Git update addressing vulnerabilities
Corrective releases of the distributed version control system Git 2.41.3, 2.42.4, 2.43.6, 2.44.3, 2.45.3, 2.46.3, v2.47.2 and 2.48.1 have been published, correcting two vulnerabilities: CVE-2024-50349 — a potential information spoofing issue in the interactive password prompt for the repository. The problem is caused by insufficient host name validation, allowing character encoding in %xx format (URL Encoding). An attacker could use the percent […]
