Summary
[2.47.1-2]
- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | git | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-all | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-core | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-core-doc | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-credential-libsecret | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-daemon | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-email | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-gui | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-instaweb | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-subtree | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | git-svn | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | gitk | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | gitweb | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | perl-Git | 0:2.47.1-2.el10_0 |
| Oracle Linux · 10 | perl-Git-SVN | 0:2.47.1-2.el10_0 |
Vulnerabilities 1
-
High 7.5CVE-2024-52005 Public exploit
The sideband payload is passed unfiltered to the terminal in git
Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "r…