# CVE-2024-32002: GitHub:  CVE-2024-32002 Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

CVE-2024-32002 is fixed in 28 products on 2 platforms, first by Git 2.45.1, released May 2, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-32002
- Priority: High
- CVSS: 9.0 (Important)
- EPSS: 0.2923
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation Less Likely
- Published: May 14, 2024
- Weakness: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32002

## Description

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Git | 2.45.1 | [Git 2.45.1](https://patchblox.com/security/data/fix/windows-app/git.git-2.45.1.md) | May 2, 2024 |
| Linux | git Debian 12.15 (bookworm) | 1:2.39.5-0+deb12u1 | [DEBIAN-CVE-2024-32002](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32002.md) | May 14, 2024 |
| Linux | git Debian 13.5 (trixie) | 1:2.45.1-1 | [DEBIAN-CVE-2024-32002](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32002.md) | May 14, 2024 |
| Linux | git Debian 14 | 1:2.45.1-1 | [DEBIAN-CVE-2024-32002](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32002.md) | May 14, 2024 |
| Linux | git RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git opensuse-leap 15.6 | 2.43.0-150600.3.3.1 | [SUSE-SU-2024:2277-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2277-1.md) | Jul 2, 2024 |
| Linux | git rocky 8 | 0:2.43.5-1.el8_10 | [RLSA-2024:4084](https://patchblox.com/security/data/fix/linux/rlsa-2024-4084.md) | Jul 2, 2024 |
| Linux | git rocky 9 | 0:2.43.5-1.el9_4 | [RLSA-2024:4083](https://patchblox.com/security/data/fix/linux/rlsa-2024-4083.md) | Jul 2, 2024 |
| Linux | git sles 15.6 | 2.43.0-150600.3.3.1 | [SUSE-SU-2024:2277-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2277-1.md) | Jul 2, 2024 |
| Linux | git-all RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-all Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-all 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-all Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-all 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-all-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-all Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-all 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-all-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-all Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-all 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-all-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-all almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-all amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-all ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core-doc RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-doc almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-doc amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core-doc ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-credential-libsecret ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-cvs Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-cvs 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-cvs 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-cvs-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-cvs 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-cvs-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-cvs 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-cvs-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-cvs amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon-run Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-daemon-run 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-daemon-run 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-run-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-daemon-run 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-run-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-daemon-run 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-daemon-run-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-daemon-sysvinit 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-daemon-sysvinit 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-sysvinit-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-daemon-sysvinit 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-sysvinit-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-daemon-sysvinit 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-daemon-sysvinit-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-debugsource amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-el Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-el 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-el Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-el 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-el-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-email RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-email Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-email 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-email Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-email 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-email-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-email Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-email 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-email-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-email Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-email 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-email-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-email almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-email amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-email ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-gui 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-gui 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-gui-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-gui 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-gui-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-gui 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-gui-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-gui almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-gui ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-instaweb ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-man Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-man 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-man Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-man 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-man-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-man Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-man 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-man-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-man Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-man 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-man-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-mediawiki 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-mediawiki 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-mediawiki-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-mediawiki 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-mediawiki-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-mediawiki 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-mediawiki-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-p4 amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-subtree RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-subtree almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-subtree amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-subtree ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-svn 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [git-svn 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-svn-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-svn 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-svn-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-svn 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-svn-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-svn almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-svn ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [gitk 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | gitk Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [gitk 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitk-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | gitk Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [gitk 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitk-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | gitk Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [gitk 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gitk-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | gitk almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | gitk ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [gitweb 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.13 | [gitweb 1:2.25.1-1ubuntu3.13](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitweb-1-2.25.1-1ubuntu3.13.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [gitweb 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitweb-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [gitweb 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gitweb-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | gitweb almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | gitweb ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | perl-Git ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | perl-Git-SVN ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.