Skip to content
OpenAdvisories
Low SUSE-RU-2025:20362-1 2 CVEs

Recommended update for git

Published May 28, 2025 · Updated Mar 23, 2026

Ecosystem: SUSE

Summary

This update for git fixes the following issues:

- CVE-2024-50349: passwords for trusted sites could be sent to untrusted
sites (bsc#1235600)
- CVE-2024-52006: Carriage Returns via the credential protocol to credential
helpers (bsc#1235601)

Fixed packages 1

ReleasePackageFixed in
SUSE · SLE Micro 6.1 Linux Micro 6.1 git 2.46.0-slfo.1.1_2.1

Vulnerabilities 2

  • Low 2.1
    CVE-2024-50349

    Git does not sanitize URLs when asking for credentials interactively

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helpe…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 2.1
    CVE-2024-52006

    Newline confusion in credential helpers can lead to credential exfiltration in git

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git c…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://bugzilla.suse.com/1235600
  • report
    https://bugzilla.suse.com/1235601
  • web
    https://www.suse.com/security/cve/CVE-2024-50349
  • web
    https://www.suse.com/security/cve/CVE-2024-52006