Skip to content
OpenAdvisories
High ELSA-2023-0611 2 CVEs

Important: git security update (Oracle Linux 9)

Published Feb 7, 2023 · Updated Feb 7, 2023

Ecosystem: Oracle Linux

Summary

[2.31.1-3]
- Fixes CVE-2022-23521 and CVE-2022-41903
- Tests: try harder to find open ports for apache, git, and svn
- Resolves: #2162069

Fixed packages 15

ReleasePackageFixed in
Oracle Linux · 9 git 0:2.31.1-3.el9_1
Oracle Linux · 9 git-all 0:2.31.1-3.el9_1
Oracle Linux · 9 git-core 0:2.31.1-3.el9_1
Oracle Linux · 9 git-core-doc 0:2.31.1-3.el9_1
Oracle Linux · 9 git-credential-libsecret 0:2.31.1-3.el9_1
Oracle Linux · 9 git-daemon 0:2.31.1-3.el9_1
Oracle Linux · 9 git-email 0:2.31.1-3.el9_1
Oracle Linux · 9 git-gui 0:2.31.1-3.el9_1
Oracle Linux · 9 git-instaweb 0:2.31.1-3.el9_1
Oracle Linux · 9 git-subtree 0:2.31.1-3.el9_1
Oracle Linux · 9 git-svn 0:2.31.1-3.el9_1
Oracle Linux · 9 gitk 0:2.31.1-3.el9_1
Oracle Linux · 9 gitweb 0:2.31.1-3.el9_1
Oracle Linux · 9 perl-Git 0:2.31.1-3.el9_1
Oracle Linux · 9 perl-Git-SVN 0:2.31.1-3.el9_1

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-23521 EPSS 56%

    gitattributes parsing integer overflow in git

    Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes tha…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2022-41903 Public exploit EPSS 44%

    Integer overflow in `git archive`, `git log --format` leading to RCE in git

    Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, t…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi