git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: Fixed an issue where dirty data was not accounted in getsecsrequired. This could trigger a system panic in certain test cases. Kernel bug at fs/f2fs/segment.c:2752! RIP: 0010:newcurseg+0xc81/0x2110 Call trace:...

Azure Linux 3.0 Security Update: git-lfs (CVE-2024-53263)

The version of git-lfs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53263 advisory. - Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a...

CVE-2022-24826

On Windows, if Git LFS operates on a malicious repository with a ..exe file as well as a file named git.exe, and git.exe is not found in PATH, the ..exe program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the malicious...

CBL Mariner 2.0 Security Update: git-lfs (CVE-2024-53263)

The version of git-lfs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53263 advisory. - Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a...

CVE-2023-39325 affecting package git-lfs for versions less than 3.6.1-1

CVE-2023-39325 affecting package git-lfs for versions less than 3.6.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53263 affecting package git-lfs for versions less than 3.6.1-1

CVE-2024-53263 affecting package git-lfs for versions less than 3.6.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package git-lfs for versions less than 3.6.1-1

CVE-2023-45288 affecting package git-lfs for versions less than 3.6.1-1. An upgraded version of the package is available that resolves this issue...

AlmaLinux 8 : git-lfs (ALSA-2025:0845)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0845 advisory. git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 Tenable has extracted the preceding description block directly from the...

Mageia: Security Advisory (MGASA-2025-0028)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated git-lfs packages fix security vulnerability

Git LFS permits exfiltration of credentials via crafted HTTP URLs. CVE-2024-53263...

MGASA-2025-0028 Updated git-lfs packages fix security vulnerability

Git LFS permits exfiltration of credentials via crafted HTTP URLs. CVE-2024-53263...

git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs

A flaw was found in the Git LFS git extension. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters and then sends any credentials it receives back from the Gi...

RHSA-2025:0825 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

CVE-2024-53263 affecting package git-lfs for versions less than 3.5.1-4

CVE-2024-53263 affecting package git-lfs for versions less than 3.5.1-4. A patched version of the package is available...

git-lfs security update

3.4.1-4 - Backport CVE-2024-53263 fixes - Resolves: RHEL-73931...

RHEL 8 : git-lfs (RHSA-2025:0825)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0825 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 For mo...

Oracle Linux 8 : git-lfs (ELSA-2025-0845)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0845 advisory. - Backport CVE-2024-53263 fixes Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...