.25.1-1ubuntu3.6

Ubuntu 18.04 LTS:
  git                             1:2.17.1-1ubuntu0.13

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5686-1

CVE-2022-39253, CVE-2022-39260

Severity
critical
Lowest
Low
Medium
High
Critical

October 18, 2022

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution ubuntu git symbolic links

Package Information

https://launchpad.net/ubuntu/+source/git/1:2.34.1-1ubuntu1.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.