CVE-2024-45341

git-lfs: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text poi...

CVE-2024-45341 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2024-45341, released January 28, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0056
46th percentile

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
delve · RHEL 10 1.24.1-1.el10_0 RHSA-2025:7466 Feb 6, 2025
delve · RHEL 8 0:1.24.1-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
delve · RHEL 9 0:1.24.1-2.el9_5 RHSA-2025:3773 Apr 10, 2025
delve · almalinux 10 1.24.1-1.el10_0 ALSA-2025:7466 May 13, 2025
delve · almalinux 8 1.24.1-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
delve · ol 10 0:1.24.1-1.0.1.el10_0 ELSA-2025-7466 Jun 27, 2025
delve · ol 8 0:1.24.1-1.0.1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
delve · rocky 10 0:1.24.1-1.el10_0 RLSA-2025:7466 Oct 3, 2025
delve · rocky 8 0:1.24.1-1.module+el8.10.0+1951+c74bd827 RLSA-2025:3772 Jul 29, 2025
delve · rocky 9 0:1.24.1-2.el9_6 RLSA-2025:3773 Jul 29, 2025
git-lfs · RHEL 9 0:3.7.1-4.el9_8 RHSA-2026:19350 May 15, 2026
git-lfs · almalinux 9 3.7.1-4.el9_8 ALSA-2026:19350 May 19, 2026
go-toolset · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
go-toolset · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
go-toolset · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
go-toolset · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
go-toolset · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
go-toolset · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
go-toolset · rocky 8 0:1.23.6-1.module+el8.10.0+1951+c74bd827 RLSA-2025:3772 Jul 29, 2025
go1.22 · opensuse-leap 15.6 1.22.11-150000.1.39.1 SUSE-SU-2025:0281-1 Jan 29, 2025
go1.22 · sles 15.6 1.22.11-150000.1.39.1 SUSE-SU-2025:0281-1 Jan 29, 2025
go1.23 · opensuse-leap 15.6 1.23.5-150000.1.18.1 SUSE-SU-2025:0280-1 Jan 29, 2025
go1.23 · sles 15.6 1.23.5-150000.1.18.1 SUSE-SU-2025:0280-1 Jan 29, 2025
go1.23-openssl · opensuse-leap 15.6 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1 Sep 11, 2025
go1.23-openssl · sles 15.6 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1 Sep 11, 2025
go1.23-openssl · sles 15.7 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1 Sep 11, 2025
go1.24 · opensuse-leap 15.6 1.24rc2-150000.1.3.1 SUSE-SU-2025:0285-1 Jan 29, 2025
go1.24 · sles 15.6 1.24rc2-150000.1.3.1 SUSE-SU-2025:0285-1 Jan 29, 2025
golang · RHEL 10 1.23.7-1.el10_0 RHSA-2025:7466 Feb 6, 2025
golang · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
golang · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
golang · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
golang · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
golang · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
golang · rocky 10 0:1.23.7-1.el10_0 RLSA-2025:7466 Oct 3, 2025
golang · rocky 8 0:1.23.6-1.module+el8.10.0+1951+c74bd827 RLSA-2025:3772 Jul 29, 2025
golang · rocky 9 0:1.23.6-2.el9_6 RLSA-2025:3773 Jul 29, 2025
golang-1.22 · Ubuntu 22.04.1 LTS (jammy) 1.22.2-2~22.04.3 golang-1.22 1.22.2-2~22.04.3 Jun 11, 2025
golang-1.22 · Ubuntu 24.04.5 LTS (noble) 1.22.2-2ubuntu0.4 golang-1.22 1.22.2-2ubuntu0.4 Jun 11, 2025
golang-1.22 · Ubuntu 24.10 (oracular) 1.22.8-1ubuntu0.1 golang-1.22 1.22.8-1ubuntu0.1 Jan 16, 2026
golang-1.22-go · Ubuntu 22.04.1 LTS (jammy) 1.22.2-2~22.04.3 golang-1.22-go 1.22.2-2~22.04.3 Jun 11, 2025
golang-1.22-go · Ubuntu 24.04.5 LTS (noble) 1.22.2-2ubuntu0.4 golang-1.22-go 1.22.2-2ubuntu0.4 Jun 11, 2025
golang-1.22-go · Ubuntu 24.10 (oracular) 1.22.8-1ubuntu0.1 golang-1.22-go 1.22.8-1ubuntu0.1 Jan 16, 2026
golang-1.22-src · Ubuntu 22.04.1 LTS (jammy) 1.22.2-2~22.04.3 golang-1.22-src 1.22.2-2~22.04.3 Jun 11, 2025
golang-1.22-src · Ubuntu 24.04.5 LTS (noble) 1.22.2-2ubuntu0.4 golang-1.22-src 1.22.2-2ubuntu0.4 Jun 11, 2025
golang-1.22-src · Ubuntu 24.10 (oracular) 1.22.8-1ubuntu0.1 golang-1.22-src 1.22.8-1ubuntu0.1 Jan 16, 2026
golang-1.24 · Debian 13.5 (trixie) 1.24~rc2-1 DEBIAN-CVE-2024-45341 Jan 28, 2025
golang-bin · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
golang-bin · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang-bin · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
golang-bin · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
golang-bin · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang-bin · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
golang-bin · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
golang-docs · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
golang-docs · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang-docs · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
golang-docs · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
golang-docs · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang-docs · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
golang-docs · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
golang-misc · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
golang-misc · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang-misc · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
golang-misc · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
golang-misc · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang-misc · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
golang-misc · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
golang-race · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang-shared · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang-src · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
golang-src · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang-src · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
golang-src · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
golang-src · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang-src · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
golang-src · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
golang-tests · RHEL 8 0:1.23.6-1.module+el8.10.0+22945+b2c96a17 RHSA-2025:3772 Apr 10, 2025
golang-tests · RHEL 9 0:1.23.6-2.el9_5 RHSA-2025:3773 Apr 10, 2025
golang-tests · almalinux 10 1.23.7-1.el10_0.alma.1 ALSA-2025:7466 May 13, 2025
golang-tests · almalinux 8 1.23.6-1.module_el8.10.0+3977+66935a26 ALSA-2025:3772 Apr 10, 2025
golang-tests · amzn 2023 1.24.0-1.amzn2023.0.1 ALAS2023-2025-878 Feb 26, 2025
golang-tests · ol 10 0:1.23.7-1.el10_0 ELSA-2025-7466 Jun 27, 2025
golang-tests · ol 8 0:1.23.6-1.module+el8.10.0+90545+447bd9e4 ELSA-2025-3772 Apr 10, 2025
govulncheck-vulndb · opensuse-leap 15.6 0.0.20250207T224745-150000.1.32.1 SUSE-SU-2025:0429-1 Feb 11, 2025
govulncheck-vulndb · sles 15.6 0.0.20250207T224745-150000.1.32.1 SUSE-SU-2025:0429-1 Feb 11, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.