Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 22.10 USN-5686-3: Critical Git Security Issues and Updates

ubuntu
Calendar Grey November 21, 2022
Dist Ubuntu Esm H88
Multiple vulnerabilities were addressed in Git for Ubuntu 22.10. Upgrade to safeguard your system from possible risks.
Several security issues were fixed in Git.

Summary

Several security issues were fixed in Git.

Software Description:

- git: fast, scalable, distributed revision control system

Details:

USN-5686-1 fixed vulnerabilities in Git. This update provides the corresponding

updates for Ubuntu 22.10.

Original advisory details:

Cory Snider discovered that Git incorrectly handled certain symbolic links.

An attacker could possibly use this issue to cause an unexpected behaviour.

(CVE-2022-39253)

Kevin Backhouse discovered that Git incorrectly handled certain command strings.

An attacker could possibly use this issue to arbitrary code execution.

(CVE-2022-39260)

Topics%20covered

Topics Covered

security advisory code execution software patch threat ubuntu git symbolic links

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
  git                             1:2.37.2-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5686-3

https://ubuntu.com/security/notices/USN-5686-1

CVE-2022-39253, CVE-2022-39260

Severity
critical
Lowest
Low
Medium
High
Critical

November 21, 2022

Topics%20covered

Topics Covered

security advisory code execution software patch threat ubuntu git symbolic links

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.