# CVE-2022-39253: GitHub: CVE-2022-39253 Local clone optimization dereferences symbolic links by default

CVE-2022-39253 is fixed in 28 products on 2 platforms, first by Git 2.38.0, released October 3, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-39253
- Priority: Routine
- CVSS: 5.5 (Important)
- EPSS: 0.0148
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation Less Likely
- Published: Oct 18, 2022
- Weakness: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-39253

## Description

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and target of the clone are on the same volume), Git copies the contents of the source's `$GIT_DIR/objects` directory into the destination by either creating hardlinks to the source contents, or copying them (if hardlinks are disabled via `--no-hardlinks`). A malicious actor could convince a victim to clone a repository with a symbolic link pointing at sensitive information on the victim's machine. This can be done either by having the victim clone a malicious repository on the same machine, or having them clone a malicious repository embedded as a bare repository via a submodule from any source, provided they clone with the `--recurse-submodules` option. Git does not create symbolic links in the `$GIT_DIR/objects` directory. The problem has been patched in the versions published on 2022-10-18, and backported to v2.30.x. Potential workarounds: Avoid cloning untrusted repositories using the `--local` optimization when on a shared machine, either by passing the `--no-local` option to `git clone` or cloning from a URL that uses the `file://` scheme. Alternatively, avoid cloning repositories from untrusted sources with `--recurse-submodules` or run `git config --global protocol.file.allow user`.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Git | 2.38.0 | [Git 2.38.0](https://patchblox.com/security/data/fix/windows-app/git.git-2.38.0.md) | Oct 3, 2022 |
| Linux | git Debian 12.15 (bookworm) | 1:2.38.1-1 | [DEBIAN-CVE-2022-39253](https://patchblox.com/security/data/fix/linux/debian-cve-2022-39253.md) | Oct 19, 2022 |
| Linux | git Debian 13.5 (trixie) | 1:2.38.1-1 | [DEBIAN-CVE-2022-39253](https://patchblox.com/security/data/fix/linux/debian-cve-2022-39253.md) | Oct 19, 2022 |
| Linux | git Debian 14 | 1:2.38.1-1 | [DEBIAN-CVE-2022-39253](https://patchblox.com/security/data/fix/linux/debian-cve-2022-39253.md) | Oct 19, 2022 |
| Linux | git RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-all RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-all RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-all Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-all 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-all Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-all 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-all-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-all Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-all 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-all-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-all almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-all almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-all amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-all ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-all ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-core RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-core RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-core almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-core almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-core amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-core ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-core ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-core-debuginfo amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-core-doc RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-core-doc RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-core-doc almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-core-doc almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-core-doc amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-core-doc ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-core-doc ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-credential-libsecret RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-credential-libsecret RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-credential-libsecret almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-credential-libsecret almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-credential-libsecret amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-credential-libsecret ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-credential-libsecret ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-credential-libsecret-debuginfo amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-cvs Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-cvs 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-cvs Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-cvs 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-cvs-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-cvs Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-cvs 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-cvs-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-cvs amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-daemon RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-daemon RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-daemon almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-daemon almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-daemon amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-daemon ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-daemon ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-daemon-debuginfo amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-daemon-run Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-daemon-run 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-daemon-run Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-daemon-run 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-run-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-daemon-run Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-daemon-run 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-run-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-daemon-sysvinit Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-daemon-sysvinit 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-daemon-sysvinit Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-daemon-sysvinit 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-sysvinit-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-daemon-sysvinit Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-daemon-sysvinit 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-sysvinit-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-debuginfo amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-debugsource amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-el Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-el 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-el Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-el 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-el-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-email RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-email RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-email Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-email 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-email Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-email 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-email-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-email Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-email 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-email-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-email almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-email almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-email amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-email ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-email ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-gui RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-gui RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-gui Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-gui 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-gui Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-gui 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-gui-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-gui Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-gui 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-gui-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-gui almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-gui almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-gui amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-gui ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-gui ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-instaweb RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-instaweb RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-instaweb almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-instaweb almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-instaweb amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-instaweb ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-instaweb ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-man Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-man 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-man Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-man 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-man-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-man Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-man 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-man-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-mediawiki Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-mediawiki 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-mediawiki Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-mediawiki 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-mediawiki-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-mediawiki Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-mediawiki 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-mediawiki-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-p4 amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-subtree RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-subtree RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-subtree almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-subtree almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-subtree amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-subtree ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-subtree ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | git-svn RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | git-svn RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | git-svn Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [git-svn 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | git-svn Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [git-svn 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-svn-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | git-svn Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [git-svn 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-svn-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | git-svn almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | git-svn almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | git-svn amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | git-svn ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | git-svn ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | gitk RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | gitk RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | gitk Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [gitk 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | gitk Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [gitk 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitk-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | gitk Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [gitk 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitk-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | gitk almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | gitk almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | gitk amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | gitk ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | gitk ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | gitweb RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | gitweb RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | gitweb Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.13 | [gitweb 1:2.17.1-1ubuntu0.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.13.md) | Oct 18, 2022 |
| Linux | gitweb Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.6 | [gitweb 1:2.25.1-1ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitweb-1-2.25.1-1ubuntu3.6.md) | Oct 18, 2022 |
| Linux | gitweb Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.5 | [gitweb 1:2.34.1-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitweb-1-2.34.1-1ubuntu1.5.md) | Oct 18, 2022 |
| Linux | gitweb almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | gitweb almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | gitweb amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | gitweb ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | gitweb ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | perl-Git RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | perl-Git RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | perl-Git almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | perl-Git almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | perl-Git amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | perl-Git ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | perl-Git ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |
| Linux | perl-Git-SVN RHEL 8 | 0:2.39.1-1.el8 | [RHSA-2023:2859](https://patchblox.com/security/data/fix/linux/rhsa-2023-2859.md) | May 16, 2023 |
| Linux | perl-Git-SVN RHEL 9 | 0:2.39.1-1.el9 | [RHSA-2023:2319](https://patchblox.com/security/data/fix/linux/rhsa-2023-2319.md) | May 9, 2023 |
| Linux | perl-Git-SVN almalinux 8 | 2.39.1-1.el8 | [ALSA-2023:2859](https://patchblox.com/security/data/fix/linux/alsa-2023-2859.md) | May 16, 2023 |
| Linux | perl-Git-SVN almalinux 9 | 2.39.1-1.el9 | [ALSA-2023:2319](https://patchblox.com/security/data/fix/linux/alsa-2023-2319.md) | May 9, 2023 |
| Linux | perl-Git-SVN amzn 2023 | 2.39.1-1.amzn2023.0.2 | [ALAS2023-2023-065](https://patchblox.com/security/data/fix/linux/alas2023-2023-065.md) | Feb 17, 2023 |
| Linux | perl-Git-SVN ol 8 | 0:2.39.1-1.el8 | [ELSA-2023-2859](https://patchblox.com/security/data/fix/linux/elsa-2023-2859.md) | May 23, 2023 |
| Linux | perl-Git-SVN ol 9 | 0:2.39.1-1.el9 | [ELSA-2023-2319](https://patchblox.com/security/data/fix/linux/elsa-2023-2319.md) | May 15, 2023 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.