High ELSA-2024-7135 1 CVE

Important: git-lfs security update (Oracle Linux 8)

Published Sep 25, 2024 · Updated Sep 25, 2024

Ecosystem: Oracle Linux

Summary

[3.4.1-3]
- Rebuild with new Golang
- Resolves: RHEL-57900

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	git-lfs	0:3.4.1-3.el8_10

Vulnerabilities 1

High 7.5

CVE-2024-34156

Stack exhaustion in Decoder.Decode in encoding/gob

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Go standard library encoding/gob katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Sep 6, 2024