OPENSUSE-SU-2025:15643-1 git-lfs-3.7.1-1.1 on GA media

These are all security issues fixed in the git-lfs-3.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2020-5614

Malware in sbrugna...

EUVD-2020-2546

Malware in sbrugna...

EUVD-2019-16344

Malware in sbrugna...

PT-2025-42616

Name of the Vulnerable Software and Affected Versions Git LFS versions 0.5.2 through 3.7.0 Description Git LFS commands, specifically git lfs checkout and git lfs pull, may write to files outside the intended Git working tree if symbolic or hard links are present that conflict with paths tracked ...

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...

RLSA-2025:7256 Moderate: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: crypto/tls: panic when processing post-handshake message on QUIC connections...

EUVD-2022-1652

Malicious code in bioql PyPI...

EUVD-2022-5497

Malicious code in bioql PyPI...

EUVD-2022-0965

Malicious code in bioql PyPI...

EUVD-2024-31643

Malicious code in bioql PyPI...

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, video...

KLA89352 OAF vulnerability in Git LFS

Path traversal vulnerability was found in Git LFS. Malicious users can exploit this vulnerability to overwrite arbitrary files. Original advisories Fixed in Git LFS 3.7.1 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-26625 critical Solution Update to the latest...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, lvm-driver, apm-server-fips, gitsign, kube-logging-operator-custom-runner-fips, modelmesh-runtime-adapter, prometheus-node-exporter-fips, karpenter-fips, shfmt, bank-vaults, knative-eventing, etcd-fips, memcached-exporter-fips, vexctl,...

SUSE CVE-2025-58158

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...

GO-2025-3926 Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness

Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness...

Linux Distros Unpatched Vulnerability : CVE-2025-38626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ mode=lfs mount option, generic/299 will cause system panic as below:...

SUSE SLED15: git / git-arch / git-core / git-credential-libsecret / git-cvs / etc (SUSE-SU-2025:03012-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03012-1 advisory. git was updated from version 2.43.0 to 2.51.0 bsc1243197: - Security issues fixed: CVE-2025-276...

CVE-2025-58158 Harness Affected by Arbitrary File Write in Gitness LFS server

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...

CVE-2025-58158

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...