ALSA-2024%3A2724 | Vulnetix

ALSA-2024%3A2724 PUBLISHED CVSS 8.699999809265137 HIGH

Record from OSV · Published May 7, 2024

Important: git-lfs security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
git-lfs	AlmaLinux:9	3.4.1-2.el9_4

Risk scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

Vendor	Product	Versions
AlmaLinux:9	git-lfs	0

Timeline

May 7, 2024 CVE Published
May 9, 2024 CVE Updated
Mar 6, 2026 Distribution Patch (2 in total, the first dated here)
Mar 6, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ALSA-2024%3A2724
vulnetix vdb fixes ALSA-2024%3A2724

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ALSA-2024%253A2724/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://access.redhat.com/errata/RHSA-2024:2724 advisory
https://access.redhat.com/security/cve/CVE-2023-45288 report
https://access.redhat.com/security/cve/CVE-2023-45289 report
https://access.redhat.com/security/cve/CVE-2023-45290 report
https://access.redhat.com/security/cve/CVE-2024-24783 report
https://bugzilla.redhat.com/2268017 report
https://bugzilla.redhat.com/2268018 report
https://bugzilla.redhat.com/2268019 report
https://bugzilla.redhat.com/2268273 report
https://errata.almalinux.org/9/ALSA-2024-2724.html advisory

Look up in the Resolve Platform →