SUSE-SU-2025:0197-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-20250197-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:0197-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:0197-1
- Related
- Published
- 2025-01-21T10:03:35Z
- Modified
- 2025-01-21T10:03:35Z
- Summary
- Security update for git
- Details
-
This update for git fixes the following issues:
- CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion. (bsc#1224168)
- CVE-2024-32004: Fixed arbitrary code execution during local clones. (bsc#1224170)
- CVE-2024-32020: Fix file overwriting vulnerability during local clones. (bsc#1224171)
- CVE-2024-32021: Git may create hardlinks to arbitrary user-readable files. (bsc#1224172)
- CVE-2024-32465: Fixed arbitrary code execution during clone operations. (bsc#1224173)
- CVE-2024-50349: Passwords for trusted sites could be sent to untrusted sites (bsc#1235600).
- CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers (bsc#1235601).
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-20250197-1/
- https://bugzilla.suse.com/1224168
- https://bugzilla.suse.com/1224170
- https://bugzilla.suse.com/1224171
- https://bugzilla.suse.com/1224172
- https://bugzilla.suse.com/1224173
- https://bugzilla.suse.com/1235600
- https://bugzilla.suse.com/1235601
- https://www.suse.com/security/cve/CVE-2024-32002
- https://www.suse.com/security/cve/CVE-2024-32004
- https://www.suse.com/security/cve/CVE-2024-32020
- https://www.suse.com/security/cve/CVE-2024-32021
- https://www.suse.com/security/cve/CVE-2024-32465
- https://www.suse.com/security/cve/CVE-2024-50349
- https://www.suse.com/security/cve/CVE-2024-52006
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / git
Package
- Name
- git
- Purl
- pkg:rpm/suse/git&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.26.2-27.78.1
Ecosystem specific
{
"binaries": [
{
"git-core": "2.26.2-27.78.1",
"git-email": "2.26.2-27.78.1",
"git": "2.26.2-27.78.1",
"git-svn": "2.26.2-27.78.1",
"gitk": "2.26.2-27.78.1",
"git-cvs": "2.26.2-27.78.1",
"git-daemon": "2.26.2-27.78.1",
"git-gui": "2.26.2-27.78.1",
"git-web": "2.26.2-27.78.1"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / git
Package
- Name
- git
- Purl
- pkg:rpm/suse/git&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.26.2-27.78.1
Ecosystem specific
{
"binaries": [
{
"git-core": "2.26.2-27.78.1",
"git-email": "2.26.2-27.78.1",
"git": "2.26.2-27.78.1",
"git-svn": "2.26.2-27.78.1",
"gitk": "2.26.2-27.78.1",
"git-cvs": "2.26.2-27.78.1",
"git-daemon": "2.26.2-27.78.1",
"git-gui": "2.26.2-27.78.1",
"git-web": "2.26.2-27.78.1"
}
]
}