Alerts This Week
Warning Icon 1 1,109
Alerts This Week
Warning Icon 1 1,109

Ubuntu 24.10, 24.04 LTS, 22.04 LTS: Git Security Updates January 2025

ubuntu
Calendar Grey January 14, 2025
Dist Ubuntu Esm H88
Several security flaws resolved in Git across different Ubuntu versions. Upgrade your system to maintain security standards.
Several security issues were fixed in Git.

Summary

Several security issues were fixed in Git.

Software Description:

- git: fast, scalable, distributed revision control system

Details:

It was discovered that Git incorrectly handled certain URLs when

asking for credentials. An attacker could possibly use this

issue to mislead the user into typing passwords for trusted

sites that would then be sent to untrusted sites instead.

(CVE-2024-50349)

It was discovered that git incorrectly handled line endings when

using credential helpers. (CVE-2024-52006)

Topics%20covered

Topics Covered

security advisory software fix update instructions ubuntu git credentials issue line endings

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
  git                             1:2.45.2-1ubuntu1.1

Ubuntu 24.04 LTS
  git                             1:2.43.0-1ubuntu7.2

Ubuntu 22.04 LTS
  git                             1:2.34.1-1ubuntu1.12

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7207-1

CVE-2024-50349, CVE-2024-52006

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7207-1

Topics%20covered

Topics Covered

security advisory software fix update instructions ubuntu git credentials issue line endings

Package Information

https://launchpad.net/ubuntu/+source/git/1:2.45.2-1ubuntu1.1
https://launchpad.net/ubuntu/+source/git/1:2.43.0-1ubuntu7.2
https://launchpad.net/ubuntu/+source/git/1:2.34.1-1ubuntu1.12

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here