Red Hat Security Advisory: git-lfs security update

02 / AFFECTED SOFTWARE

Affected packages

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

05 / REFERENCES

Further evidence

• http://www.openwall.com/lists/oss-security/2024/03/08/4
• https://access.redhat.com/errata/RHSA-2024:2724
• https://access.redhat.com/security/cve/CVE-2023-45288
• https://access.redhat.com/security/cve/CVE-2023-45289
• https://access.redhat.com/security/cve/CVE-2023-45290
• https://access.redhat.com/security/cve/CVE-2024-24783
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2268017
• https://bugzilla.redhat.com/show_bug.cgi?id=2268018
• https://bugzilla.redhat.com/show_bug.cgi?id=2268019
• https://bugzilla.redhat.com/show_bug.cgi?id=2268273
• https://github.com/advisories/GHSA-3q2c-pvp5-3cqp
• https://go.dev/cl/569339
• https://go.dev/cl/569341
• https://go.dev/issue/65383
• https://go.dev/issue/65390
• https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
• https://nowotarski.info/http2-continuation-flood/
• https://nvd.nist.gov/vuln/detail/CVE-2023-45288
• https://nvd.nist.gov/vuln/detail/CVE-2023-45289
• https://nvd.nist.gov/vuln/detail/CVE-2023-45290
• https://nvd.nist.gov/vuln/detail/CVE-2024-24783
• https://pkg.go.dev/vuln/GO-2024-2598
• https://pkg.go.dev/vuln/GO-2024-2599
• https://pkg.go.dev/vuln/GO-2024-2687
• https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2724.json
• https://security.netapp.com/advisory/ntap-20240329-0004
• https://security.netapp.com/advisory/ntap-20240329-0005
• https://www.cve.org/CVERecord?id=CVE-2023-45288
• https://www.cve.org/CVERecord?id=CVE-2023-45289
• https://www.cve.org/CVERecord?id=CVE-2023-45290
• https://www.cve.org/CVERecord?id=CVE-2024-24783
• https://www.kb.cert.org/vuls/id/421644