Red Hat 製品エラータ RHSA-2024:7701 - Security Advisory
発行日:
2024-10-07
更新日:
2024-10-07

RHSA-2024:7701 - Security Advisory

概要

Important: git security update

タイプ/重大度

Security Advisory: Important

Red Hat Lightspeed パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for git is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

  • git: RCE while cloning local repos (CVE-2024-32004)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

修正

  • BZ - 2280428 - CVE-2024-32004 git: RCE while cloning local repos

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
git-2.18.4-5.el8_2.src.rpm SHA-256: d790b7416a3ebee34dedab0264fea7d33589f71135ff4868dc87f587f633da71
x86_64
git-2.18.4-5.el8_2.x86_64.rpm SHA-256: 5a3a4684977d8d0c361586eec525ac0815645db639196d62bf91a9250138c67a
git-all-2.18.4-5.el8_2.noarch.rpm SHA-256: 4827d8fc3504a5510dfccfd7391fa1abd1b6f284bff3667638f39570d0d367fe
git-core-2.18.4-5.el8_2.x86_64.rpm SHA-256: ec263a8f3cb7b058657fc23c61fa2e0d05aedc6f751d9f3f3ba56838c16ea005
git-core-debuginfo-2.18.4-5.el8_2.x86_64.rpm SHA-256: b7d797e1959273b97110d01d1d71681bcb014339083792db4dbd589e7debc2d5
git-core-doc-2.18.4-5.el8_2.noarch.rpm SHA-256: 242d005e4732df570c053e54a18da62f02458935fe105bb58acbae3864352701
git-daemon-2.18.4-5.el8_2.x86_64.rpm SHA-256: b98505540eaa238dc863c30194066501f1041774e6fae7f242a03d51c702a17f
git-daemon-debuginfo-2.18.4-5.el8_2.x86_64.rpm SHA-256: bdfa7e22f7db4d07fc06996f99080ea5336b2bf3df01be9c61fc167b730f3b7a
git-debuginfo-2.18.4-5.el8_2.x86_64.rpm SHA-256: e6dd58dbb7eac5f2194dace8653c781ddd2195c170fc3b2b906d5486cec93a67
git-debugsource-2.18.4-5.el8_2.x86_64.rpm SHA-256: 3c6ccabaeab36476380f64e3a89258fe9f418c613469a57339da01fa802a790a
git-email-2.18.4-5.el8_2.noarch.rpm SHA-256: 74c3ca5ca538fd60f17f3e198f290218db398a5adbef278f17b12f4bc4db5f84
git-gui-2.18.4-5.el8_2.noarch.rpm SHA-256: 64704bb8bbcf8226791ed20f346781d5a28dfe5e180a20748c72eaa449f9def5
git-instaweb-2.18.4-5.el8_2.x86_64.rpm SHA-256: 8719eb8e739af68b9d4dcaec933b3acee8f216398069bb3a3a9f0600542ed88f
git-subtree-2.18.4-5.el8_2.x86_64.rpm SHA-256: 296a25a3176f44afcb8b2cc02107cd813834d5c6aeafacbc97585ee47d0d3cde
git-svn-2.18.4-5.el8_2.x86_64.rpm SHA-256: c7aee1d27af274f9ada709eb6bcb06239ff2941736ded5a2093a70b6103bac70
git-svn-debuginfo-2.18.4-5.el8_2.x86_64.rpm SHA-256: 0d774ea0fa4b038bd3735b5eae02ae7b9c1b6ab1b8efa75830efe59666b9ecd6
gitk-2.18.4-5.el8_2.noarch.rpm SHA-256: cdef515259c9915ec57f7bf46b1b57b48191cbf7e120a63d79d472cfe6f67093
gitweb-2.18.4-5.el8_2.noarch.rpm SHA-256: e105b14e9ad1bda49ba220ff5d0242856d3e94648a563e77f0ac4e39b65b1298
perl-Git-2.18.4-5.el8_2.noarch.rpm SHA-256: 192c83263d6b41f321935221cfd4742a0796079d4e4cc2fba3dcd32e26cc2847
perl-Git-SVN-2.18.4-5.el8_2.noarch.rpm SHA-256: 42b0961c27b080a72b552519247a2911e49691cd21e5a786b63c3c304b7ad80d

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。