NS-SA-2025-0052

简介

important: git security update

严重级别

important

主题

An update for git is now available for NewStart CGSL MAIN 7.02.
NewStart Security has rated this update as having a security impact of important. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

详细描述

git:


Security Fix(es):
git: A vulnerability was found in Git. This vulnerability allows the malicious manipulation of repositories containing submodules, exploiting a bug that enables the writing of files into the .git/ directory instead of the submodule's intended worktree. This manipulation facilitates the execution of arbitrary code during the cloning process, bypassing user inspection and control.(CVE-2024-32002)
git: bugfix


Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 7.02.01B6.

影响组件

• git

影响产品

• CGSL MAIN 7.02

更新包

CVE

• CVE-2024-32002

参考

• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-32002