Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 602
Alerts This Week
Warning Icon 1 602

Fedora 39: FEDORA-2024-605004a28e Critical: libgit2 Code Execution

fedora
Calendar Grey February 17, 2024
Dist Fedora Esm H88
Ubuntu 23.10 upgrades OpenSSL to 3.0.7, addressing severe vulnerabilities linked to unauthorized access and resource exhaustion.
Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575

Summary

libgit2 is a portable, pure C implementation of the Git core methods

provided as a re-entrant linkable library with a solid API, allowing

you to write native speed custom Git applications in any language

with bindings.

Update Information:

Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575

Topics%20covered

Topics Covered

security advisory software update Fedora arbitrary code execution critical fix infinite loop libgit2

Change Log

* Wed Feb 7 2024 Pete Walter - 1.6.5-1 - Update to 1.6.5 * Wed Feb 7 2024 Stephen Gallagher - 1.6.4-4 - Skip 'pack' tests on F40+ * Thu Jan 25 2024 Fedora Release Engineering - 1.6.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 1.6.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2261321 - libgit2_1.6: FTBFS in Fedora rawhide/f40 https://bugzilla.redhat.com/show_bug.cgi?id=2261321 [ 2 ] Bug #2263096 - TRIAGE CVE-2024-24577 libgit2: arbitrary code execution due to heap corruption in git_index_add [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263096 [ 3 ] Bug #2263101 - TRIAGE CVE-2024-24575 libgit2: potential infiniate loop condition in git_revparse_single [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263101

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-605004a28e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libgit2_1.6
Product: Fedora 39
Version: 1.6.5
Release: 1.fc39
URL: https://libgit2.org/
Summary: C implementation of the Git core methods as a library with a solid API

Topics%20covered

Topics Covered

security advisory software update Fedora arbitrary code execution critical fix infinite loop libgit2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.