An update for git is now available for openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-1115 Final 1.0 1.0 2025-02-14 Initial 2025-02-14 2025-02-14 openEuler SA Tool V1.0 2025-02-14 git security update An update for git is now available for openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP3 Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and ClearCase with features like cheap local branching, convenient staging areas, and multiple workflows. Security Fix(es): Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the standard error output. Typically, this standard error output is connected to a terminal that understands ANSI escape sequences, which Git did not protect against. Most modern terminals support control sequences that can be used by a malicious actor to hide and misrepresent information, or to mislead the user into executing untrusted scripts. As requested on the git-security mailing list, the patches are under discussion on the public mailing list. Users are advised to update as soon as possible. Users unable to upgrade should avoid recursive clones unless they are from trusted sources.(CVE-2024-52005) An update for git is now available for openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP3. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High git https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1115 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-52005 https://nvd.nist.gov/vuln/detail/CVE-2024-52005 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP3 git-2.33.0-17.oe2203sp4.aarch64.rpm git-core-2.33.0-17.oe2203sp4.aarch64.rpm git-daemon-2.33.0-17.oe2203sp4.aarch64.rpm git-debuginfo-2.33.0-17.oe2203sp4.aarch64.rpm git-debugsource-2.33.0-17.oe2203sp4.aarch64.rpm git-2.43.0-6.oe2403.aarch64.rpm git-core-2.43.0-6.oe2403.aarch64.rpm git-daemon-2.43.0-6.oe2403.aarch64.rpm git-debuginfo-2.43.0-6.oe2403.aarch64.rpm git-debugsource-2.43.0-6.oe2403.aarch64.rpm git-2.43.0-6.oe2403sp1.aarch64.rpm git-core-2.43.0-6.oe2403sp1.aarch64.rpm git-daemon-2.43.0-6.oe2403sp1.aarch64.rpm git-debuginfo-2.43.0-6.oe2403sp1.aarch64.rpm git-debugsource-2.43.0-6.oe2403sp1.aarch64.rpm git-2.27.0-23.oe2003sp4.aarch64.rpm git-daemon-2.27.0-23.oe2003sp4.aarch64.rpm git-debuginfo-2.27.0-23.oe2003sp4.aarch64.rpm git-debugsource-2.27.0-23.oe2003sp4.aarch64.rpm git-2.33.0-17.oe2203sp3.aarch64.rpm git-core-2.33.0-17.oe2203sp3.aarch64.rpm git-daemon-2.33.0-17.oe2203sp3.aarch64.rpm git-debuginfo-2.33.0-17.oe2203sp3.aarch64.rpm git-debugsource-2.33.0-17.oe2203sp3.aarch64.rpm git-2.33.0-17.oe2203sp4.src.rpm git-2.43.0-6.oe2403.src.rpm git-2.43.0-6.oe2403sp1.src.rpm git-2.27.0-23.oe2003sp4.src.rpm git-2.33.0-17.oe2203sp3.src.rpm git-2.33.0-17.oe2203sp4.x86_64.rpm git-core-2.33.0-17.oe2203sp4.x86_64.rpm git-daemon-2.33.0-17.oe2203sp4.x86_64.rpm git-debuginfo-2.33.0-17.oe2203sp4.x86_64.rpm git-debugsource-2.33.0-17.oe2203sp4.x86_64.rpm git-2.43.0-6.oe2403.x86_64.rpm git-core-2.43.0-6.oe2403.x86_64.rpm git-daemon-2.43.0-6.oe2403.x86_64.rpm git-debuginfo-2.43.0-6.oe2403.x86_64.rpm git-debugsource-2.43.0-6.oe2403.x86_64.rpm git-2.43.0-6.oe2403sp1.x86_64.rpm git-core-2.43.0-6.oe2403sp1.x86_64.rpm git-daemon-2.43.0-6.oe2403sp1.x86_64.rpm git-debuginfo-2.43.0-6.oe2403sp1.x86_64.rpm git-debugsource-2.43.0-6.oe2403sp1.x86_64.rpm git-2.27.0-23.oe2003sp4.x86_64.rpm git-daemon-2.27.0-23.oe2003sp4.x86_64.rpm git-debuginfo-2.27.0-23.oe2003sp4.x86_64.rpm git-debugsource-2.27.0-23.oe2003sp4.x86_64.rpm git-2.33.0-17.oe2203sp3.x86_64.rpm git-core-2.33.0-17.oe2203sp3.x86_64.rpm git-daemon-2.33.0-17.oe2203sp3.x86_64.rpm git-debuginfo-2.33.0-17.oe2203sp3.x86_64.rpm git-debugsource-2.33.0-17.oe2203sp3.x86_64.rpm git-email-2.33.0-17.oe2203sp4.noarch.rpm git-gui-2.33.0-17.oe2203sp4.noarch.rpm git-help-2.33.0-17.oe2203sp4.noarch.rpm git-svn-2.33.0-17.oe2203sp4.noarch.rpm git-web-2.33.0-17.oe2203sp4.noarch.rpm gitk-2.33.0-17.oe2203sp4.noarch.rpm perl-Git-2.33.0-17.oe2203sp4.noarch.rpm perl-Git-SVN-2.33.0-17.oe2203sp4.noarch.rpm git-email-2.43.0-6.oe2403.noarch.rpm git-gui-2.43.0-6.oe2403.noarch.rpm git-help-2.43.0-6.oe2403.noarch.rpm git-svn-2.43.0-6.oe2403.noarch.rpm git-web-2.43.0-6.oe2403.noarch.rpm gitk-2.43.0-6.oe2403.noarch.rpm perl-Git-2.43.0-6.oe2403.noarch.rpm perl-Git-SVN-2.43.0-6.oe2403.noarch.rpm git-email-2.43.0-6.oe2403sp1.noarch.rpm git-gui-2.43.0-6.oe2403sp1.noarch.rpm git-help-2.43.0-6.oe2403sp1.noarch.rpm git-svn-2.43.0-6.oe2403sp1.noarch.rpm git-web-2.43.0-6.oe2403sp1.noarch.rpm gitk-2.43.0-6.oe2403sp1.noarch.rpm perl-Git-2.43.0-6.oe2403sp1.noarch.rpm perl-Git-SVN-2.43.0-6.oe2403sp1.noarch.rpm git-email-2.27.0-23.oe2003sp4.noarch.rpm git-gui-2.27.0-23.oe2003sp4.noarch.rpm git-help-2.27.0-23.oe2003sp4.noarch.rpm git-svn-2.27.0-23.oe2003sp4.noarch.rpm git-web-2.27.0-23.oe2003sp4.noarch.rpm gitk-2.27.0-23.oe2003sp4.noarch.rpm perl-Git-2.27.0-23.oe2003sp4.noarch.rpm perl-Git-SVN-2.27.0-23.oe2003sp4.noarch.rpm git-email-2.33.0-17.oe2203sp3.noarch.rpm git-gui-2.33.0-17.oe2203sp3.noarch.rpm git-help-2.33.0-17.oe2203sp3.noarch.rpm git-svn-2.33.0-17.oe2203sp3.noarch.rpm git-web-2.33.0-17.oe2203sp3.noarch.rpm gitk-2.33.0-17.oe2203sp3.noarch.rpm perl-Git-2.33.0-17.oe2203sp3.noarch.rpm perl-Git-SVN-2.33.0-17.oe2203sp3.noarch.rpm Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the standard error output. Typically, this standard error output is connected to a terminal that understands ANSI escape sequences, which Git did not protect against. Most modern terminals support control sequences that can be used by a malicious actor to hide and misrepresent information, or to mislead the user into executing untrusted scripts. As requested on the git-security mailing list, the patches are under discussion on the public mailing list. Users are advised to update as soon as possible. Users unable to upgrade should avoid recursive clones unless they are from trusted sources. 2025-02-14 CVE-2024-52005 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP3 High 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H git security update 2025-02-14 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1115