Skip to content
OpenAdvisories
Medium USN-5376-2 1 CVE

git vulnerability

Published Apr 25, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

USN-5376-1 fixed vulnerabilities in Git. This update provides the corresponding
updates for Ubuntu 22.04 LTS.

Original advisory details:

俞晨东 discovered that Git incorrectly handled certain repository paths
in platforms with multiple users support. An attacker could possibly use
this issue to run arbitrary commands.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS git 1:2.34.1-1ubuntu1.1

Vulnerabilities 1

  • Medium 6.0
    CVE-2022-24765 Public exploit

    Uncontrolled search for the Git directory in Git for Windows

    Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, …

    git-for-windows git git git Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-24765