A git security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address several vulnerabilities.
ELA-808-1 git security update
Package : git
ELA-808-1 git security update
Version : 1:2.1.4-2.1+deb8u13 (jessie), 1:2.11.0-3+deb9u10 (stretch)
Related CVEs :
CVE-2023-22490
CVE-2023-23946
Several vulnerabilities have been discovered in git, a fast, scalable and distributed revision control system.
CVE-2023-22490
yvvdwf found a data exfiltration vulnerability while performing a local clone from a malicious repository even using a non-local transport.
CVE-2023-23946
Joern Schneeweisz found a path traversal vulnerbility in git-apply that a path outside the working tree can be overwritten as the acting user.
