[SECURITY] Fedora 43 Update: git-lfs-3.7.1-1.fc43

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server...

[SECURITY] Fedora 41 Update: git-lfs-3.7.1-1.fc41

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server...

Fedora 41 : git-lfs (2025-5872b9ec46)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5872b9ec46 advisory. Update to latest version 2404637 Fix CVE-2025-22870, CVE-2025-47910, CVE-2025-47906, CVE-2025-26625 Tenable has extracted the preceding description...

Fedora 42 : git-lfs (2025-f8d1e1df04)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f8d1e1df04 advisory. Update to latest version 2404637 Fix CVE-2025-47910, CVE-2025-47906, CVE-2025-26625 Tenable has extracted the preceding description block directly...

Fedora 43 : git-lfs (2025-7dfe24dbaa)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7dfe24dbaa advisory. Update to latest version 2404637 Fix CVE-2025-26625 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora: Security Advisory (FEDORA-2025-f8d1e1df04)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-7dfe24dbaa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-5872b9ec46)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA90929 OSI vulnerability in Git for Windows

Information disclosure vulnerability was found in Git for Windows. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories Git for Windows 2.51.2 Exploitation Public exploits exist for this vulnerability. Related products Git-for-Windows CVE list...

Fedora: Security Advisory (FEDORA-2025-3b4c75f23c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2025-33395

BBOT's gitlab.py exposes globally configured "gitlab" API key...

The vulnerability of the software platform’s JSON file processing mechanism, based on Git, allows a violator to trigger a service failure. This vulnerability enables a violator to cause a service failure.

The vulnerability of the software platform’s JSON file processing mechanism, based on Git, for collaborative code development in GitLab CE/EE, is related to unlimited resource distribution. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially...

Improper Access Control

io.vertx:vertx-web is vulnerable to Improper Access Control. The vulnerability is due to a flaw in the StaticHandler configuration that restricts access only to hidden files but not hidden directories, which allows an attacker to access sensitive files such as .git/config within hidden directorie...

EulerOS 2.0 SP13 : git (EulerOS-SA-2025-2288)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command...

EulerOS 2.0 SP13 : git (EulerOS-SA-2025-2256)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command...

NewStart CGSL MAIN 7.02 : git Multiple Vulnerabilities (NS-SA-2025-0249)

The remote NewStart CGSL host, running version MAIN 7.02, has git packages installed that are affected by multiple vulnerabilities: - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such ...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-2288)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-2256)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2025-3995 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd...

The vulnerability of the checkout() and pull() functions in Git’s version control extensions allows a malicious actor to gain access to and write arbitrary files.

The vulnerability of the checkout and pull functions in Git’s version control extensions for large Git LFS files is related to the improper definition of symbolic links during file access. Exploiting this vulnerability could allow an attacker to gain access to arbitrary files...