The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-subtreeUpgrade git-core-docUpgrade gitkUpgrade gitwebUpgrade gitUpgrade git-allUpgrade git-emailUpgrade git-guiUpgrade git-daemonUpgrade perl-Git-SVNUpgrade git-instawebUpgrade git-svnUpgrade perl-GitUpgrade git-coreUpgrade git-credential-libsecret | Jun 26, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade git | Jun 6, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade git-svnUpgrade git-subtreeUpgrade gitkUpgrade git-coreUpgrade git-cvsUpgrade perl-Git-SVNUpgrade git-daemonUpgrade gitUpgrade git-emailUpgrade git-core-docUpgrade git-guiUpgrade git-credential-libsecretUpgrade git-allUpgrade git-p4Upgrade gitwebUpgrade git-instawebUpgrade perl-GitUpgrade git-debuginfo | May 31, 2024 | May 14, 2024 |
| Amazon_linux | — | Upgrade git | May 31, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade git-daemon-debuginfoUpgrade gitwebUpgrade git-debugsourceUpgrade git-guiUpgrade git-coreUpgrade git-svnUpgrade git-credential-libsecretUpgrade perl-Git-SVNUpgrade perl-GitUpgrade git-credential-libsecret-debuginfoUpgrade git-daemonUpgrade gitkUpgrade git-allUpgrade git-subtreeUpgrade git-core-debuginfoUpgrade git-core-docUpgrade git-instawebUpgrade git-p4Upgrade git-emailUpgrade git-debuginfoUpgrade gitUpgrade git-cvs | Feb 17, 2025 | May 14, 2024 |
| Debian | — | Upgrade git | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade git-helpUpgrade git | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gitUpgrade git-help | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade git-coreUpgrade git-helpUpgrade git | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade git-helpUpgrade git | Oct 8, 2024 | May 14, 2024 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.6 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.8 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.4 version stream, or upgrade to a newer supported version of Visual Studio 2022. | Jun 25, 2025 | May 14, 2024 |
| Oracle_linux | — | Upgrade git-subtreeUpgrade git-core-docUpgrade gitUpgrade git-coreUpgrade gitwebUpgrade git-credential-libsecretUpgrade git-svnUpgrade git-allUpgrade perl-Git-SVNUpgrade git-guiUpgrade gitkUpgrade git-emailUpgrade git-daemonUpgrade git-instawebUpgrade perl-Git | Jun 25, 2024 | May 14, 2024 |
| Redhat_linux | — | Upgrade perl-GitUpgrade gitUpgrade git-emailUpgrade git-core-docUpgrade git-allUpgrade git-core-debuginfoUpgrade git-debuginfoUpgrade gitwebUpgrade gitkUpgrade git-credential-libsecret-debuginfoUpgrade git-instawebUpgrade git-subtreeUpgrade git-coreUpgrade git-svnUpgrade git-daemonNo solution existsUpgrade perl-Git-SVNUpgrade git-daemon-debuginfoUpgrade git-guiUpgrade git-credential-libsecretUpgrade git-debugsource | Jun 26, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade git-coreUpgrade git-debugsourceUpgrade git-daemon-debuginfoUpgrade git-subtreeUpgrade git-core-debuginfoUpgrade gitUpgrade git-debuginfoUpgrade git-credential-libsecret-debuginfoUpgrade git-daemonUpgrade git-credential-libsecret | Jul 3, 2024 | May 14, 2024 |
| Suse | — | Upgrade perl-GitUpgrade git-svnUpgrade git-webUpgrade gitUpgrade git-credential-libsecretUpgrade git-archUpgrade git-docUpgrade git-coreUpgrade git-guiUpgrade git-daemonUpgrade git-emailUpgrade git-p4Upgrade git-credential-gnome-keyringUpgrade git-cvsUpgrade gitk | May 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade gitUpgrade git (Ubuntu Pro) | Jun 6, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub