gitconnectgit in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "git-core": "1:2.7.4-0ubuntu1.10+esm1", "git-daemon-run": "1:2.7.4-0ubuntu1.10+esm1", "git-email": "1:2.7.4-0ubuntu1.10+esm1", "git-mediawiki": "1:2.7.4-0ubuntu1.10+esm1", "git": "1:2.7.4-0ubuntu1.10+esm1", "git-el": "1:2.7.4-0ubuntu1.10+esm1", "git-cvs": "1:2.7.4-0ubuntu1.10+esm1", "git-doc": "1:2.7.4-0ubuntu1.10+esm1", "gitk": "1:2.7.4-0ubuntu1.10+esm1", "git-arch": "1:2.7.4-0ubuntu1.10+esm1", "git-daemon-sysvinit": "1:2.7.4-0ubuntu1.10+esm1", "git-svn": "1:2.7.4-0ubuntu1.10+esm1", "git-gui": "1:2.7.4-0ubuntu1.10+esm1", "git-man": "1:2.7.4-0ubuntu1.10+esm1", "gitweb": "1:2.7.4-0ubuntu1.10+esm1", "git-all": "1:2.7.4-0ubuntu1.10+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "git-daemon-run": "1:2.17.1-1ubuntu0.9", "git-email": "1:2.17.1-1ubuntu0.9", "git-mediawiki": "1:2.17.1-1ubuntu0.9", "git": "1:2.17.1-1ubuntu0.9", "git-el": "1:2.17.1-1ubuntu0.9", "git-cvs": "1:2.17.1-1ubuntu0.9", "git-doc": "1:2.17.1-1ubuntu0.9", "gitk": "1:2.17.1-1ubuntu0.9", "git-dbgsym": "1:2.17.1-1ubuntu0.9", "git-daemon-sysvinit": "1:2.17.1-1ubuntu0.9", "git-svn": "1:2.17.1-1ubuntu0.9", "git-gui": "1:2.17.1-1ubuntu0.9", "git-man": "1:2.17.1-1ubuntu0.9", "gitweb": "1:2.17.1-1ubuntu0.9", "git-all": "1:2.17.1-1ubuntu0.9" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "git-daemon-run": "1:2.25.1-1ubuntu3.2", "git-email": "1:2.25.1-1ubuntu3.2", "git-mediawiki": "1:2.25.1-1ubuntu3.2", "git": "1:2.25.1-1ubuntu3.2", "git-el": "1:2.25.1-1ubuntu3.2", "git-cvs": "1:2.25.1-1ubuntu3.2", "git-doc": "1:2.25.1-1ubuntu3.2", "gitk": "1:2.25.1-1ubuntu3.2", "git-dbgsym": "1:2.25.1-1ubuntu3.2", "git-daemon-sysvinit": "1:2.25.1-1ubuntu3.2", "git-svn": "1:2.25.1-1ubuntu3.2", "git-gui": "1:2.25.1-1ubuntu3.2", "git-man": "1:2.25.1-1ubuntu3.2", "gitweb": "1:2.25.1-1ubuntu3.2", "git-all": "1:2.25.1-1ubuntu3.2" } ] }