Ubuntu 6420 Published by

A Git security update has been released for Ubuntu Linux 22.10.

USN-5686-3: Git vulnerabilities

Ubuntu Security Notice USN-5686-3
November 21, 2022

git vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.10


Several security issues were fixed in Git.

Software Description:
- git: fast, scalable, distributed revision control system


USN-5686-1 fixed vulnerabilities in Git. This update provides the corresponding
updates for Ubuntu 22.10.

Original advisory details:

Cory Snider discovered that Git incorrectly handled certain symbolic links.
An attacker could possibly use this issue to cause an unexpected behaviour.

Kevin Backhouse discovered that Git incorrectly handled certain command strings.
An attacker could possibly use this issue to arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
git 1:2.37.2-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

CVE-2022-39253, CVE-2022-39260

Package Information: