Skip to content
OpenAdvisories
Medium DSA-5357-1 2 CVEs

git - security update

Published Feb 23, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 git 1:2.30.2-1+deb11u2

Vulnerabilities 2

  • Medium 6.2
    CVE-2023-23946 Public exploit

    Git's `git apply` overwriting paths outside the working tree

    Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten…

    git git git git Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2023-22490 Public exploit

    Git vulnerable to local clone-based data exfiltration with non-local transports

    Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local…

    git git git git Debian Ubuntu Alpine