Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Rocky Linux 8 RLSA-2024:4084 Important Git Remote Code Execution

rocky
Calendar Grey July 2, 2024
Scroller Rockylinux
A crucial patch has been released for git on Rocky Linux 8, addressing several critical remote code execution vulnerabilities.
Important: git security update

Summary

An update is available for git. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory remote code execution important git Rocky Linux

RPMs

git-0:2.43.5-1.el8_10.aarch64.rpm

git-0:2.43.5-1.el8_10.src.rpm

git-0:2.43.5-1.el8_10.x86_64.rpm

git-all-0:2.43.5-1.el8_10.noarch.rpm

git-core-0:2.43.5-1.el8_10.aarch64.rpm

git-core-0:2.43.5-1.el8_10.x86_64.rpm

git-core-debuginfo-0:2.43.5-1.el8_10.aarch64.rpm

git-core-debuginfo-0:2.43.5-1.el8_10.x86_64.rpm

git-core-doc-0:2.43.5-1.el8_10.noarch.rpm

git-credential-libsecret-0:2.43.5-1.el8_10.aarch64.rpm

git-credential-libsecret-0:2.43.5-1.el8_10.x86_64.rpm

git-credential-libsecret-debuginfo-0:2.43.5-1.el8_10.aarch64.rpm

git-credential-libsecret-debuginfo-0:2.43.5-1.el8_10.x86_64.rpm

git-daemon-0:2.43.5-1.el8_10.aarch64.rpm

git-daemon-0:2.43.5-1.el8_10.x86_64.rpm

git-daemon-debuginfo-0:2.43.5-1.el8_10.aarch64.rpm

git-daemon-debuginfo-0:2.43.5-1.el8_10.x86_64.rpm

git-debuginfo-0:2.43.5-1.el8_10.aarch64.rpm

git-debuginfo-0:2.43.5-1.el8_10.x86_64.rpm

git-debugsource-0:2.43.5-1.el8_10.aarch64.rpm

git-debugsource-0:2.43.5-1.el8_10.x86_64.rpm

git-email-0:2.43.5-1.el8_10.noarch.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2024-32002

https://www.cve.org/CVERecord?id=CVE-2024-32004

https://www.cve.org/CVERecord?id=CVE-2024-32020

https://www.cve.org/CVERecord?id=CVE-2024-32021

https://www.cve.org/CVERecord?id=CVE-2024-32465

Severity
important
Lowest
Low
Medium
High
Critical

Name: RLSA-2024:4084
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2280421

https://bugzilla.redhat.com/show_bug.cgi?id=2280428

https://bugzilla.redhat.com/show_bug.cgi?id=2280446

https://bugzilla.redhat.com/show_bug.cgi?id=2280466

https://bugzilla.redhat.com/show_bug.cgi?id=2280484


Topics%20covered

Topics Covered

security advisory remote code execution important git Rocky Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.