Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security and bug fix update

Fixed packages 109

Vulnerabilities 1

• Critical 9.8
  CVE-2023-49569

  Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

  A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only …

  go-git go-git scorecard nuclei Debian Ubuntu Azure Linux Wolfi Go
  Jan 12, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2258143
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2273724
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2631.json
• report
  https://access.redhat.com/security/cve/CVE-2023-49569
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-49569
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-49569
• article
  https://github.com/go-git/go-git/security/advisories/GHSA-449p-3h89-pw88