USN-5871-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-5871-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5871-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5871-1

Related

Published

2023-02-14T18:37:22.773033Z

Modified

2023-02-14T18:37:22.773033Z

Summary

git vulnerabilities

Details

It was discovered that Git incorrectly handled certain repositories. An attacker could use this issue to make Git uses its local clone optimization even when using a non-local transport. (CVE-2023-22490)

Joern Schneeweisz discovered that Git incorrectly handled certain commands. An attacker could possibly use this issue to overwrite a patch outside the working tree. (CVE-2023-23946)

References

Affected packages

Ubuntu:Pro:16.04:LTS / git

Package

Name: git
Purl: pkg:deb/ubuntu/git@1:2.7.4-0ubuntu1.10+esm5?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.7.4-0ubuntu1.10+esm5

Affected versions

1:2.*

1:2.5.0-1

1:2.6.2-1

1:2.6.3-1

1:2.6.4-1

1:2.7.0~rc3-1

1:2.7.0-1

1:2.7.3-0ubuntu1

1:2.7.4-0ubuntu1

1:2.7.4-0ubuntu1.1

1:2.7.4-0ubuntu1.2

1:2.7.4-0ubuntu1.3

1:2.7.4-0ubuntu1.4

1:2.7.4-0ubuntu1.5

1:2.7.4-0ubuntu1.6

1:2.7.4-0ubuntu1.7

1:2.7.4-0ubuntu1.8

1:2.7.4-0ubuntu1.9

1:2.7.4-0ubuntu1.10

1:2.7.4-0ubuntu1.10+esm1

1:2.7.4-0ubuntu1.10+esm3

1:2.7.4-0ubuntu1.10+esm4

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "git-core": "1:2.7.4-0ubuntu1.10+esm5",
            "git-daemon-run": "1:2.7.4-0ubuntu1.10+esm5",
            "git-email": "1:2.7.4-0ubuntu1.10+esm5",
            "git-mediawiki": "1:2.7.4-0ubuntu1.10+esm5",
            "git": "1:2.7.4-0ubuntu1.10+esm5",
            "git-el": "1:2.7.4-0ubuntu1.10+esm5",
            "git-cvs": "1:2.7.4-0ubuntu1.10+esm5",
            "git-doc": "1:2.7.4-0ubuntu1.10+esm5",
            "gitk": "1:2.7.4-0ubuntu1.10+esm5",
            "git-arch": "1:2.7.4-0ubuntu1.10+esm5",
            "git-daemon-sysvinit": "1:2.7.4-0ubuntu1.10+esm5",
            "git-svn": "1:2.7.4-0ubuntu1.10+esm5",
            "git-gui": "1:2.7.4-0ubuntu1.10+esm5",
            "git-man": "1:2.7.4-0ubuntu1.10+esm5",
            "gitweb": "1:2.7.4-0ubuntu1.10+esm5",
            "git-all": "1:2.7.4-0ubuntu1.10+esm5"
        }
    ]
}

Ubuntu:18.04:LTS / git

Package

Name: git
Purl: pkg:deb/ubuntu/git@1:2.17.1-1ubuntu0.16?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.17.1-1ubuntu0.16

Affected versions

1:2.*

1:2.14.1-1ubuntu4

1:2.15.1-1ubuntu2

1:2.17.0-1ubuntu1

1:2.17.1-1ubuntu0.1

1:2.17.1-1ubuntu0.3

1:2.17.1-1ubuntu0.4

1:2.17.1-1ubuntu0.5

1:2.17.1-1ubuntu0.6

1:2.17.1-1ubuntu0.7

1:2.17.1-1ubuntu0.8

1:2.17.1-1ubuntu0.9

1:2.17.1-1ubuntu0.10

1:2.17.1-1ubuntu0.11

1:2.17.1-1ubuntu0.12

1:2.17.1-1ubuntu0.13

1:2.17.1-1ubuntu0.14

1:2.17.1-1ubuntu0.15

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "git-daemon-run": "1:2.17.1-1ubuntu0.16",
            "git-email": "1:2.17.1-1ubuntu0.16",
            "git-mediawiki": "1:2.17.1-1ubuntu0.16",
            "git": "1:2.17.1-1ubuntu0.16",
            "git-el": "1:2.17.1-1ubuntu0.16",
            "git-cvs": "1:2.17.1-1ubuntu0.16",
            "git-doc": "1:2.17.1-1ubuntu0.16",
            "gitk": "1:2.17.1-1ubuntu0.16",
            "git-dbgsym": "1:2.17.1-1ubuntu0.16",
            "git-daemon-sysvinit": "1:2.17.1-1ubuntu0.16",
            "git-svn": "1:2.17.1-1ubuntu0.16",
            "git-gui": "1:2.17.1-1ubuntu0.16",
            "git-man": "1:2.17.1-1ubuntu0.16",
            "gitweb": "1:2.17.1-1ubuntu0.16",
            "git-all": "1:2.17.1-1ubuntu0.16"
        }
    ]
}

Ubuntu:20.04:LTS / git

Package

Name: git
Purl: pkg:deb/ubuntu/git@1:2.25.1-1ubuntu3.10?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.25.1-1ubuntu3.10

Affected versions

1:2.*

1:2.20.1-2ubuntu1

1:2.24.0-1ubuntu1

1:2.24.0-1ubuntu2

1:2.25.0-1ubuntu1

1:2.25.1-1ubuntu1

1:2.25.1-1ubuntu2

1:2.25.1-1ubuntu3

1:2.25.1-1ubuntu3.1

1:2.25.1-1ubuntu3.2

1:2.25.1-1ubuntu3.3

1:2.25.1-1ubuntu3.4

1:2.25.1-1ubuntu3.5

1:2.25.1-1ubuntu3.6

1:2.25.1-1ubuntu3.7

1:2.25.1-1ubuntu3.8

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "git-daemon-run": "1:2.25.1-1ubuntu3.10",
            "git-email": "1:2.25.1-1ubuntu3.10",
            "git-mediawiki": "1:2.25.1-1ubuntu3.10",
            "git": "1:2.25.1-1ubuntu3.10",
            "git-el": "1:2.25.1-1ubuntu3.10",
            "git-cvs": "1:2.25.1-1ubuntu3.10",
            "git-doc": "1:2.25.1-1ubuntu3.10",
            "gitk": "1:2.25.1-1ubuntu3.10",
            "git-dbgsym": "1:2.25.1-1ubuntu3.10",
            "git-daemon-sysvinit": "1:2.25.1-1ubuntu3.10",
            "git-svn": "1:2.25.1-1ubuntu3.10",
            "git-gui": "1:2.25.1-1ubuntu3.10",
            "git-man": "1:2.25.1-1ubuntu3.10",
            "gitweb": "1:2.25.1-1ubuntu3.10",
            "git-all": "1:2.25.1-1ubuntu3.10"
        }
    ]
}

Ubuntu:22.04:LTS / git

Package

Name: git
Purl: pkg:deb/ubuntu/git@1:2.34.1-1ubuntu1.8?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.34.1-1ubuntu1.8

Affected versions

1:2.*

1:2.32.0-1ubuntu1

1:2.33.1-1ubuntu1

1:2.34.1-1ubuntu1

1:2.34.1-1ubuntu1.1

1:2.34.1-1ubuntu1.2

1:2.34.1-1ubuntu1.4

1:2.34.1-1ubuntu1.5

1:2.34.1-1ubuntu1.6

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "git-daemon-run": "1:2.34.1-1ubuntu1.8",
            "git-email": "1:2.34.1-1ubuntu1.8",
            "git-mediawiki": "1:2.34.1-1ubuntu1.8",
            "git": "1:2.34.1-1ubuntu1.8",
            "gitk": "1:2.34.1-1ubuntu1.8",
            "git-cvs": "1:2.34.1-1ubuntu1.8",
            "git-doc": "1:2.34.1-1ubuntu1.8",
            "git-dbgsym": "1:2.34.1-1ubuntu1.8",
            "git-daemon-sysvinit": "1:2.34.1-1ubuntu1.8",
            "git-svn": "1:2.34.1-1ubuntu1.8",
            "git-gui": "1:2.34.1-1ubuntu1.8",
            "git-man": "1:2.34.1-1ubuntu1.8",
            "gitweb": "1:2.34.1-1ubuntu1.8",
            "git-all": "1:2.34.1-1ubuntu1.8"
        }
    ]
}