Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE Linux Micro: 2025:20049-1 important: git update fixes critical threats

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
Crucial enhancement release for git on SUSE Linux Micro addresses severe vulnerabilities and enhances performance.
* bsc#1042640 * bsc#1061041 * bsc#1069468 * bsc#1082023 * bsc#1216545

Summary

## This update for git fixes the following issues: git was updated to 2.45.1: * CVE-2024-32002: recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (bsc#1224168) * CVE-2024-32004: arbitrary code execution during local clones (bsc#1224170) * CVE-2024-32020: file overwriting vulnerability during local clones (bsc#1224171) * CVE-2024-32021: git may create hardlinks to arbitrary user- readable files (bsc#1224172) * CVE-2024-32465: arbitrary code execution during clone operations (bsc#1224173) Update to 2.45.0: * Improved efficiency managing repositories with many references ("git init --ref-format=reftable") * "git checkout -p" and friends learned that that "@" is a synonym for "HEAD" * cli improvements handling refs

Topics%20covered

Topics Covered

security advisory arbitrary code execution important update git software SUSE Linux Micro case confusion

References

* bsc#1042640

* bsc#1061041

* bsc#1069468

* bsc#1082023

* bsc#1216545

* bsc#1218588

* bsc#1218664

* bsc#1224168

* bsc#1224170

* bsc#1224171

* bsc#1224172

* bsc#1224173

* bsc#779536

* jsc#SLE-17838

Cross-

* CVE-2005-4900

* CVE-2017-14867

* CVE-2024-32002

* CVE-2024-32004

* CVE-2024-32020

* CVE-2024-32021

* CVE-2024-32465

CVSS scores:

* CVE-2005-4900 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2017-14867 ( SUSE ): 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2017-14867 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-32002 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2024-32002 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2024-32004 ( SUSE ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20049-1
Release Date: 2025-02-03T08:56:21Z
Rating: important

Topics%20covered

Topics Covered

security advisory arbitrary code execution important update git software SUSE Linux Micro case confusion

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here