Summary
Carlo Marcelo Arenas Belón discovered that an issue related to CVE-2022-24765
still affected Git. An attacker could possibly use this issue to
run arbitrary commands as administrator. (CVE-2022-29187)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | git | 1:2.17.1-1ubuntu0.12 |
| Ubuntu · 20.04 LTS 20.04:LTS | git | 1:2.25.1-1ubuntu3.5 |
| Ubuntu · 22.04 LTS 22.04:LTS | git | 1:2.34.1-1ubuntu1.4 |
Vulnerabilities 1
-
High 7.8
Bypass of safe.directory protections in Git
Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported …
References
-
report
https://ubuntu.com/security/CVE-2022-29187