CVE-2022-39260

git: Git is a distributed revision control system with a decentralized architecture

CVE-2022-39260 is fixed in 27 products on 1 platform, first by git 1:2.17.1-1ubuntu0.13, released October 18, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0399
90th percentile

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree (CVE-2022-24765) * git: Bypass of safe.directory protections (CVE-2022-29187) * git: exposure of sensitive information to a malicious actor (CVE-2022-39253) * git: git shell function that splits command arguments can lead to arbitrary heap writes. (CVE-2022-39260) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
git · Debian 12.15 (bookworm) 1:2.38.1-1 DEBIAN-CVE-2022-39260 Oct 19, 2022
git · Debian 13.5 (trixie) 1:2.38.1-1 DEBIAN-CVE-2022-39260 Oct 19, 2022
git · Debian 14 1:2.38.1-1 DEBIAN-CVE-2022-39260 Oct 19, 2022
git · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-all · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-all · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-all · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-all 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-all · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-all 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-all · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-all 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-all · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-all · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-all · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-all · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-all · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-core · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-core · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-core · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-core · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-core · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-core · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-core · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-core-debuginfo · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-core-doc · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-core-doc · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-core-doc · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-core-doc · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-core-doc · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-core-doc · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-core-doc · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-credential-libsecret · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-credential-libsecret · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-credential-libsecret · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-credential-libsecret · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-credential-libsecret · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-credential-libsecret · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-credential-libsecret · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-credential-libsecret-debuginfo · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-cvs · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-cvs 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-cvs · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-cvs 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-cvs · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-cvs 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-cvs · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-daemon · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-daemon · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-daemon · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-daemon · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-daemon · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-daemon · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-daemon · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-daemon-debuginfo · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-daemon-run · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-daemon-run 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-daemon-run · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-daemon-run 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-daemon-run · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-daemon-run 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-daemon-sysvinit · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-daemon-sysvinit 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-daemon-sysvinit · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-daemon-sysvinit 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-daemon-sysvinit · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-daemon-sysvinit 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-debuginfo · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-debugsource · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-el · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-el 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-el · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-el 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-email · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-email · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-email · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-email 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-email · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-email 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-email · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-email 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-email · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-email · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-email · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-email · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-email · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-gui · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-gui · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-gui · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-gui 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-gui · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-gui 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-gui · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-gui 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-gui · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-gui · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-gui · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-gui · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-gui · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-instaweb · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-instaweb · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-instaweb · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-instaweb · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-instaweb · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-instaweb · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-instaweb · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-man · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-man 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-man · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-man 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-man · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-man 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-mediawiki · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-mediawiki 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-mediawiki · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-mediawiki 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-mediawiki · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-mediawiki 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-p4 · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-subtree · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-subtree · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-subtree · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-subtree · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-subtree · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-subtree · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-subtree · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
git-svn · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
git-svn · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
git-svn · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 git-svn 1:2.17.1-1ubuntu0.13 Oct 18, 2022
git-svn · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 git-svn 1:2.25.1-1ubuntu3.6 Oct 18, 2022
git-svn · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 git-svn 1:2.34.1-1ubuntu1.5 Oct 18, 2022
git-svn · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
git-svn · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
git-svn · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
git-svn · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
git-svn · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
gitk · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
gitk · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
gitk · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 gitk 1:2.17.1-1ubuntu0.13 Oct 18, 2022
gitk · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 gitk 1:2.25.1-1ubuntu3.6 Oct 18, 2022
gitk · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 gitk 1:2.34.1-1ubuntu1.5 Oct 18, 2022
gitk · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
gitk · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
gitk · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
gitk · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
gitk · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
gitweb · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
gitweb · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
gitweb · Ubuntu 18.04.6 LTS (bionic) 1:2.17.1-1ubuntu0.13 gitweb 1:2.17.1-1ubuntu0.13 Oct 18, 2022
gitweb · Ubuntu 20.04 LTS (focal) 1:2.25.1-1ubuntu3.6 gitweb 1:2.25.1-1ubuntu3.6 Oct 18, 2022
gitweb · Ubuntu 22.04.1 LTS (jammy) 1:2.34.1-1ubuntu1.5 gitweb 1:2.34.1-1ubuntu1.5 Oct 18, 2022
gitweb · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
gitweb · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
gitweb · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
gitweb · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
gitweb · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
perl-Git · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
perl-Git · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
perl-Git · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
perl-Git · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
perl-Git · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
perl-Git · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
perl-Git · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023
perl-Git-SVN · RHEL 8 0:2.39.1-1.el8 RHSA-2023:2859 May 16, 2023
perl-Git-SVN · RHEL 9 0:2.39.1-1.el9 RHSA-2023:2319 May 9, 2023
perl-Git-SVN · almalinux 8 2.39.1-1.el8 ALSA-2023:2859 May 16, 2023
perl-Git-SVN · almalinux 9 2.39.1-1.el9 ALSA-2023:2319 May 9, 2023
perl-Git-SVN · amzn 2023 2.39.1-1.amzn2023.0.2 ALAS2023-2023-065 Feb 17, 2023
perl-Git-SVN · ol 8 0:2.39.1-1.el8 ELSA-2023-2859 May 23, 2023
perl-Git-SVN · ol 9 0:2.39.1-1.el9 ELSA-2023-2319 May 15, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.