Skip to content
OpenAdvisories
High RHSA-2025:7641 1 CVE

Red Hat Security Advisory: git security update

Published May 15, 2025 · Updated Jun 3, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-all 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-core 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-core-debuginfo 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-core-doc 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-credential-libsecret 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-credential-libsecret-debuginfo 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-daemon 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-daemon-debuginfo 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-debuginfo 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-debugsource 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-email 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-gui 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-instaweb 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-subtree 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream git-svn 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream gitk 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream gitweb 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream perl-Git 0:2.39.5-1.el9_2.1
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream perl-Git-SVN 0:2.39.5-1.el9_2.1

Vulnerabilities 1

  • High 7.5
    CVE-2024-52005 Public exploit

    The sideband payload is passed unfiltered to the terminal in git

    Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "r…

    git git git git Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2338289
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7641.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-52005
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-52005
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-52005
  • article
    https://github.com/git/git/security/advisories/GHSA-7jjc-gg6m-3329
  • article
    https://lore.kernel.org/git/1M9FnZ-1taoNo1wwh-00ESSd@mail.gmx.net