USN-4220-1: Git vulnerabilities

Releases

• Ubuntu 19.10
• Ubuntu 19.04
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• git - fast, scalable, distributed revision control system

Details

Joern Schneeweisz and Nicolas Joly discovered that Git contained various
security flaws. An attacker could possibly use these issues to overwrite
arbitrary paths, execute arbitrary code, and overwrite files in the .git
directory.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.10

• git - 1:2.20.1-2ubuntu1.19.10.1

Ubuntu 19.04

• git - 1:2.20.1-2ubuntu1.19.04.1

Ubuntu 18.04

• git - 1:2.17.1-1ubuntu0.5

Ubuntu 16.04

• git - 1:2.7.4-0ubuntu1.7

In general, a standard system update will make all the necessary changes.

References

• CVE-2019-1348
• CVE-2019-1349
• CVE-2019-1350
• CVE-2019-1351
• CVE-2019-1352
• CVE-2019-1353
• CVE-2019-1354
• CVE-2019-1387
• CVE-2019-19604