CVE catalog

CVE-2022-39253

git: CVE-2022-39253

Severity: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Published: Oct 18, 2022, 5:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.48% · Oct 25, 2026

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and target of the clone are on the same volume), Git copies the contents of the source's `$GIT_DIR/objects` directory into the destination by either creating hardlinks to the source contents, or copying them (if hardlinks are disabled via `--no-hardlinks`). A malicious actor could convince a victim to clone a repository with a symbolic link pointing at sensitive information on the victim's machine. This can be done either by having the victim clone a malicious repository on the same machine, or having them clone a malicious repository embedded as a bare repository via a submodule from any source, provided they clone with the `--recurse-submodules` option. Git does not create symbolic links in the `$GIT_DIR/objects` directory. The problem has been patched in the versions published on 2022-10-18, and backported to v2.30.x. Potential workarounds: Avoid cloning untrusted repositories using the `--local` optimization when on a shared machine, either by passing the `--no-local` option to `git clone` or cloning from a URL that uses the `file://` scheme. Alternatively, avoid cloning repositories from untrusted sources with `--recurse-submodules` or run `git config --global protocol.file.allow user`.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	git	sid	`1:2.55.0-1`	fixed
Debian	git	forky	`1:2.53.0-1`	fixed
Debian	git	trixie	`1:2.47.3-0+deb13u1`	fixed
Debian	git	bookworm	`1:2.39.5-0+deb12u3`	fixed
Debian	git	bookworm-security	`1:2.39.5-0+deb12u2`	fixed
Ubuntu	git	pro	`1:2.5.0-1`	vulnerable
Ubuntu	git	pro	`1:2.6.2-1`	vulnerable
Ubuntu	git	pro	`1:2.6.3-1`	vulnerable
Ubuntu	git	pro	`1:2.6.4-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0~rc3-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0-1`	vulnerable
Ubuntu	git	pro	`1:2.7.3-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.2`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.4`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.5`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.6`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.7`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.8`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.9`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm4`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm5`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm6`	fixed
Opensuse	perl-Git-Repository	tumbleweed	`1.326.0-1.1`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.8`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.9`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.10`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.11`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.12`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.13`	fixed
Ubuntu	git	20.04	`1:2.20.1-2ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.4`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.5`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.6`	fixed
Ubuntu	git	22.04	`1:2.32.0-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.33.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.2`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.4`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.5`	fixed
Opensuse	docker-compose	tumbleweed	`2.12.2-1.1`	fixed
Suse	git	linux enterprise module for basesystem 15 sp3	`2.35.3-150300.10.18.1`	fixed
Suse	git	linux enterprise module for basesystem 15 sp4	`2.35.3-150300.10.18.1`	fixed
Suse	git	linux enterprise module for development tools 15 sp3	`2.35.3-150300.10.18.1`	fixed
Suse	git	linux enterprise module for development tools 15 sp4	`2.35.3-150300.10.18.1`	fixed
Opensuse	git	leap 15.3	`2.35.3-150300.10.18.1`	fixed
Opensuse	git	leap 15.4	`2.35.3-150300.10.18.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp1-ltss	`2.26.2-150000.47.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp2-ltss	`2.26.2-150000.47.1`	fixed
Suse	git	linux enterprise server 15 sp1-ltss	`2.26.2-150000.47.1`	fixed
Suse	git	linux enterprise server 15 sp2-ltss	`2.26.2-150000.47.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp1	`2.26.2-150000.47.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp2	`2.26.2-150000.47.1`	fixed
Suse	git	enterprise storage 7	`2.26.2-150000.47.1`	fixed
Opensuse	git	leap 15.4	`2.26.2-150000.47.1`	fixed
Opensuse	git	tumbleweed	`2.38.1-1.1`	fixed
Ubuntu	git	pro	`1:2.5.0-1`	vulnerable
Ubuntu	git	pro	`1:2.6.2-1`	vulnerable
Ubuntu	git	pro	`1:2.6.3-1`	vulnerable
Ubuntu	git	pro	`1:2.6.4-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0~rc3-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0-1`	vulnerable
Ubuntu	git	pro	`1:2.7.3-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.2`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.4`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.5`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.6`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.7`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.8`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.9`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm4`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm5`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm6`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.8`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.9`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.10`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.11`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.12`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.13`	fixed
Ubuntu	git	20.04	`1:2.20.1-2ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.4`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.5`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.6`	fixed
Ubuntu	git	22.04	`1:2.32.0-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.33.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.2`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.4`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.5`	fixed
Opensuse	reuse	tumbleweed	`1.1.2-1.1`	fixed
Suse	git	hpe helion openstack 8	`2.26.2-27.60.1`	fixed
Suse	git	openstack cloud 8	`2.26.2-27.60.1`	fixed
Suse	git	linux enterprise software development kit 12 sp5	`2.26.2-27.60.1`	fixed
Suse	git	linux enterprise server 12 sp5	`2.26.2-27.60.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp5	`2.26.2-27.60.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	git	source	sid	`1:2.38.1-1`	not yet assigned	Not reported	[1022046]
Debian	git	source	forky	`1:2.38.1-1`	not yet assigned	Not reported	[1022046]
Debian	git	source	trixie	`1:2.38.1-1`	not yet assigned	Not reported	[1022046]
Debian	git	source	bookworm	`1:2.38.1-1`	not yet assigned	Not reported	[1022046]
Ubuntu	git	deb	pro	`1:2.7.4-0ubuntu1.10+esm6`	Not reported	USN-5686-4	Not reported
Opensuse	perl-Git-Repository	rpm	tumbleweed	`1.326.0-1.1`	Not reported	OPENSUSE-SU-2026:10987-1	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.13`	Not reported	USN-5686-1	Not reported
Ubuntu	git	deb	20.04	`1:2.25.1-1ubuntu3.6`	Not reported	USN-5686-1	Not reported
Ubuntu	git	deb	22.04	`1:2.34.1-1ubuntu1.5`	Not reported	USN-5686-1	Not reported
Opensuse	docker-compose	rpm	tumbleweed	`2.12.2-1.1`	Not reported	OPENSUSE-SU-2024:12430-1	Not reported
Suse	git	rpm	linux enterprise module for basesystem 15 sp3	`2.35.3-150300.10.18.1`	Not reported	SUSE-SU-2022:3931-1	Not reported
Suse	git	rpm	linux enterprise module for basesystem 15 sp4	`2.35.3-150300.10.18.1`	Not reported	SUSE-SU-2022:3931-1	Not reported
Suse	git	rpm	linux enterprise module for development tools 15 sp3	`2.35.3-150300.10.18.1`	Not reported	SUSE-SU-2022:3931-1	Not reported
Suse	git	rpm	linux enterprise module for development tools 15 sp4	`2.35.3-150300.10.18.1`	Not reported	SUSE-SU-2022:3931-1	Not reported
Opensuse	git	rpm	leap 15.3	`2.35.3-150300.10.18.1`	Not reported	SUSE-SU-2022:3931-1	Not reported
Opensuse	git	rpm	leap 15.4	`2.35.3-150300.10.18.1`	Not reported	SUSE-SU-2022:3931-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp1-ltss	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp1-ltss	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp2-ltss	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp1	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp2	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Suse	git	rpm	enterprise storage 7	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Opensuse	git	rpm	leap 15.4	`2.26.2-150000.47.1`	Not reported	SUSE-SU-2023:0418-1	Not reported
Opensuse	git	rpm	tumbleweed	`2.38.1-1.1`	Not reported	OPENSUSE-SU-2024:12487-1	Not reported
Ubuntu	git	deb	pro	`1:2.7.4-0ubuntu1.10+esm6`	Not reported	UBUNTU-CVE-2022-39253	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.13`	Not reported	UBUNTU-CVE-2022-39253	Not reported
Ubuntu	git	deb	20.04	`1:2.25.1-1ubuntu3.6`	Not reported	UBUNTU-CVE-2022-39253	Not reported
Ubuntu	git	deb	22.04	`1:2.34.1-1ubuntu1.5`	Not reported	UBUNTU-CVE-2022-39253	Not reported
Opensuse	reuse	rpm	tumbleweed	`1.1.2-1.1`	Not reported	OPENSUSE-SU-2024:12851-1	Not reported
Suse	git	rpm	hpe helion openstack 8	`2.26.2-27.60.1`	Not reported	SUSE-SU-2022:4271-1	Not reported
Suse	git	rpm	openstack cloud 8	`2.26.2-27.60.1`	Not reported	SUSE-SU-2022:4271-1	Not reported
Suse	git	rpm	linux enterprise software development kit 12 sp5	`2.26.2-27.60.1`	Not reported	SUSE-SU-2022:4271-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp5	`2.26.2-27.60.1`	Not reported	SUSE-SU-2022:4271-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp5	`2.26.2-27.60.1`	Not reported	SUSE-SU-2022:4271-1	Not reported

[Debian bug #1022046]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[git-arch]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-core]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-credential-libsecret]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-cvs]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-daemon]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-doc]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · noarch · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-email]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-gui]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[gitk]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-p4]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-svn]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-web]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[perl-Git]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.38.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[git]Fixed
Details (4)
- 1:2.39.5-0+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
[git-all]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
[git-cvs]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
[git-daemon-run]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
[git-daemon-sysvinit]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
[git-doc]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
[git-email]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.38.1-1
  dsa · git · debian · bookworm

Next results

Observed: Oct 23, 2026, 6:29:37 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]