Ref# ADV2024_169 | Date: May 24th 2024

---

GitHub has published a security advisory highlighting vulnerabilities in the following products on May 20th, 2024. It is recommended that you take the necessary precautions by ensuring your products are always updated.

• GitHub Enterprise Server – versions 3.12.x prior to 3.12.4
• GitHub Enterprise Server – versions 3.11.x prior to 3.11.10
• GitHub Enterprise Server – versions 3.10.x prior to 3.10.12
• GitHub Enterprise Server – versions 3.9.x prior to 3.9.15

For more information on these updates, you can follow these URLs:

• GitHub Release Notes #3.12.4
• GitHub Release Notes #3.11.10
• GitHub Release Notes #3.10.12
• GitHub Release Notes #3.9.15

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary.

PDF Download: GitHub Security Advisory

References

• GitHub Docs. (May 20th, 2024). Retrieved from GitHub.
  https://docs.github.com/en
• GitHub Security Advisory. (May 21st, 2024). Retrieved from Canadian Centre for Cyber Security.
  https://www.cyber.gc.ca/en/alerts-advisories/github-security-advisory-av24-284