Git security vulnerabilities affecting versions 2.39 and older

Dev Discussions
1

Hi developers,

Just in case you haven't seen it:

2

Argh?

$ git --version
git version 2.34.1

Phew

$ zless /usr/share/doc/git/changelog.Debian.gz
git (1:2.34.1-1ubuntu1.6) jammy-security; urgency=medium

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE_2022_23521_and_41903/00*.patch:
      attr.c, attr.h, pretty.c, column.c, utf8.c, utf8.h,
      t/t4205-log-pretty-formats.sh, t/test-lib.sh, git-compat-util.h,
      t/t0003-attributes.sh.
    - CVE-2022-23521
    - CVE-2022-41903

Looks like Ubuntu are on top of this :slight_smile:

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.