USN-5376-1 fixed vulnerabilities in Git, some patches were missing to properly fix the issue. This update fixes the problem.
Original advisory details:
俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue to run arbitrary commands.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "git", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-all", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-cvs", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-daemon-run", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-dbgsym", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-doc", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-el", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-email", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-gui", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-man", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-mediawiki", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "git-svn", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "gitk", "binary_version": "1:2.17.1-1ubuntu0.11" }, { "binary_name": "gitweb", "binary_version": "1:2.17.1-1ubuntu0.11" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "git", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-all", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-cvs", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-daemon-run", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-dbgsym", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-doc", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-el", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-email", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-gui", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-man", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-mediawiki", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "git-svn", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "gitk", "binary_version": "1:2.25.1-1ubuntu3.4" }, { "binary_name": "gitweb", "binary_version": "1:2.25.1-1ubuntu3.4" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "git", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-all", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-cvs", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-daemon-run", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-dbgsym", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-doc", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-email", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-gui", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-man", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-mediawiki", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "git-svn", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "gitk", "binary_version": "1:2.34.1-1ubuntu1.2" }, { "binary_name": "gitweb", "binary_version": "1:2.34.1-1ubuntu1.2" } ] }