Ubuntu Security Notice 5686-3 - USN-5686-1 fixed vulnerabilities in Git. This update provides the corresponding updates for Ubuntu 22.10. Cory Snider discovered that Git incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause an unexpected behaviour.
ee6b56d4f6035bcabf57319cafc39810937a6a150e50bbd6feb67edb93813e2e
==========================================================================
Ubuntu Security Notice USN-5686-3
November 21, 2022
git vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
Summary:
Several security issues were fixed in Git.
Software Description:
- git: fast, scalable, distributed revision control system
Details:
USN-5686-1 fixed vulnerabilities in Git. This update provides the corresponding
updates for Ubuntu 22.10.
Original advisory details:
Cory Snider discovered that Git incorrectly handled certain symbolic links.
An attacker could possibly use this issue to cause an unexpected behaviour.
(CVE-2022-39253)
Kevin Backhouse discovered that Git incorrectly handled certain command strings.
An attacker could possibly use this issue to arbitrary code execution.
(CVE-2022-39260)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
git 1:2.37.2-1ubuntu1.1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5686-3
https://ubuntu.com/security/notices/USN-5686-1
CVE-2022-39253, CVE-2022-39260
Package Information:
https://launchpad.net/ubuntu/+source/git/1:2.37.2-1ubuntu1.1