This Red Hat security advisory addresses five distinct vulnerabilities in Git, a distributed version control system. The issues include recursive clone remote code execution (CVE-2024-32002), RCE during cloning of local repositories (CVE-2024-32004), additional local RCE (CVE-2024-32465), insecure hardlinks (CVE-2024-32020), and symlink bypass (CVE-2024-32021). These vulnerabilities could allow an attacker to execute arbitrary code locally or remotely under certain conditions. The advisory provides updated Git packages for Red Hat Enterprise Linux 9 to remediate these issues. No CVSS scores are provided in the advisory, but the severity is rated as Important by Red Hat Product Security.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on affected systems, potentially leading to full system compromise. The vulnerabilities affect Git operations such as cloning repositories, including recursive and local clones, and involve insecure handling of filesystem objects like hardlinks and symlinks. This could impact users who clone or interact with maliciously crafted Git repositories. The advisory does not report known exploits in the wild at this time.

Red Hat has released updated Git packages that address these vulnerabilities. Users and administrators of Red Hat Enterprise Linux 9 should apply the security update as soon as possible to remediate these issues. Detailed instructions for applying the update are available at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified; applying the official update is the recommended course of action.