[CLSA-2026:1788041847] Fix CVE(s): CVE-2025-48384
Type:
security
Severity:
Important
Release date:
2026-08-29 22:17:38 UTC
Description:
* SECURITY UPDATE: arbitrary code execution via CR in config values - debian/patches/CVE-2025-48384.patch: quote config values containing a carriage return so that it is not stripped when read back - CVE-2025-48384
CVEs fixed:
Updated packages:
  • git_2.20.1-2+deb10u9+tuxcare.els4_amd64.deb
    sha:1e39b108b5f6e5775a4dd8a89465ce85767597f7
  • git-all_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:89bc71ecea2b994eedde32ac8c684fb3ec39b437
  • git-cvs_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:27d16d9ed9456afe5f365c01a86829300c9c3305
  • git-daemon-run_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:d4391ddc36d19c9a29d80e97bc3610280bee3553
  • git-daemon-sysvinit_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:442e2f8bbd3c3299084ca46cdac6d6d33cb541f8
  • git-doc_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:e675bee424b87e3a0d0231910e44fa204fb792a6
  • git-el_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:af597b67eaa1ea4d9bb93cddd07dbbfd5e3a0853
  • git-email_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:2c5f0f0d56c175240902e47c242c72f1fa64f680
  • git-gui_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:91cd4ba52085f68759ad3a0047e0f04bf0630b65
  • git-man_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:a98898663814d1ff3aaa0da8f68b199bf7e48bfa
  • git-mediawiki_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:52467a3f734b887ea8ac44f6f03a1faf21125853
  • git-svn_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:86e94a35e9cfbc4b6f0c39b1fbbd393806c813bb
  • gitk_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:04a7de4fdbffffefc133715fd8383ce4fe2962e0
  • gitweb_2.20.1-2+deb10u9+tuxcare.els4_all.deb
    sha:d46f0a0bb5e2bacc65d9221d6c45e27b46a72c22
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.