# CVE-2023-22490: GitHub: CVE-2023-22490 mingit Information Disclosure Vulnerability

CVE-2023-22490 is fixed in 28 products on 2 platforms, first by Git 2.39.2, released February 14, 2023. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2023-22490
- Priority: Routine
- CVSS: 5.5 (Important)
- EPSS: 0.0071
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation Less Likely
- Published: Feb 14, 2023
- Weakness: CWE-59: Improper Link Resolution Before File Access ('Link Following')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-22490

## Description

Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar manner as CVE-2022-39253.  A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5 v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`. Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it does not contain suspicious module URLs.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Git | 2.39.2 | [Git 2.39.2](https://patchblox.com/security/data/fix/windows-app/git.git-2.39.2.md) | Feb 14, 2023 |
| Linux | git Debian 11.6 (bullseye) | 1:2.30.2-1+deb11u2 | [DSA-5357-1](https://patchblox.com/security/data/fix/linux/dsa-5357-1.md) | Feb 23, 2023 |
| Linux | git Debian 12.15 (bookworm) | 1:2.39.2-1 | [DEBIAN-CVE-2023-22490](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22490.md) | Feb 14, 2023 |
| Linux | git Debian 13.5 (trixie) | 1:2.39.2-1 | [DEBIAN-CVE-2023-22490](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22490.md) | Feb 14, 2023 |
| Linux | git Debian 14 | 1:2.39.2-1 | [DEBIAN-CVE-2023-22490](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22490.md) | Feb 14, 2023 |
| Linux | git RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git rocky 8 | 0:2.39.3-1.el8_8 | [RLSA-2023:3246](https://patchblox.com/security/data/fix/linux/rlsa-2023-3246.md) | May 25, 2023 |
| Linux | git-all RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-all RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-all Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-all 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-all Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-all 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-all-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-all Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-all 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-all-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-all almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-all almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-all amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-all ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-all ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-core RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-core ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-core ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-core-debuginfo amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-core-doc RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core-doc RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core-doc almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core-doc almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core-doc amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-core-doc ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-core-doc ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-credential-libsecret RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-credential-libsecret RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-credential-libsecret almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-credential-libsecret almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-credential-libsecret amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-credential-libsecret ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-credential-libsecret ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-credential-libsecret-debuginfo amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-cvs Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-cvs 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-cvs Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-cvs 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-cvs-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-cvs Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-cvs 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-cvs-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-cvs amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-daemon RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-daemon RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-daemon almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-daemon almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-daemon amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-daemon ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-daemon ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-daemon-debuginfo amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-daemon-run Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-daemon-run 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-daemon-run Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-daemon-run 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-run-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-daemon-run Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-daemon-run 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-run-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-daemon-sysvinit Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-daemon-sysvinit 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-daemon-sysvinit Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-daemon-sysvinit 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-sysvinit-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-daemon-sysvinit Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-daemon-sysvinit 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-sysvinit-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-debuginfo amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-debugsource amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-el Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-el 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-el Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-el 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-el-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-email RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-email RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-email Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-email 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-email Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-email 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-email-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-email Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-email 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-email-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-email almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-email almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-email amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-email ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-email ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-gui RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-gui RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-gui Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-gui 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-gui Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-gui 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-gui-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-gui Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-gui 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-gui-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-gui almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-gui almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-gui amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-gui ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-gui ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-instaweb RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-instaweb RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-instaweb almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-instaweb almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-instaweb amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-instaweb ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-instaweb ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-man Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-man 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-man Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-man 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-man-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-man Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-man 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-man-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-mediawiki Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-mediawiki 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-mediawiki Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-mediawiki 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-mediawiki-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-mediawiki Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-mediawiki 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-mediawiki-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-p4 amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-subtree RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-subtree RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-subtree almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-subtree almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-subtree amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-subtree ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-subtree ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-svn RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-svn RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-svn Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [git-svn 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | git-svn Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [git-svn 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-svn-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | git-svn Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [git-svn 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-svn-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | git-svn almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-svn almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-svn amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | git-svn ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-svn ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | gitk RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | gitk RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | gitk Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [gitk 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | gitk Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [gitk 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitk-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | gitk Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [gitk 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitk-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | gitk almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | gitk almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | gitk amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | gitk ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | gitk ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | gitweb RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | gitweb RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | gitweb Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.16 | [gitweb 1:2.17.1-1ubuntu0.16](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.16.md) | Feb 14, 2023 |
| Linux | gitweb Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.10 | [gitweb 1:2.25.1-1ubuntu3.10](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitweb-1-2.25.1-1ubuntu3.10.md) | Feb 14, 2023 |
| Linux | gitweb Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.8 | [gitweb 1:2.34.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitweb-1-2.34.1-1ubuntu1.8.md) | Feb 14, 2023 |
| Linux | gitweb almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | gitweb almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | gitweb amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | gitweb ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | gitweb ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | perl-Git RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | perl-Git ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | perl-Git ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | perl-Git-SVN RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git-SVN RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git-SVN almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git-SVN almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git-SVN amzn 2023 | 2.39.2-1.amzn2023.0.1 | [ALAS2023-2023-113](https://patchblox.com/security/data/fix/linux/alas2023-2023-113.md) | Feb 21, 2023 |
| Linux | perl-Git-SVN ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | perl-Git-SVN ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.