Ubuntu
git package

CVE-2022-23521 & CVE-2022-41903 git update via ESM

Asked by Petri Haikonen

I've noticed that security update for CVE-2022-23521 & CVE-2022-41903 has landed for 18.04, 20,04 and 22.04, but it hasn't landed for 16.04 via ESM. Is a patched version going to be released for ESM customers?

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu git Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said : 		#1

According to https://ubuntu.com/security/cves?package=git it seems that no update is planned.
see also https://ubuntu.com/security/CVE-2022-41903
and https://ubuntu.com/security/CVE-2022-23521

Revision history for this message
Bernard Stafford (bernard010) said (last edit ): 		#2

https://ubuntu.com/security/CVE-2022-23521
https://ubuntu.com/security/notices/USN-5810-1
Same info as the above post...
https://ubuntu.com/security/CVE-2022-41903
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41903
https://ubuntu.com/security/notices/USN-5810-1
The problem can be corrected by updating your system to the following package versions:

Can you help with this problem?

Provide an answer of your own, or ask Petri Haikonen for more information if necessary.

To post a message you must log in.