gpp_maybe Security update for git

SUSE-SLE-Module-Basesystem-15-SP5-2024-1807

This update for git fixes the following issues: - CVE-2024-32002: Fixed recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (bsc#1224168). - CVE-2024-32004: Fixed arbitrary code execution during local clones (bsc#1224170). - CVE-2024-32020: Fixed file overwriting vulnerability during local clones (bsc#1224171). - CVE-2024-32021: Fixed git may create hardlinks to arbitrary user-readable files (bsc#1224172). - CVE-2024-32465: Fixed arbitrary code execution during clone operations (bsc#1224173).

• Release Date
  May 28 2024
• References
  Bugzilla: 1224173, 1224170, 1224171, 1224172, 1224168
  CVEs: CVE-2024-32021, CVE-2024-32465, CVE-2024-32004, CVE-2024-32002, CVE-2024-32020
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 s390x

• Packages
  git
  Fast, scalable, distributed revision control system

  2.35.3-150300.10.39.1 lock src

  git-core
  Core git tools

  2.35.3-150300.10.39.1 lock rpm

Basesystem Module 15.5 ppc64le

• Packages
  git
  Fast, scalable, distributed revision control system

  2.35.3-150300.10.39.1 lock src

  git-core
  Core git tools

  2.35.3-150300.10.39.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  git
  Fast, scalable, distributed revision control system

  2.35.3-150300.10.39.1 lock src

  git-core
  Core git tools

  2.35.3-150300.10.39.1 lock rpm

Basesystem Module 15.5 aarch64

• Packages
  git
  Fast, scalable, distributed revision control system

  2.35.3-150300.10.39.1 lock src

  git-core
  Core git tools

  2.35.3-150300.10.39.1 lock rpm