[CLSA-2024:1721929661] git: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2024-07-25 17:47:45 UTC
Description:
- CVE-2024-32004: add tests for cloning from partial repo, fetch/clone: detect dubious ownership of local repositories - CVE-2024-32465: upload-pack: disable lazy-fetching by default
Updated packages:
  • git-2.43.0-1.el8.tuxcare.els2.x86_64.rpm
    sha:3263fdf3fc7170f5d931b91bfba609fd5db9fcbe
  • git-all-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:6e244e7e569549c4bad69a07f5b5686d73089de3
  • git-core-2.43.0-1.el8.tuxcare.els2.x86_64.rpm
    sha:ee8ddee82ced039abafec27787bcb317497b4754
  • git-core-doc-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:25d1b8a86cc62afb8f6261b85ab377439ad30195
  • git-credential-libsecret-2.43.0-1.el8.tuxcare.els2.x86_64.rpm
    sha:8fa08d250b6543d9bdf40b9b6421cc41571ebc61
  • git-daemon-2.43.0-1.el8.tuxcare.els2.x86_64.rpm
    sha:c44e0d9945c607958110d316e0580f343b4c8b44
  • git-email-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:9da1dadf6ac406081e68a5df3a496da3d326998c
  • git-gui-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:59ba54eb9c837b2d715251ba37d1ac392a359d4f
  • git-instaweb-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:09b5eda0c4bb4a1b39c5dc79b913baf3e546f2d5
  • git-subtree-2.43.0-1.el8.tuxcare.els2.x86_64.rpm
    sha:107da3fb15bf70db86be5bccac4e5af0a74a0034
  • git-svn-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:c6c029ab45a02047c6adfb368ea497394967144a
  • gitk-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:3756a3ab035cb915aac9acedc3f546abca7d3547
  • gitweb-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:4ba781819022f9e6c50ac6d8808289ebd6a99a62
  • perl-Git-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:13b738540e7afdb29fd7923d73fb274c784cd179
  • perl-Git-SVN-2.43.0-1.el8.tuxcare.els2.noarch.rpm
    sha:3060184d6d125150ac763d4b219e806e61ed8154
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.