RLSA-2026:4164 Important: git-lfs security update

🗓️ 11 Mar 2026 12:08:24Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

Git Large File Storage security update addressing multiple CVEs in crypto/x509, net/url, and crypto/tls.

Reporter	Title	Published	Views	Family All 4540
RedhatCVE	CVE-2025-61726	2 Feb 202620:32	–	redhatcve
RedhatCVE	CVE-2025-61729	11 Dec 202504:50	–	redhatcve
RedhatCVE	CVE-2025-68121	12 Feb 202611:01	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.50 packages and security update	4 Mar 202609:07	–	redhat
RedHat Linux	golang: net/url: Memory exhaustion in query parameter parsing in net/url	4 Mar 202609:07	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.0 release	26 Feb 202611:02	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	26 Feb 202614:36	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	26 Feb 202614:36	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.0 release	26 Feb 202619:58	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: go-toolset:rhel8 security update	2 Mar 202601:25	–	redhat

Source	Link
errata	www.errata.rockylinux.org/RLSA-2026:4164
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

23 Mar 2026 04:52Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.01945

git large file storage certificate vulnerability memory exhaustion session resumption issue tls vulnerability