{"id":"CLSA-2023-1677096675","summary":"Fix of 5 CVEs","details":"\n   * SECURITY UPDATE: out-of-bounds write caused by integer overflow\n     - debian/patches/CVE-2022-41903.patch: use 'size_t' instead of\n       'int' to track the string lengths and so allow \u003e2GB input sizes.\n     - CVE-2022-41903\n     - t-mark-submodule-clean-test-as-known-failure.patch: mark\n       submodule clean test as known failure and so pass 'make test'.\n   * SECURITY UPDATE: possible cross-protocol requests\n     - debian/patches/CVE-2021-40330.patch: forbid newlines in host\n       and path.\n     - CVE-2021-40330\n   * SECURITY UPDATE: out-of-bounds write and possible RCE caused by\n     integer overflow\n     - debian/patches/CVE-2022-39260.patch: reject too long command\n       line strings in split_cmdline().\n     - CVE-2022-39260\n   * SECURITY UPDATE: out-of-bounds write when reading an unreasonably\n     large .gitattributes file\n     - debian/patches/CVE-2021-23521.patch: implement line and overall\n       size checks for .gitattributes files.\n     - CVE-2021-23521\n   * SECURITY UPDATE: possible write outside of the repository's\n     working directory\n     - debian/patches/CVE-2023-23946.patch: prevent git-apply from\n       writing behind newly created symbolic links.\n     - CVE-2023-23946","modified":"2026-06-04T10:04:23.420268624Z","published":"2023-02-22T20:11:15Z","upstream":["CVE-2021-23521","CVE-2021-40330","CVE-2022-39260","CVE-2022-41903","CVE-2023-23946"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1677096675"}],"affected":[{"package":{"name":"git","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-all","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-all?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-arch","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-arch?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-core","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-core?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-cvs","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-cvs?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-daemon-run","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-daemon-run?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-daemon-sysvinit","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-daemon-sysvinit?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-el","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-el?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-email","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-email?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-gui","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-gui?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-man","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-man?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-mediawiki","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-mediawiki?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"git-svn","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-svn?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"gitk","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/gitk?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}},{"package":{"name":"gitweb","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/gitweb?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json"}}],"schema_version":"1.7.5"}