p PatchFirst

USN-5376-6

USN-5376-6 · git regression

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-5376-4 fixed a regression in Git. This update provides the corresponding update for Ubuntu 18.04 LTS. We apologize for the inconvenience. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue to run arbitrary commands.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • git Ubuntu:Pro:18.04:LTS

    Versions
    • 1:2.14.1-1ubuntu4
    • 1:2.15.1-1ubuntu2
    • 1:2.17.0-1ubuntu1
    • 1:2.17.1-1ubuntu0.1
    • 1:2.17.1-1ubuntu0.3
    • 1:2.17.1-1ubuntu0.4
    • 1:2.17.1-1ubuntu0.5
    • 1:2.17.1-1ubuntu0.6
    • 1:2.17.1-1ubuntu0.7
    • 1:2.17.1-1ubuntu0.8
    • 1:2.17.1-1ubuntu0.9
    • 1:2.17.1-1ubuntu0.10
    • 1:2.17.1-1ubuntu0.11
    • 1:2.17.1-1ubuntu0.12
    • 1:2.17.1-1ubuntu0.13
    • 1:2.17.1-1ubuntu0.14
    • 1:2.17.1-1ubuntu0.15
    • 1:2.17.1-1ubuntu0.16
    • 1:2.17.1-1ubuntu0.17
    • 1:2.17.1-1ubuntu0.18
    • 1:2.17.1-1ubuntu0.18+esm1
    • 1:2.17.1-1ubuntu0.18+esm2
    • 1:2.17.1-1ubuntu0.18+esm3
    • 1:2.17.1-1ubuntu0.18+esm4
    • 1:2.17.1-1ubuntu0.18+esm6
    Affected ranges
    • ECOSYSTEM: < 1:2.17.1-1ubuntu0.18+esm8

    Update to 1:2.17.1-1ubuntu0.18+esm8

Original sources

Check your server →