USN-5686-4: Git vulnerability
28 March 2023
Git could be made to expose sensitive information.
Releases
Packages
- git - fast, scalable, distributed revision control system
Details
USN-5686-1 fixed several vulnerabilities in Git. This update
provides the corresponding fix for CVE-2022-39253 on Ubuntu 16.04 ESM.
Original advisory details:
Cory Snider discovered that Git incorrectly handled certain symbolic links.
An attacker could possibly use this issue to cause an unexpected behaviour.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
git
-
1:2.7.4-0ubuntu1.10+esm6
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-5686-1: git-cvs, git-el, gitweb, git-man, gitk, git-all, git-mediawiki, git, git-email, git-daemon-sysvinit, git-doc, git-svn, git-daemon-run, git-gui
- USN-5686-3: git-cvs, gitweb, git-man, gitk, git-all, git-mediawiki, git, git-email, git-daemon-sysvinit, git-doc, git-svn, git-daemon-run, git-gui