[Bug 1970243] [NEW] Backport: opt-out of check with safe.directory=*

Daniel 1970243 at bugs.launchpad.net
Mon Apr 25 15:55:35 UTC 2022


Public bug reported:

git-1:2.25.1-1ubuntu3.3 back ported the fix for CVE-2022-24765 which
introduced the setting safe.directory. However, listing every single
repository is not a very convenient and desirable, and hence git has
been patched again:
https://github.com/git/git/commit/0f85c4a30b072a26d74af8bbf63cc8f6a5dfc1b8

Please back port these changes as well.

```
'lsb_release -rd':
Description:    Ubuntu 20.04.4 LTS
Release:        20.04

'apt-cache policy git':
git:
  Installed: 1:2.25.1-1ubuntu3.3
  Candidate: 1:2.25.1-1ubuntu3.3
...
```

** Affects: git (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to git in Ubuntu.
https://bugs.launchpad.net/bugs/1970243

Title:
  Backport: opt-out of check with safe.directory=*

Status in git package in Ubuntu:
  New

Bug description:
  git-1:2.25.1-1ubuntu3.3 back ported the fix for CVE-2022-24765 which
  introduced the setting safe.directory. However, listing every single
  repository is not a very convenient and desirable, and hence git has
  been patched again:
  https://github.com/git/git/commit/0f85c4a30b072a26d74af8bbf63cc8f6a5dfc1b8

  Please back port these changes as well.

  ```
  'lsb_release -rd':
  Description:    Ubuntu 20.04.4 LTS
  Release:        20.04

  'apt-cache policy git':
  git:
    Installed: 1:2.25.1-1ubuntu3.3
    Candidate: 1:2.25.1-1ubuntu3.3
  ...
  ```

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/1970243/+subscriptions




More information about the foundations-bugs mailing list