SUSE-SU-2023:0430-1

UNKNOWN

Security update for git

Published Feb 15, 2023

Modified 3 years ago

Fix available

Details

This update for git fixes the following issues:

CVE-2023-22490: Fixed incorrectly usable local clone optimization even when using a non-local transport (bsc#1208027).
CVE-2023-23946: Fixed issue where a path outside the working tree can be overwritten as the user who is running 'git apply' (bsc#1208028).

Affected Packages(15 packages)

git

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Module for Development Tools 15 SP4

Fixed in:

2.35.3-150300.10.24.1

git-arch

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-core

Fixed in:

2.35.3-150300.10.24.1

git-cvs

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-daemon

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-doc

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-email

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-gui

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-svn

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

git-web

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

2.35.3-150300.10.24.1

References

REPORT

https://bugzilla.suse.com/1208027

REPORT

https://bugzilla.suse.com/1208028

WEB

https://www.suse.com/security/cve/CVE-2023-22490

WEB

https://www.suse.com/security/cve/CVE-2023-23946

ADVISORY