# go-git security updates

Patch Radar has 2 security fixes for go-git, closing 5 CVEs. The newest is go-git 5.4.2-3ubuntu0.1~esm1 (5.4.2-3ubuntu0.1~esm1), released February 9, 2026.

- Web page: https://patchblox.com/security/product/linux/go-git
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [go-git 5.4.2-3ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-go-git-5.4.2-3ubuntu0.1-esm1.md) | Feb 9, 2026 | Ubuntu 22.04.1 LTS (jammy) 5.4.2-3ubuntu0.1~esm1 | Urgent | 5 | 0 |
| [go-git 5.4.2-4ubuntu0.24.04.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-go-git-5.4.2-4ubuntu0.24.04.3-esm2.md) | Feb 9, 2026 | Ubuntu 24.04.5 LTS (noble) 5.4.2-4ubuntu0.24.04.3+esm2 | Urgent | 5 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo