git-lfs-3.4.1-4.el9_4

エラータID: AXSA:2024-8856:07

Release date: 
Thursday, September 26, 2024 - 21:17
Subject: 
git-lfs-3.4.1-4.el9_4
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-34156
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. git-lfs-3.4.1-4.el9_4.src.rpm
    MD5: 537dc2293976640ddbee534bf890ce69
    SHA-256: 85cefe8cb63a1529068cf65829b06c6ca81b18c58bc0493ab48c28cdb3ec2f7a
    Size: 3.33 MB

Asianux Server 9 for x86_64
  1. git-lfs-3.4.1-4.el9_4.x86_64.rpm
    MD5: 89cd4e41858db776cb15bc3aafe47182
    SHA-256: 566cacb9f68d392163e8fe88d306ba9524c8628886326b834e6c0e8c9f12a3c7
    Size: 4.19 MB