[Bug 1969805] Re: [Security][Jammy] Please update Git to v2.34.2 (CVE-2022-24765)

[Matthieu Baerts]

Hi Marc,

Thank you for the quick reply!

OK, it was then just a technical/admin issue: it was not forgotten :)
All good then!

Feel free to change the Importance. I marked it as Critical as it is a
security issue but I see it is categorised as "Medium":
https://ubuntu.com/security/CVE-2022-24765

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-24765

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to git in Ubuntu.
https://bugs.launchpad.net/bugs/1969805

Title:
  [Security][Jammy] Please update Git to v2.34.2 (CVE-2022-24765)

Status in git package in Ubuntu:
  New

Bug description:
  Hello,

  This is not new, Git developers have been recently published a few
  maintenance releases to address the security issues described in
  CVE-2022-24765.

  https://lore.kernel.org/git/xmqqv8veb5i6.fsf@gitster.g/

  The fix annoyed me because it broke a few CI jobs but that's not the
  point here: I noticed earlier this week there was no update for Ubuntu
  22.04 Jammy. Is it possible to also add this security update in Jammy?

  
  Just to know, I'm a bit surprised all other supported Ubuntu versions have been updated with a fix but not this one. Is it normal? :)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/1969805/+subscriptions