Linux · Security advisory · February 6, 2023

RHSA-2023:0610: Security update for 15 packages

RHSA-2023:0610, released February 6, 2023, fixes 2 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.5633
99th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
gitRHEL 80:2.31.1-3.el8_7
git-allRHEL 80:2.31.1-3.el8_7
git-coreRHEL 80:2.31.1-3.el8_7
git-core-docRHEL 80:2.31.1-3.el8_7
git-credential-libsecretRHEL 80:2.31.1-3.el8_7
git-daemonRHEL 80:2.31.1-3.el8_7
git-emailRHEL 80:2.31.1-3.el8_7
git-guiRHEL 80:2.31.1-3.el8_7
git-instawebRHEL 80:2.31.1-3.el8_7
git-subtreeRHEL 80:2.31.1-3.el8_7
git-svnRHEL 80:2.31.1-3.el8_7
gitkRHEL 80:2.31.1-3.el8_7
gitwebRHEL 80:2.31.1-3.el8_7
perl-GitRHEL 80:2.31.1-3.el8_7
perl-Git-SVNRHEL 80:2.31.1-3.el8_7

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-23521 GitHub: CVE-2022-23521 gitattributes parsing integer overflow 9.8 0.5633 Exploitation Less Likely
High CVE-2022-41903 Integer overflow in `git archive`, `git log --format` leading to RCE in git 9.8 0.4427 None reported
Showing 1 to 2 of 2 1