RHSA-2025:11533
Vulnerability from csaf_opensuse - Published: 2025-07-22 00:00 - Updated: 2026-09-20 11:46Summary
security update for git
Severity
Important
Notes
Title of the patch: security update for git
Description of the patch: This security update provides a functional equivalent of RHSA-2025:11533.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:11533.
Patchnames: RHSA-2025:11533
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
15 products, the same list as for
CVE-2024-50349
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
15 products, the same list as for
CVE-2024-50349
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2024-50349
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
15 products, the same list as for
CVE-2024-50349
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2024-50349
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2024-50349
Threats
Impact
important
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for git",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:11533.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:11533.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:11533",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_11533.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:11533",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-April/004979.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:11533",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-April/004979.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50349 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52006 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-27613 page",
"url": "https://www.suse.com/security/cve/CVE-2025-27613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-27614 page",
"url": "https://www.suse.com/security/cve/CVE-2025-27614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-46835 page",
"url": "https://www.suse.com/security/cve/CVE-2025-46835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-48384 page",
"url": "https://www.suse.com/security/cve/CVE-2025-48384/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-48385 page",
"url": "https://www.suse.com/security/cve/CVE-2025-48385/"
}
],
"title": "security update for git",
"tracking": {
"current_release_date": "2026-09-20T11:46:55Z",
"generator": {
"date": "2025-07-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:11533",
"initial_release_date": "2025-07-22T00:00:00Z",
"revision_history": [
{
"date": "2025-07-22T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:46:55Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "git-all-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-all-0:2.47.3-1.el10_0.noarch",
"product_id": "git-all-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/git-all@2.47.3-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "git-core-doc-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-core-doc-0:2.47.3-1.el10_0.noarch",
"product_id": "git-core-doc-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/git-core-doc@2.47.3-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "git-email-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-email-0:2.47.3-1.el10_0.noarch",
"product_id": "git-email-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git-email@2.47.3-1.el10_0?arch=noarch\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "git-gui-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-gui-0:2.47.3-1.el10_0.noarch",
"product_id": "git-gui-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git-gui@2.47.3-1.el10_0?arch=noarch\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "git-instaweb-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-instaweb-0:2.47.3-1.el10_0.noarch",
"product_id": "git-instaweb-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/git-instaweb@2.47.3-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "git-subtree-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-subtree-0:2.47.3-1.el10_0.noarch",
"product_id": "git-subtree-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/git-subtree@2.47.3-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "git-svn-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "git-svn-0:2.47.3-1.el10_0.noarch",
"product_id": "git-svn-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git-svn@2.47.3-1.el10_0?arch=noarch\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gitk-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "gitk-0:2.47.3-1.el10_0.noarch",
"product_id": "gitk-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gitk@2.47.3-1.el10_0?arch=noarch\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gitweb-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "gitweb-0:2.47.3-1.el10_0.noarch",
"product_id": "gitweb-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/gitweb@2.47.3-1.el10_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "perl-Git-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "perl-Git-0:2.47.3-1.el10_0.noarch",
"product_id": "perl-Git-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-Git@2.47.3-1.el10_0?arch=noarch\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "perl-Git-SVN-0:2.47.3-1.el10_0.noarch",
"product": {
"name": "perl-Git-SVN-0:2.47.3-1.el10_0.noarch",
"product_id": "perl-Git-SVN-0:2.47.3-1.el10_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perl-Git-SVN@2.47.3-1.el10_0?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "git-0:2.47.3-1.el10_0.x86_64",
"product": {
"name": "git-0:2.47.3-1.el10_0.x86_64",
"product_id": "git-0:2.47.3-1.el10_0.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git@2.47.3-1.el10_0?arch=x86_64\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "git-core-0:2.47.3-1.el10_0.x86_64",
"product": {
"name": "git-core-0:2.47.3-1.el10_0.x86_64",
"product_id": "git-core-0:2.47.3-1.el10_0.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git-core@2.47.3-1.el10_0?arch=x86_64\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"product": {
"name": "git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"product_id": "git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git-credential-libsecret@2.47.3-1.el10_0?arch=x86_64\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
},
{
"category": "product_version",
"name": "git-daemon-0:2.47.3-1.el10_0.x86_64",
"product": {
"name": "git-daemon-0:2.47.3-1.el10_0.x86_64",
"product_id": "git-daemon-0:2.47.3-1.el10_0.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:git-scm:git:2.47.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/git-daemon@2.47.3-1.el10_0?arch=x86_64\u0026upstream=git-0:2.47.3-1.el10_0.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 10",
"product": {
"name": "SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:10"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "git-0:2.47.3-1.el10_0.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64"
},
"product_reference": "git-0:2.47.3-1.el10_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-all-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-all-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-core-0:2.47.3-1.el10_0.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64"
},
"product_reference": "git-core-0:2.47.3-1.el10_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-core-doc-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-core-doc-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-credential-libsecret-0:2.47.3-1.el10_0.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64"
},
"product_reference": "git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-daemon-0:2.47.3-1.el10_0.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64"
},
"product_reference": "git-daemon-0:2.47.3-1.el10_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-email-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-email-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-gui-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-gui-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-instaweb-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-instaweb-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-subtree-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-subtree-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "git-svn-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "git-svn-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitk-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "gitk-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitweb-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "gitweb-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-Git-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "perl-Git-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-Git-SVN-0:2.47.3-1.el10_0.noarch as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
},
"product_reference": "perl-Git-SVN-0:2.47.3-1.el10_0.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-50349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50349"
}
],
"notes": [
{
"category": "general",
"text": "Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out the host name for which the user is expected to provide a username and/or a password. At this stage, any URL-encoded parts have been decoded already, and are printed verbatim. This allows attackers to craft URLs that contain ANSI escape sequences that the terminal interpret to confuse users e.g. into providing passwords for trusted Git hosting sites when in fact they are then sent to untrusted sites that are under the attacker\u0027s control. This issue has been patch via commits `7725b81` and `c903985` which are included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50349",
"url": "https://www.suse.com/security/cve/CVE-2024-50349"
},
{
"category": "external",
"summary": "SUSE Bug 1235600 for CVE-2024-50349",
"url": "https://bugzilla.suse.com/1235600"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-50349"
},
{
"cve": "CVE-2024-52006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52006"
}
],
"notes": [
{
"category": "general",
"text": "Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and node.js) interpret single Carriage Return characters as newlines, which renders the protections against CVE-2020-5260 incomplete for credential helpers that treat Carriage Returns in this way. This issue has been addressed in commit `b01b9b8` which is included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52006",
"url": "https://www.suse.com/security/cve/CVE-2024-52006"
},
{
"category": "external",
"summary": "SUSE Bug 1235601 for CVE-2024-52006",
"url": "https://bugzilla.suse.com/1235601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-52006"
},
{
"cve": "CVE-2025-27613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-27613"
}
],
"notes": [
{
"category": "general",
"text": "Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk\u0027s Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-27613",
"url": "https://www.suse.com/security/cve/CVE-2025-27613"
},
{
"category": "external",
"summary": "SUSE Bug 1245938 for CVE-2025-27613",
"url": "https://bugzilla.suse.com/1245938"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-27613"
},
{
"cve": "CVE-2025-27614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-27614"
}
],
"notes": [
{
"category": "general",
"text": "Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ...) supplied by the attacker by invoking gitk filename, where filename has a particular structure. The script is run with the privileges of the user. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-27614",
"url": "https://www.suse.com/security/cve/CVE-2025-27614"
},
{
"category": "external",
"summary": "SUSE Bug 1245939 for CVE-2025-27614",
"url": "https://bugzilla.suse.com/1245939"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-27614"
},
{
"cve": "CVE-2025-46835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-46835"
}
],
"notes": [
{
"category": "general",
"text": "Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-46835",
"url": "https://www.suse.com/security/cve/CVE-2025-46835"
},
{
"category": "external",
"summary": "SUSE Bug 1245942 for CVE-2025-46835",
"url": "https://bugzilla.suse.com/1245942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-46835"
},
{
"cve": "CVE-2025-48384",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-48384"
}
],
"notes": [
{
"category": "general",
"text": "Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-48384",
"url": "https://www.suse.com/security/cve/CVE-2025-48384"
},
{
"category": "external",
"summary": "SUSE Bug 1245943 for CVE-2025-48384",
"url": "https://bugzilla.suse.com/1245943"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-48384"
},
{
"cve": "CVE-2025-48385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-48385"
}
],
"notes": [
{
"category": "general",
"text": "Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles, which allows the remote side to perform protocol injection. This protocol injection can cause the client to write the fetched bundle to a location controlled by the adversary. The fetched content is fully controlled by the server, which can in the worst case lead to arbitrary code execution. The use of bundle URIs is not enabled by default and can be controlled by the bundle.heuristic config option. Some cases of the vulnerability require that the adversary is in control of where a repository will be cloned to. This either requires social engineering or a recursive clone with submodules. These cases can thus be avoided by disabling recursive clones. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-48385",
"url": "https://www.suse.com/security/cve/CVE-2025-48385"
},
{
"category": "external",
"summary": "SUSE Bug 1245946 for CVE-2025-48385",
"url": "https://bugzilla.suse.com/1245946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:git-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-all-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-core-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-core-doc-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-credential-libsecret-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-daemon-0:2.47.3-1.el10_0.x86_64",
"SUSE Liberty Linux 10:git-email-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-gui-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-instaweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-subtree-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:git-svn-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitk-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:gitweb-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-0:2.47.3-1.el10_0.noarch",
"SUSE Liberty Linux 10:perl-Git-SVN-0:2.47.3-1.el10_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-48385"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…