# CVE-2024-32021: Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

CVE-2024-32021 is fixed in 28 products on 2 platforms, first by Git 2.45.1, released May 2, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-32021
- Priority: High
- CVSS: 7.1 (Important)
- EPSS: 0.0102
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 14, 2024
- Weakness: CWE-547: Use of Hard-coded, Security-relevant Constants
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-32021

## Description

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`), the optimizations for local cloning will be used, which include attempting to hard link the object files instead of copying them. While the code includes checks against symbolic links in the source repository, which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check, and then a symlink during the operation, this will allow the adversary to bypass the check and create hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Git | 2.45.1 | [Git 2.45.1](https://patchblox.com/security/data/fix/windows-app/git.git-2.45.1.md) | May 2, 2024 |
| Linux | git Debian 12.15 (bookworm) | 1:2.39.5-0+deb12u1 | [DEBIAN-CVE-2024-32021](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32021.md) | May 14, 2024 |
| Linux | git Debian 13.5 (trixie) | 1:2.45.1-1 | [DEBIAN-CVE-2024-32021](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32021.md) | May 14, 2024 |
| Linux | git Debian 14 | 1:2.45.1-1 | [DEBIAN-CVE-2024-32021](https://patchblox.com/security/data/fix/linux/debian-cve-2024-32021.md) | May 14, 2024 |
| Linux | git RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git opensuse-leap 15.6 | 2.43.0-150600.3.3.1 | [SUSE-SU-2024:2277-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2277-1.md) | Jul 2, 2024 |
| Linux | git rocky 8 | 0:2.43.5-1.el8_10 | [RLSA-2024:4084](https://patchblox.com/security/data/fix/linux/rlsa-2024-4084.md) | Jul 2, 2024 |
| Linux | git rocky 9 | 0:2.43.5-1.el9_4 | [RLSA-2024:4083](https://patchblox.com/security/data/fix/linux/rlsa-2024-4083.md) | Jul 2, 2024 |
| Linux | git sles 15.6 | 2.43.0-150600.3.3.1 | [SUSE-SU-2024:2277-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2277-1.md) | Jul 2, 2024 |
| Linux | git-all RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-all Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-all 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-all Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-all 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-all-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-all Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-all 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-all-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-all Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-all 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-all-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-all almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-all amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-all ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-all ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core-doc RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-doc almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-core-doc amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-core-doc ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-core-doc ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-credential-libsecret ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-credential-libsecret-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-cvs Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-cvs 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-cvs 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-cvs-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-cvs 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-cvs-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-cvs Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-cvs 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-cvs-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-cvs amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-daemon ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-daemon-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-daemon-run Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-daemon-run 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-daemon-run 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-run-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-daemon-run 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-run-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-daemon-run Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-daemon-run 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-daemon-run-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-daemon-sysvinit 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-daemon-sysvinit 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-daemon-sysvinit-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-daemon-sysvinit 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-daemon-sysvinit-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-daemon-sysvinit Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-daemon-sysvinit 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-daemon-sysvinit-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-debuginfo amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-debugsource amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-el Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-el 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-el Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-el 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-el-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-email RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-email Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-email 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-email Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-email 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-email-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-email Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-email 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-email-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-email Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-email 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-email-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-email almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-email amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-email ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-email ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-gui 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-gui 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-gui-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-gui 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-gui-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-gui Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-gui 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-gui-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-gui almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-gui amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-gui ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-gui ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-instaweb amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-instaweb ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-instaweb ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-man Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-man 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-man Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-man 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-man-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-man Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-man 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-man-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-man Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-man 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-man-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-mediawiki 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-mediawiki 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-mediawiki-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-mediawiki 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-mediawiki-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-mediawiki Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-mediawiki 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-mediawiki-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-p4 amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-subtree RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-subtree almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-subtree amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-subtree ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-subtree ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [git-svn 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [git-svn 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-git-svn-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [git-svn 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-git-svn-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | git-svn Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [git-svn 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-git-svn-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | git-svn almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | git-svn amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | git-svn ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | git-svn ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [gitk 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | gitk Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [gitk 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitk-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | gitk Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [gitk 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitk-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | gitk Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [gitk 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gitk-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | gitk almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitk amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | gitk ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitk ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.18+esm1 | [gitweb 1:2.17.1-1ubuntu0.18+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.18-esm1.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 20.04 LTS (focal) | 1:2.25.1-1ubuntu3.12 | [gitweb 1:2.25.1-1ubuntu3.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gitweb-1-2.25.1-1ubuntu3.12.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 22.04.1 LTS (jammy) | 1:2.34.1-1ubuntu1.11 | [gitweb 1:2.34.1-1ubuntu1.11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gitweb-1-2.34.1-1ubuntu1.11.md) | May 14, 2024 |
| Linux | gitweb Ubuntu 24.04.5 LTS (noble) | 1:2.43.0-1ubuntu7.1 | [gitweb 1:2.43.0-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gitweb-1-2.43.0-1ubuntu7.1.md) | May 14, 2024 |
| Linux | gitweb almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | gitweb amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | gitweb ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | gitweb ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | perl-Git ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN RHEL 8 | 0:2.43.5-1.el8_10 | [RHSA-2024:4084](https://patchblox.com/security/data/fix/linux/rhsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN RHEL 9 | 0:2.43.5-1.el9_4 | [RHSA-2024:4083](https://patchblox.com/security/data/fix/linux/rhsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN almalinux 8 | 2.43.5-1.el8_10 | [ALSA-2024:4084](https://patchblox.com/security/data/fix/linux/alsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN almalinux 9 | 2.43.5-1.el9_4 | [ALSA-2024:4083](https://patchblox.com/security/data/fix/linux/alsa-2024-4083.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN amzn 2023 | 2.40.1-1.amzn2023.0.3 | [ALAS2023-2024-623](https://patchblox.com/security/data/fix/linux/alas2023-2024-623.md) | May 23, 2024 |
| Linux | perl-Git-SVN ol 8 | 0:2.43.5-1.el8_10 | [ELSA-2024-4084](https://patchblox.com/security/data/fix/linux/elsa-2024-4084.md) | Jun 25, 2024 |
| Linux | perl-Git-SVN ol 9 | 0:2.43.5-1.el9_4 | [ELSA-2024-4083](https://patchblox.com/security/data/fix/linux/elsa-2024-4083.md) | Jun 25, 2024 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.