Summary
[2.43.5-3]
- add the option to sanitize sideband channel messages
- Resolves: RHEL-74177
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | git | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-all | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-core | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-core-doc | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-credential-libsecret | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-daemon | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-email | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-gui | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-instaweb | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-subtree | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | git-svn | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | gitk | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | gitweb | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | perl-Git | 0:2.43.5-3.el8_10 |
| Oracle Linux · 8 | perl-Git-SVN | 0:2.43.5-3.el8_10 |
Vulnerabilities 1
-
High 7.5CVE-2024-52005 Public exploit
The sideband payload is passed unfiltered to the terminal in git
Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "r…