[CLSA-2026:1769507907] Fix CVE(s): CVE-2024-50349

Type:

security

Severity:

Moderate

Release date:

2026-01-27 09:58:31 UTC

Description:

   * SECURITY UPDATE: Confusing users into sending their passwords to sites
     under the attacker’s control using crafted URLs
     - debian/patches/CVE-2024-50349.patch: also encode [:] in
       credential_format(), sanitize the user prompt
     - CVE-2024-50349

Updated packages:

git_2.17.1-1ubuntu0.18+tuxcare.els10_amd64.deb
sha:904f41ce9afd50e501ad16486eae893c789c870c
git-all_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:9413812360b34acded99712704d424a269824a6e
git-cvs_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:a4893c79ae88ca310c654580a9cd3923e6fcd67c
git-daemon-run_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:cd155587f4677f59293882838f09bfe32e4c5fac
git-daemon-sysvinit_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:5f7901da8d134f7c4af21d54f2d9a305a9993c60
git-doc_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:2364579cedc88a31c87e4e0992914c25ca7cee6a
git-el_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:bd4c730514b89b7ee44f971548c0808cd1e16a60
git-email_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:dd4ae3d267a5650bb6f2a75c9fe42baef630d55f
git-gui_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:4eb70d73c3219edd0c83e970255111d8287d36b0
git-man_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:ef6bb224364992368afb7b634f0a365eaeaf1bd1
git-mediawiki_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:b91e69e4432f3e1c763199462ab3b43e4fefe8fd
git-svn_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:5c7aef0a2e204ab472dc3db27d1c54738166fc99
gitk_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:d6d749253d6bd707a4a7de0adf322b4443e81212
gitweb_2.17.1-1ubuntu0.18+tuxcare.els10_all.deb
sha:6f23929330406c08abaf3cbc6a3d80325e1f8112

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.