Linux · Security advisory · February 23, 2023

DSA-5357-1: git security update

DSA-5357-1, released February 23, 2023, fixes 1 CVE in git (version 1:2.30.2-1+deb11u2). None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0071

53rd percentile

Fixed package versions

Product	Release	Fixed in
git	Debian 11.6 (bullseye)	1:2.30.2-1+deb11u2

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2023-22490	GitHub: CVE-2023-22490 mingit Information Disclosure Vulnerability		5.5	0.0071	Exploitation Less Likely

Also fixes CVE-2023-22490

RHSA-2023:3245
git, git-all, git-core and 12 more on RHEL 9
RHSA-2023:3246
git, git-all, git-core and 12 more on RHEL 8
git 1:2.17.1-1ubuntu0.16
git on Ubuntu 18.04.6 LTS (bionic)
git 1:2.25.1-1ubuntu3.10
git on Ubuntu 20.04 LTS (focal)
git 1:2.34.1-1ubuntu1.8
git on Ubuntu 22.04.1 LTS (jammy)
git-all 1:2.17.1-1ubuntu0.16
git-all on Ubuntu 18.04.6 LTS (bionic)
git-all 1:2.25.1-1ubuntu3.10
git-all on Ubuntu 20.04 LTS (focal)
git-all 1:2.34.1-1ubuntu1.8
git-all on Ubuntu 22.04.1 LTS (jammy)

Vendor advisory

https://security-tracker.debian.org/tracker/CVE-2023-22490

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo