p PatchFirst

USN-5376-4

USN-5376-4 · git regression

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-5376-1 fixed a vulnerability in Git. It was discovered that the safety checks introduced in the update were not able to be set using the command line, contrary to expectations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue to run arbitrary commands.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • git Ubuntu:Pro:20.04:LTS

    Versions
    • 1:2.20.1-2ubuntu1
    • 1:2.24.0-1ubuntu1
    • 1:2.24.0-1ubuntu2
    • 1:2.25.0-1ubuntu1
    • 1:2.25.1-1ubuntu1
    • 1:2.25.1-1ubuntu2
    • 1:2.25.1-1ubuntu3
    • 1:2.25.1-1ubuntu3.1
    • 1:2.25.1-1ubuntu3.2
    • 1:2.25.1-1ubuntu3.3
    • 1:2.25.1-1ubuntu3.4
    • 1:2.25.1-1ubuntu3.5
    • 1:2.25.1-1ubuntu3.6
    • 1:2.25.1-1ubuntu3.7
    • 1:2.25.1-1ubuntu3.8
    • 1:2.25.1-1ubuntu3.10
    • 1:2.25.1-1ubuntu3.11
    • 1:2.25.1-1ubuntu3.12
    • 1:2.25.1-1ubuntu3.13
    • 1:2.25.1-1ubuntu3.14
    • 1:2.25.1-1ubuntu3.14+esm1
    • 1:2.25.1-1ubuntu3.14+esm2
    • 1:2.25.1-1ubuntu3.14+esm3
    Affected ranges
    • ECOSYSTEM: < 1:2.25.1-1ubuntu3.14+esm4

    Update to 1:2.25.1-1ubuntu3.14+esm4

  • git Ubuntu:22.04:LTS

    Versions
    • 1:2.32.0-1ubuntu1
    • 1:2.33.1-1ubuntu1
    • 1:2.34.1-1ubuntu1
    • 1:2.34.1-1ubuntu1.1
    • 1:2.34.1-1ubuntu1.2
    • 1:2.34.1-1ubuntu1.4
    • 1:2.34.1-1ubuntu1.5
    • 1:2.34.1-1ubuntu1.6
    • 1:2.34.1-1ubuntu1.8
    • 1:2.34.1-1ubuntu1.9
    • 1:2.34.1-1ubuntu1.10
    • 1:2.34.1-1ubuntu1.11
    • 1:2.34.1-1ubuntu1.12
    • 1:2.34.1-1ubuntu1.13
    • 1:2.34.1-1ubuntu1.14
    • 1:2.34.1-1ubuntu1.15
    Affected ranges
    • ECOSYSTEM: < 1:2.34.1-1ubuntu1.16

    Update to 1:2.34.1-1ubuntu1.16

Original sources

Check your server →