Skip to content
OpenAdvisories
Medium USN-5686-4 1 CVE

git vulnerability

Published Mar 28, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5686-1 fixed several vulnerabilities in Git. This update
provides the corresponding fix for CVE-2022-39253 on Ubuntu 16.04 ESM.

Original advisory details:

Cory Snider discovered that Git incorrectly handled certain symbolic links.
An attacker could possibly use this issue to cause an unexpected behaviour.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS git 1:2.7.4-0ubuntu1.10+esm6

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-39253 Public exploit

    Git subject to exposure of sensitive information via local clone of symbolic links

    Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (wh…

    git git git git Debian Ubuntu Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2022-39253