diff --git a/main/git/APKBUILD b/main/git/APKBUILD
index 344209df1cd6a2f963cf013bb35a5d92a908b169..76f34f67892d9d20822ece50592baa45e86d6b9f 100644
--- a/main/git/APKBUILD
+++ b/main/git/APKBUILD
@@ -2,6 +2,9 @@
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 #
 # secfixes:
+#   2.40.4-r0:
+#     - CVE-2024-50349
+#     - CVE-2024-52006
 #   2.40.3-r0:
 #     - CVE-2024-32002
 #     - CVE-2024-32004
@@ -53,7 +56,7 @@
 #     - CVE-2021-46101
 
 pkgname=git
-pkgver=2.40.3
+pkgver=2.40.4
 pkgrel=0
 pkgdesc="Distributed version control system"
 url="https://www.git-scm.com/"
@@ -371,7 +374,7 @@ _perl_config() {
 }
 
 sha512sums="
-a5fff4276aa48e319b6d6e5497185232c938cf57ff0b54a138900664735447c7dbfc11f7a73d23af4697d006e08f90692ab6d62b88065b04fccd06f03400fc74  git-2.40.3.tar.xz
+0491d759d9bc44edb705acc30058ba24bf03dc9336ee825680d00c4690a825bdd36b2b2911e7f12889bca9a6a72644ce9b299cc16fe74fd033e74f7f114a4c2f  git-2.40.4.tar.xz
 89528cdd14c51fd568aa61cf6c5eae08ea0844e59f9af9292da5fc6c268261f4166017d002d494400945e248df6b844e2f9f9cd2d9345d516983f5a110e4c42a  git-daemon.initd
 fbf1f425206a76e2a8f82342537ed939ff7e623d644c086ca2ced5f69b36734695f9f80ebda1728f75a94d6cd2fcb71bf845b64239368caab418e4d368c141ec  git-daemon.confd
 be5d568fc5b8b84c9afb97b31e471e41f32ccfe188eba0588ea0ef98b2d96c2ce4b2c1a3d70e88205aa4f6667f850b3f32c13bbb149ecddbf670344c162a4e25  fix-t4219-with-sticky-bit.patch