# CVE-2024-32020: Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will

CVE-2024-32020 is fixed in 28 products on 2 platforms, first by Git 2.45.1, released May 2, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-32020
- Priority: Routine
- CVSS: 3.9 (Important)
- EPSS: 0.0052
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 14, 2024
- Weakness: CWE-281: Improper Preservation of Permissions
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-32020

## Description

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into the target repository's object database when source and target repository reside on the same disk. If the source repository is owned by a different user, then those hardlinked files may be rewritten at any point in time by the untrusted user. Cloning local repositories will cause Git to either copy or hardlink files of the source repository into the target repository. This significantly speeds up such local clones compared to doing a "proper" clone and saves both disk space and compute time. When cloning a repository located on the same disk that is owned by a different user than the current user we also end up creating such hardlinks. These files will continue to be owned and controlled by the potentially-untrusted user and can be rewritten by them at will in the future. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Git | 2.45.1 | [Git 2.45.1](https://patchblox.com/security/data/fix/windows-app/git.git-2.45.1.md) | May 2, 2024 |
| Linux | git Debian 12.15 (bookworm) | 1:2.39.5-0+deb12u1 | [DEBIAN-CVE-2024-32020](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32020.md) | May 14, 2024 |
| Linux | git Debian 13.5 (trixie) | 1:2.45.1-1 | [DEBIAN-CVE-2024-32020](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32020.md) | May 14, 2024 |
| Linux | git Debian 14 | 1:2.45.1-1 | [DEBIAN-CVE-2024-32020](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32020.md) | May 14, 2024 |
| Linux | git RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git opensuse-leap 15.6 | 2.43.0-150600.3.3.1 | [SUSE-SU-2024:2277-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2277-1.md) | Jul 2, 2024 |
| Linux | git rocky 8 | 0:2.43.5-1.el8_10 | [RLSA-2024:4084](https://patchblox.com/security/data/fix/linux/rlsa-2024-4084.md) | Jul 2, 2024 |
| Linux | git rocky 9 | 0:2.43.5-1.el9_4 | [RLSA-2024:4083](https://patchblox.com/security/data/fix/linux/rlsa-2024-4083.md) | Jul 2, 2024 |
| Linux | git sles 15.6 | 2.43.0-150600.3.3.1 | [SUSE-SU-2024:2277-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2277-1.md) | Jul 2, 2024 |
| Linux | git-all RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-all Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-all 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-all Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-all 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-all-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-all Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-all 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-all-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-all Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-all 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-all-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-all almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-all amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-all ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core-doc RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-doc almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-doc amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core-doc ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-credential-libsecret ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-cvs Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-cvs 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-cvs 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-cvs-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-cvs 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-cvs-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-cvs 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-cvs-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-cvs amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon-run Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-daemon-run 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-daemon-run 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-run-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-daemon-run 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-run-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-daemon-run 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-daemon-run-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-daemon-sysvinit 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-daemon-sysvinit 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-sysvinit-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-daemon-sysvinit 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-sysvinit-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-daemon-sysvinit 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-daemon-sysvinit-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-debugsource amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-el Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-el 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-el Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-el 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-el-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-email RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-email Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-email 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-email Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-email 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-email-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-email Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-email 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-email-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-email Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-email 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-email-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-email almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-email amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-email ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-gui 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-gui 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-gui-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-gui 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-gui-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-gui 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-gui-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-gui almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-gui ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-instaweb ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-man Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-man 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-man Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-man 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-man-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-man Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-man 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-man-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-man Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-man 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-man-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-mediawiki 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-mediawiki 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-mediawiki-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-mediawiki 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-mediawiki-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-mediawiki 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-mediawiki-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-p4 amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-subtree RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-subtree almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-subtree amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-subtree ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-svn 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-svn 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-svn-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-svn 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-svn-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-svn 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-svn-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-svn almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-svn ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [gitk 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | gitk Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [gitk 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitk-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | gitk Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [gitk 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitk-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | gitk Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [gitk 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gitk-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | gitk almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | gitk ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [gitweb 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [gitweb 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitweb-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [gitweb 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitweb-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [gitweb 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gitweb-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | gitweb almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | gitweb ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | perl-Git ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | perl-Git-SVN ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.