# CVE-2023-29007: GitHub: CVE-2023-29007 Arbitrary configuration injection via `git submodule deinit`

CVE-2023-29007 is fixed in 28 products on 2 platforms, first by Git 2.40.1, released April 25, 2023. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2023-29007
- Priority: High
- CVSS: 7.8 (Important)
- EPSS: 0.0561
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation Less Likely
- Published: Apr 25, 2023
- Weakness: Improper Neutralization of Special Elements used in a Command ('Command Injection')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29007

## Description

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Git | 2.40.1 | [Git 2.40.1](https://patchblox.com/security/data/fix/windows-app/git.git-2.40.1.md) | Apr 25, 2023 |
| Linux | git Debian 12.15 (bookworm) | 1:2.39.5-0+deb12u1 | [DEBIAN-CVE-2023-29007](https://patchblox.com/security/data/fix/linux/debian-cve-2023-29007.md) | Apr 25, 2023 |
| Linux | git Debian 13.5 (trixie) | 1:2.40.1-1 | [DEBIAN-CVE-2023-29007](https://patchblox.com/security/data/fix/linux/debian-cve-2023-29007.md) | Apr 25, 2023 |
| Linux | git Debian 14 | 1:2.40.1-1 | [DEBIAN-CVE-2023-29007](https://patchblox.com/security/data/fix/linux/debian-cve-2023-29007.md) | Apr 25, 2023 |
| Linux | git RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git rocky 8 | 0:2.39.3-1.el8_8 | [RLSA-2023:3246](https://patchblox.com/security/data/fix/linux/rlsa-2023-3246.md) | May 25, 2023 |
| Linux | git-all RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-all RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-all Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-all 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-all Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-all 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-all-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-all Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-all 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-all-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-all almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-all almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-all amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-all ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-all ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-core RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-core ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-core ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-core-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-core-doc RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core-doc RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core-doc almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-core-doc almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-core-doc amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-core-doc ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-core-doc ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-credential-libsecret RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-credential-libsecret RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-credential-libsecret almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-credential-libsecret almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-credential-libsecret amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-credential-libsecret ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-credential-libsecret ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-credential-libsecret-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-cvs Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-cvs 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-cvs Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-cvs 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-cvs-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-cvs Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-cvs 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-cvs-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-cvs amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-daemon RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-daemon RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-daemon almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-daemon almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-daemon amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-daemon ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-daemon ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-daemon-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-daemon-run Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-daemon-run 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-daemon-run Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-daemon-run 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-run-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-daemon-run Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-daemon-run 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-run-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-daemon-sysvinit Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-daemon-sysvinit 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-daemon-sysvinit Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-daemon-sysvinit 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-sysvinit-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-daemon-sysvinit Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-daemon-sysvinit 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-sysvinit-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-debugsource amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-el Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-el 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-el Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-el 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-el-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-email RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-email RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-email Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-email 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-email Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-email 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-email-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-email Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-email 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-email-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-email almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-email almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-email amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-email ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-email ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-gui RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-gui RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-gui Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-gui 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-gui Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-gui 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-gui-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-gui Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-gui 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-gui-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-gui almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-gui almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-gui amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-gui ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-gui ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-instaweb RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-instaweb RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-instaweb almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-instaweb almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-instaweb amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-instaweb ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-instaweb ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-man Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-man 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-man Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-man 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-man-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-man Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-man 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-man-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-mediawiki Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-mediawiki 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-mediawiki Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-mediawiki 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-mediawiki-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-mediawiki Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-mediawiki 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-mediawiki-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-p4 amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-subtree RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-subtree RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-subtree almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-subtree almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-subtree amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-subtree ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-subtree ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | git-svn RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | git-svn RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | git-svn Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [git-svn 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | git-svn Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [git-svn 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-svn-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | git-svn Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [git-svn 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-svn-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | git-svn almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | git-svn almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | git-svn amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | git-svn ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | git-svn ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | gitk RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | gitk RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | gitk Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [gitk 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | gitk Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [gitk 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitk-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | gitk Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [gitk 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitk-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | gitk almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | gitk almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | gitk amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | gitk ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | gitk ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | gitweb RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | gitweb RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | gitweb Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18 | [gitweb 1:2.17.1-1ubuntu0.18](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.18.md) | Apr 25, 2023 |
| Linux | gitweb Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.11 | [gitweb 1:2.25.1-1ubuntu3.11](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitweb-1-2.25.1-1ubuntu3.11.md) | Apr 25, 2023 |
| Linux | gitweb Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.9 | [gitweb 1:2.34.1-1ubuntu1.9](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitweb-1-2.34.1-1ubuntu1.9.md) | Apr 25, 2023 |
| Linux | gitweb almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | gitweb almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | gitweb amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | gitweb ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | gitweb ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | perl-Git RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | perl-Git ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | perl-Git ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |
| Linux | perl-Git-SVN RHEL 8 | 0:2.39.3-1.el8_8 | [RHSA-2023:3246](https://patchblox.com/security/data/fix/linux/rhsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git-SVN RHEL 9 | 0:2.39.3-1.el9_2 | [RHSA-2023:3245](https://patchblox.com/security/data/fix/linux/rhsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git-SVN almalinux 8 | 2.39.3-1.el8_8 | [ALSA-2023:3246](https://patchblox.com/security/data/fix/linux/alsa-2023-3246.md) | May 22, 2023 |
| Linux | perl-Git-SVN almalinux 9 | 2.39.3-1.el9_2 | [ALSA-2023:3245](https://patchblox.com/security/data/fix/linux/alsa-2023-3245.md) | May 22, 2023 |
| Linux | perl-Git-SVN amzn 2023 | 2.40.1-1.amzn2023.0.1 | [ALAS2023-2023-180](https://patchblox.com/security/data/fix/linux/alas2023-2023-180.md) | May 11, 2023 |
| Linux | perl-Git-SVN ol 8 | 0:2.39.3-1.el8_8 | [ELSA-2023-3246](https://patchblox.com/security/data/fix/linux/elsa-2023-3246.md) | May 24, 2023 |
| Linux | perl-Git-SVN ol 9 | 0:2.39.3-1.el9_2 | [ELSA-2023-3245](https://patchblox.com/security/data/fix/linux/elsa-2023-3245.md) | May 23, 2023 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.