Red Hat Product Errata RHSA-2024:2079 - Security Advisory
Issued:
2024-04-29
Updated:
2024-04-29

RHSA-2024:2079 - Security Advisory

Synopsis

Important: git-lfs security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for git-lfs is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

  • golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288,VU#421644.3)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2268273 - CVE-2023-45288 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

Red Hat Enterprise Linux for x86_64 9

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
s390x
git-lfs-3.2.0-2.el9_3.s390x.rpm SHA-256: 2cc3af897295ffaa3bdc61fface83d39883998c0acc7347570cfa00f245304a3
git-lfs-debuginfo-3.2.0-2.el9_3.s390x.rpm SHA-256: e979c68803f1e48f1afb08f20baee467fe9da4f8eb7f780b83a07dc86e1c6305
git-lfs-debugsource-3.2.0-2.el9_3.s390x.rpm SHA-256: a0b5b78856990d617631dffc5d7e839e3ba11f6f567d903bef43faeb29e7086e

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
s390x
git-lfs-3.2.0-2.el9_3.s390x.rpm SHA-256: 2cc3af897295ffaa3bdc61fface83d39883998c0acc7347570cfa00f245304a3
git-lfs-debuginfo-3.2.0-2.el9_3.s390x.rpm SHA-256: e979c68803f1e48f1afb08f20baee467fe9da4f8eb7f780b83a07dc86e1c6305
git-lfs-debugsource-3.2.0-2.el9_3.s390x.rpm SHA-256: a0b5b78856990d617631dffc5d7e839e3ba11f6f567d903bef43faeb29e7086e

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
s390x
git-lfs-3.2.0-2.el9_3.s390x.rpm SHA-256: 2cc3af897295ffaa3bdc61fface83d39883998c0acc7347570cfa00f245304a3
git-lfs-debuginfo-3.2.0-2.el9_3.s390x.rpm SHA-256: e979c68803f1e48f1afb08f20baee467fe9da4f8eb7f780b83a07dc86e1c6305
git-lfs-debugsource-3.2.0-2.el9_3.s390x.rpm SHA-256: a0b5b78856990d617631dffc5d7e839e3ba11f6f567d903bef43faeb29e7086e

Red Hat Enterprise Linux for Power, little endian 9

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
ppc64le
git-lfs-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 9542f0491cc41010233617799d7cb1bea68df3fb4df35b22111a34c989dfeb04
git-lfs-debuginfo-3.2.0-2.el9_3.ppc64le.rpm SHA-256: b6a5afd3d5891c4ca847891b1b44035bccedf215918e0bbc057374896c505872
git-lfs-debugsource-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 7d73b55bb007959afac9d4e560aed830eda1234bf6f2e2964c664bf257659d7e

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
ppc64le
git-lfs-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 9542f0491cc41010233617799d7cb1bea68df3fb4df35b22111a34c989dfeb04
git-lfs-debuginfo-3.2.0-2.el9_3.ppc64le.rpm SHA-256: b6a5afd3d5891c4ca847891b1b44035bccedf215918e0bbc057374896c505872
git-lfs-debugsource-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 7d73b55bb007959afac9d4e560aed830eda1234bf6f2e2964c664bf257659d7e

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
ppc64le
git-lfs-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 9542f0491cc41010233617799d7cb1bea68df3fb4df35b22111a34c989dfeb04
git-lfs-debuginfo-3.2.0-2.el9_3.ppc64le.rpm SHA-256: b6a5afd3d5891c4ca847891b1b44035bccedf215918e0bbc057374896c505872
git-lfs-debugsource-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 7d73b55bb007959afac9d4e560aed830eda1234bf6f2e2964c664bf257659d7e

Red Hat Enterprise Linux for ARM 64 9

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
aarch64
git-lfs-3.2.0-2.el9_3.aarch64.rpm SHA-256: 047713a9da42ea74126224ee2668b5ad80a78ef41dd7e27ea2d7bbdeb3f50b03
git-lfs-debuginfo-3.2.0-2.el9_3.aarch64.rpm SHA-256: 538a33f3f2d15cddee6e08b92c490c285ba249c3f8148a6f2579951017369624
git-lfs-debugsource-3.2.0-2.el9_3.aarch64.rpm SHA-256: 2ed781709a43945248e52b4664f962a3873bb98baf0de1c304609345d3d4ad7c

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
aarch64
git-lfs-3.2.0-2.el9_3.aarch64.rpm SHA-256: 047713a9da42ea74126224ee2668b5ad80a78ef41dd7e27ea2d7bbdeb3f50b03
git-lfs-debuginfo-3.2.0-2.el9_3.aarch64.rpm SHA-256: 538a33f3f2d15cddee6e08b92c490c285ba249c3f8148a6f2579951017369624
git-lfs-debugsource-3.2.0-2.el9_3.aarch64.rpm SHA-256: 2ed781709a43945248e52b4664f962a3873bb98baf0de1c304609345d3d4ad7c

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
aarch64
git-lfs-3.2.0-2.el9_3.aarch64.rpm SHA-256: 047713a9da42ea74126224ee2668b5ad80a78ef41dd7e27ea2d7bbdeb3f50b03
git-lfs-debuginfo-3.2.0-2.el9_3.aarch64.rpm SHA-256: 538a33f3f2d15cddee6e08b92c490c285ba249c3f8148a6f2579951017369624
git-lfs-debugsource-3.2.0-2.el9_3.aarch64.rpm SHA-256: 2ed781709a43945248e52b4664f962a3873bb98baf0de1c304609345d3d4ad7c

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
ppc64le
git-lfs-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 9542f0491cc41010233617799d7cb1bea68df3fb4df35b22111a34c989dfeb04
git-lfs-debuginfo-3.2.0-2.el9_3.ppc64le.rpm SHA-256: b6a5afd3d5891c4ca847891b1b44035bccedf215918e0bbc057374896c505872
git-lfs-debugsource-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 7d73b55bb007959afac9d4e560aed830eda1234bf6f2e2964c664bf257659d7e

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
ppc64le
git-lfs-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 9542f0491cc41010233617799d7cb1bea68df3fb4df35b22111a34c989dfeb04
git-lfs-debuginfo-3.2.0-2.el9_3.ppc64le.rpm SHA-256: b6a5afd3d5891c4ca847891b1b44035bccedf215918e0bbc057374896c505872
git-lfs-debugsource-3.2.0-2.el9_3.ppc64le.rpm SHA-256: 7d73b55bb007959afac9d4e560aed830eda1234bf6f2e2964c664bf257659d7e

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
x86_64
git-lfs-3.2.0-2.el9_3.x86_64.rpm SHA-256: bba8e61314fd8ab0c2825649cee2b67232fafd6e33f6873523047deeae47d6b6
git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm SHA-256: c065653b020de9f8b4e5182d9c32534f5a6305791e51694a01ff2eeb24e4a034
git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm SHA-256: 3eaf5dd75ceeb032d1311068491761893767055521debadfeb8e231db1fc2065

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
aarch64
git-lfs-3.2.0-2.el9_3.aarch64.rpm SHA-256: 047713a9da42ea74126224ee2668b5ad80a78ef41dd7e27ea2d7bbdeb3f50b03
git-lfs-debuginfo-3.2.0-2.el9_3.aarch64.rpm SHA-256: 538a33f3f2d15cddee6e08b92c490c285ba249c3f8148a6f2579951017369624
git-lfs-debugsource-3.2.0-2.el9_3.aarch64.rpm SHA-256: 2ed781709a43945248e52b4664f962a3873bb98baf0de1c304609345d3d4ad7c

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
aarch64
git-lfs-3.2.0-2.el9_3.aarch64.rpm SHA-256: 047713a9da42ea74126224ee2668b5ad80a78ef41dd7e27ea2d7bbdeb3f50b03
git-lfs-debuginfo-3.2.0-2.el9_3.aarch64.rpm SHA-256: 538a33f3f2d15cddee6e08b92c490c285ba249c3f8148a6f2579951017369624
git-lfs-debugsource-3.2.0-2.el9_3.aarch64.rpm SHA-256: 2ed781709a43945248e52b4664f962a3873bb98baf0de1c304609345d3d4ad7c

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
s390x
git-lfs-3.2.0-2.el9_3.s390x.rpm SHA-256: 2cc3af897295ffaa3bdc61fface83d39883998c0acc7347570cfa00f245304a3
git-lfs-debuginfo-3.2.0-2.el9_3.s390x.rpm SHA-256: e979c68803f1e48f1afb08f20baee467fe9da4f8eb7f780b83a07dc86e1c6305
git-lfs-debugsource-3.2.0-2.el9_3.s390x.rpm SHA-256: a0b5b78856990d617631dffc5d7e839e3ba11f6f567d903bef43faeb29e7086e

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
git-lfs-3.2.0-2.el9_3.src.rpm SHA-256: cf3e3f691d67133d38293f8f14b7a2c10dfc95c715af2ff4ea0f6df6f0fbc25b
s390x
git-lfs-3.2.0-2.el9_3.s390x.rpm SHA-256: 2cc3af897295ffaa3bdc61fface83d39883998c0acc7347570cfa00f245304a3
git-lfs-debuginfo-3.2.0-2.el9_3.s390x.rpm SHA-256: e979c68803f1e48f1afb08f20baee467fe9da4f8eb7f780b83a07dc86e1c6305
git-lfs-debugsource-3.2.0-2.el9_3.s390x.rpm SHA-256: a0b5b78856990d617631dffc5d7e839e3ba11f6f567d903bef43faeb29e7086e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.