Skip to content
OpenAdvisories
High USN-5686-2 1 CVE

git vulnerability

Published Nov 17, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5686-1 fixed several vulnerabilities in Git. This update
provides the corresponding fix for CVE-2022-39260 on Ubuntu 16.04 ESM.

Original advisory details:

Kevin Backhouse discovered that Git incorrectly handled certain command
strings. An attacker could possibly use this issue to cause a crash or
arbitrary code execution.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS git 1:2.7.4-0ubuntu1.10+esm3

Vulnerabilities 1

  • High 8.5
    CVE-2022-39260

    Git vulnerable to Remote Code Execution via Heap overflow in `git shell`

    Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and…

    git git git git Debian Ubuntu Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2022-39260