git/list[1] front-page[2] threads[3] people[4] search[5] about
 

CVE-2024-52005 status?

From
TKThomas Klausner <wiz@gatalith.at>
Date
Nov 2, 2025, 00:48 UTC
Message-ID
<7mfgh4ufx6wr3ict2ee6utg3vvfpiy6xi3rfyfu4yionmcwu6a@yry3kefdxbwf>
Hi!

I'm trying to find out more details about CVE-2024-52005 so I can handle it correctly in pkgsrc.

https://nvd.nist.gov/vuln/detail/CVE-2024-52005
points to
https://github.com/git/git/security/advisories/GHSA-7jjc-gg6m-3329

which lists many affected versions, but no fixed versions. I only found one reference to the CVE in the release announcement for 'Git for Windows' 2.47.1(2):

https://groups.google.com/g/git-packagers/c/ZWDc6K6tYcc/m/VxikezMeCgAJ

The CVE description sounds like this also might affect non-Windows Git versions. Can someone please tell me if this was fixed, and in which version?

Thanks,
 Thomas
(Please cc me, I'm not subscribed.)
Next: brian m. carlson
Message 1 of 3 in “CVE-2024-52005 status?”
  1. Thomas KlausnerNov 2, 2025
  2. brian m. carlsonNov 2, 2025
  3. rsbecker@nexbridge.comNov 2, 2025

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.