Ubuntu 22.04 LTS USN-5810-1: Severe Git Code Execution Risk Fixed

ubuntu

January 17, 2023

Several security issues were fixed in Git.

Summary

Several security issues were fixed in Git.

Software Description:

- git: fast, scalable, distributed revision control system

Details:

Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain

gitattributes. An attacker could possibly use this issue to cause a crash

or execute arbitrary code. (CVE-2022-23521)

Joern Schneeweisz discovered that Git incorrectly handled certain commands.

An attacker could possibly use this issue to cause a crash or execute

arbitrary code. (CVE-2022-41903)

Topics Covered

security advisory code execution Ubuntu remote crash severe git

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
  git                             1:2.37.2-1ubuntu1.2

Ubuntu 22.04 LTS:
  git                             1:2.34.1-1ubuntu1.6

Ubuntu 20.04 LTS:
  git                             1:2.25.1-1ubuntu3.7

Ubuntu 18.04 LTS:
  git                             1:2.17.1-1ubuntu0.14

In general, a standard system update will make all the necessary changes.