Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

SUSE: 2024:1854-1 Critical: Git Code Execution Vulnerability Patch

suse
Calendar Grey August 19, 2024
Scroller Suse
Important security enhancement for Git addressing various vulnerabilities. Implement updates to boost overall system safety and robustness.
* bsc#1224168 * bsc#1224170 * bsc#1224171 * bsc#1224172 * bsc#1224173

Summary

## This update for git fixes the following issues: * CVE-2024-32002: Fixed case confusion with recursive clones on case- insensitive filesystems that support symbolic links (bsc#1224168) * CVE-2024-32004: Fixed arbitrary code execution during local clones (bsc#1224170) * CVE-2024-32020: Fixed file overwriting vulnerability during local clones (bsc#1224171) * CVE-2024-32021: Fixed issue where git created hardlinks to arbitrary user- readable files (bsc#1224172) * CVE-2024-32465: Fixed arbitrary code execution during clone operations (bsc#1224173) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2

Topics%20covered

Topics Covered

security advisory software update code execution file overwrite important SUSE git

References

* bsc#1224168

* bsc#1224170

* bsc#1224171

* bsc#1224172

* bsc#1224173

Cross-

* CVE-2024-32002

* CVE-2024-32004

* CVE-2024-32020

* CVE-2024-32021

* CVE-2024-32465

CVSS scores:

* CVE-2024-32002 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2024-32002 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2024-32004 ( SUSE ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2024-32020 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L

* CVE-2024-32021 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L

* CVE-2024-32465 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 15 SP2

* SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:1854-1
Rating: important

Topics%20covered

Topics Covered

security advisory software update code execution file overwrite important SUSE git

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.