From: Thomas Klausner <wiz@gatalith.at>
Date: Sun, 02 Nov 2025 00:48:53 GMT
Subject: CVE-2024-52005 status?
Message-ID: <7mfgh4ufx6wr3ict2ee6utg3vvfpiy6xi3rfyfu4yionmcwu6a@yry3kefdxbwf>

Hi!

I'm trying to find out more details about CVE-2024-52005 so I can
handle it correctly in pkgsrc.

https://nvd.nist.gov/vuln/detail/CVE-2024-52005

points to

https://github.com/git/git/security/advisories/GHSA-7jjc-gg6m-3329

which lists many affected versions, but no fixed versions.  I only
found one reference to the CVE in the release announcement for 'Git
for Windows' 2.47.1(2):

https://groups.google.com/g/git-packagers/c/ZWDc6K6tYcc/m/VxikezMeCgAJ

The CVE description sounds like this also might affect non-Windows Git
versions. Can someone please tell me if this was fixed, and in which
version?

Thanks,
 Thomas

(Please cc me, I'm not subscribed.)