CVE-2023-23946
Fixed in a distro release EPSS 1%CVSS 6.2
Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6, v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.
Products: git
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | git | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-all | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-core | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-core-doc | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-credential-libsecret | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-daemon | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-email | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-gui | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-instaweb | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-subtree | 2.39.3-1.el8_8 |
| AlmaLinux 8 | git-svn | 2.39.3-1.el8_8 |
| AlmaLinux 8 | gitk | 2.39.3-1.el8_8 |
| AlmaLinux 8 | gitweb | 2.39.3-1.el8_8 |
| AlmaLinux 8 | perl-Git | 2.39.3-1.el8_8 |
| AlmaLinux 8 | perl-Git-SVN | 2.39.3-1.el8_8 |
| AlmaLinux 9 | git | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-all | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-core | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-core-doc | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-credential-libsecret | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-daemon | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-email | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-gui | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-instaweb | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-subtree | 2.39.3-1.el9_2 |
| AlmaLinux 9 | git-svn | 2.39.3-1.el9_2 |
| AlmaLinux 9 | gitk | 2.39.3-1.el9_2 |
| AlmaLinux 9 | gitweb | 2.39.3-1.el9_2 |
| AlmaLinux 9 | perl-Git | 2.39.3-1.el9_2 |
| AlmaLinux 9 | perl-Git-SVN | 2.39.3-1.el9_2 |
| Alpine 3.14 | git | 2.32.6-r0 |
| Alpine 3.15 | git | 2.34.7-r0 |
| Alpine 3.16 | git | 2.36.5-r0 |
| Alpine 3.17 | git | 2.38.4-r0 |
| Alpine 3.18 | git | 2.39.2-r0 |
| Alpine 3.19 | git | 2.39.2-r0 |
| Alpine 3.20 | git | 2.39.2-r0 |
| Alpine 3.21 | git | 2.39.2-r0 |
| Alpine 3.22 | git | 2.39.2-r0 |
| Alpine 3.23 | git | 2.39.2-r0 |
| Alpine 3.24 | git | 2.39.2-r0 |
| Amazon Linux 2 | git | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-all | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-core | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-core-doc | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-credential-libsecret | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-cvs | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-daemon | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-email | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-gui | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-instaweb | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-p4 | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-subtree | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | git-svn | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | gitk | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | gitweb | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | perl-Git | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2 | perl-Git-SVN | 2.39.2-1.amzn2.0.1 |
| Amazon Linux 2023 | git | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-all | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-core | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-core-doc | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-credential-libsecret | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-cvs | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-daemon | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-email | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-gui | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-instaweb | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-p4 | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-subtree | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | git-svn | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | gitk | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | gitweb | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | perl-Git | 2.39.2-1.amzn2023.0.1 |
| Amazon Linux 2023 | perl-Git-SVN | 2.39.2-1.amzn2023.0.1 |
| Chainguard | git | 2.39.2-r1 |
| Debian 10 | git | 1:2.20.1-2+deb10u8 |
| Debian 11 | git | 1:2.30.2-1+deb11u2 |
| Debian 12 | git | 1:2.39.2-1 |
| Debian 13 | git | 1:2.39.2-1 |
| Debian 14 | git | 1:2.39.2-1 |
| Red Hat Enterprise Linux 8 | git | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-all | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-core | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-core-debuginfo | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-core-doc | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-credential-libsecret | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-credential-libsecret-debuginfo | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-daemon | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-daemon-debuginfo | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-debuginfo | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-debugsource | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-email | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-gui | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-instaweb | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-subtree | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | git-svn | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | gitk | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | gitweb | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | perl-Git | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 8 | perl-Git-SVN | 0:2.39.3-1.el8_8 |
| Red Hat Enterprise Linux 9 | git | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-all | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-core | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-core-debuginfo | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-core-doc | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-credential-libsecret | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-credential-libsecret-debuginfo | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-daemon | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-daemon-debuginfo | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-debuginfo | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-debugsource | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-email | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-gui | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-instaweb | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-subtree | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | git-svn | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | gitk | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | gitweb | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | perl-Git | 0:2.39.3-1.el9_2 |
| Red Hat Enterprise Linux 9 | perl-Git-SVN | 0:2.39.3-1.el9_2 |
| Red Hat rhel eus 8.6 | git | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-all | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-core | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-core-debuginfo | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-core-doc | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-credential-libsecret | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-credential-libsecret-debuginfo | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-daemon | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-daemon-debuginfo | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-debuginfo | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-debugsource | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-email | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-gui | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-instaweb | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-subtree | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | git-svn | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | gitk | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | gitweb | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | perl-Git | 0:2.31.8-1.el8_6 |
| Red Hat rhel eus 8.6 | perl-Git-SVN | 0:2.31.8-1.el8_6 |
| Rocky Linux 8 | git | 0:2.39.3-1.el8_8 |
| SUSE Enterprise Storage 7 | git | 2.26.2-150000.47.1 |
| SUSE Enterprise Storage 7.1 | git | 2.35.3-150300.10.24.1 |
| SUSE HPE Helion OpenStack 8 | git | 2.26.2-27.66.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | git | 2.26.2-150000.47.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | git | 2.26.2-150000.47.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | git | 2.26.2-27.66.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | git | 2.26.2-27.66.1 |
| SUSE Linux Enterprise Server 12 SP5 | git | 2.26.2-27.66.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | git | 2.26.2-150000.47.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | git | 2.26.2-150000.47.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | git | 2.26.2-27.66.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | git | 2.26.2-27.66.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | git | 2.26.2-150000.47.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | git | 2.26.2-150000.47.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | git | 2.35.3-150300.10.24.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | git | 2.26.2-27.66.1 |
| SUSE Manager Proxy 4.2 | git | 2.35.3-150300.10.24.1 |
| SUSE Manager Retail Branch Server 4.2 | git | 2.35.3-150300.10.24.1 |
| SUSE Manager Server 4.2 | git | 2.35.3-150300.10.24.1 |
| SUSE OpenStack Cloud 8 | git | 2.26.2-27.66.1 |
| SUSE OpenStack Cloud 9 | git | 2.26.2-27.66.1 |
| SUSE OpenStack Cloud Crowbar 9 | git | 2.26.2-27.66.1 |
| Ubuntu 18.04 LTS | git | 1:2.17.1-1ubuntu0.16 |
| Ubuntu 20.04 LTS | git | 1:2.25.1-1ubuntu3.10 |
| Ubuntu 22.04 LTS | git | 1:2.34.1-1ubuntu1.8 |
| Ubuntu Pro 16.04 LTS | git | 1:2.7.4-0ubuntu1.10+esm5 |
| Wolfi | git | 2.39.2-r1 |
| openSUSE Leap 15.4 | git | 2.35.3-150300.10.24.1 |
| openSUSE Leap 15.4 | git | 2.26.2-150000.47.1 |
| openSUSE Tumbleweed | git | 2.39.2-1.1 |