p PatchFirst

USN-5376-4

USN-5376-4 · git regression

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

USN-5376-1 fixed a vulnerability in Git. It was discovered that the safety checks introduced in the update were not able to be set using the command line, contrary to expectations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue to run arbitrary commands.

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • git Ubuntu:Pro:20.04:LTS

    Versions du logiciel
    • 1:2.20.1-2ubuntu1
    • 1:2.24.0-1ubuntu1
    • 1:2.24.0-1ubuntu2
    • 1:2.25.0-1ubuntu1
    • 1:2.25.1-1ubuntu1
    • 1:2.25.1-1ubuntu2
    • 1:2.25.1-1ubuntu3
    • 1:2.25.1-1ubuntu3.1
    • 1:2.25.1-1ubuntu3.2
    • 1:2.25.1-1ubuntu3.3
    • 1:2.25.1-1ubuntu3.4
    • 1:2.25.1-1ubuntu3.5
    • 1:2.25.1-1ubuntu3.6
    • 1:2.25.1-1ubuntu3.7
    • 1:2.25.1-1ubuntu3.8
    • 1:2.25.1-1ubuntu3.10
    • 1:2.25.1-1ubuntu3.11
    • 1:2.25.1-1ubuntu3.12
    • 1:2.25.1-1ubuntu3.13
    • 1:2.25.1-1ubuntu3.14
    • 1:2.25.1-1ubuntu3.14+esm1
    • 1:2.25.1-1ubuntu3.14+esm2
    • 1:2.25.1-1ubuntu3.14+esm3
    Plages de versions concernées
    • ECOSYSTEM: < 1:2.25.1-1ubuntu3.14+esm4

    Mettez à jour vers 1:2.25.1-1ubuntu3.14+esm4

  • git Ubuntu:22.04:LTS

    Versions du logiciel
    • 1:2.32.0-1ubuntu1
    • 1:2.33.1-1ubuntu1
    • 1:2.34.1-1ubuntu1
    • 1:2.34.1-1ubuntu1.1
    • 1:2.34.1-1ubuntu1.2
    • 1:2.34.1-1ubuntu1.4
    • 1:2.34.1-1ubuntu1.5
    • 1:2.34.1-1ubuntu1.6
    • 1:2.34.1-1ubuntu1.8
    • 1:2.34.1-1ubuntu1.9
    • 1:2.34.1-1ubuntu1.10
    • 1:2.34.1-1ubuntu1.11
    • 1:2.34.1-1ubuntu1.12
    • 1:2.34.1-1ubuntu1.13
    • 1:2.34.1-1ubuntu1.14
    • 1:2.34.1-1ubuntu1.15
    Plages de versions concernées
    • ECOSYSTEM: < 1:2.34.1-1ubuntu1.16

    Mettez à jour vers 1:2.34.1-1ubuntu1.16

Sources originales

Vérifiez votre serveur →