{
  "product": "git-lfs",
  "url": "https://patchblox.com/security/product/linux/git-lfs",
  "summary": "Patch Radar has 47 security fixes for git-lfs, closing 47 CVEs. The newest is RHSA-2026:90757 (3.6.1-2.el10_0.8), released October 29, 2026.",
  "platform": "linux",
  "supported": true,
  "fixCount": 47,
  "cveCount": 47,
  "exploitedCveCount": 0,
  "unfixedCveCount": 0,
  "fixes": [
    {
      "fix": "RHSA-2026:90757",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-90757",
      "released": "2026-10-29T21:40:03Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0.8",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:67161",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-67161",
      "released": "2026-09-19T18:31:30Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-13.el8_10",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:66364",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-66364",
      "released": "2026-09-13T12:48:01Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.7.1-4.el9_8.3",
      "priority": "High",
      "cveCount": 5,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:39319",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-39319",
      "released": "2026-07-18T12:44:55Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.7.1-4.el9_8.2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:39266",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-39266",
      "released": "2026-07-18T12:43:26Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-12.el8_10",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:67149",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-67149",
      "released": "2026-06-30T14:31:10Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0.7",
      "priority": "Urgent",
      "cveCount": 7,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:30854",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-30854",
      "released": "2026-06-29T14:21:35Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.7.1-4.el9_8.1",
      "priority": "Urgent",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:30853",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-30853",
      "released": "2026-06-29T14:20:20Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-11.el8_10",
      "priority": "Urgent",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:19350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19350",
      "released": "2026-05-15T16:04:04Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.7.1-4.el9_8",
      "priority": "High",
      "cveCount": 8,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:16875",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-16875",
      "released": "2026-05-15T16:01:54Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-10.el8_10",
      "priority": "High",
      "cveCount": 4,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:7259",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7259",
      "released": "2026-04-15T19:05:11Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.6.1-8.el9_7",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:19715",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19715",
      "released": "2026-04-08T01:06:58Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0.4",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:3928",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3928",
      "released": "2026-03-12T22:28:44Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.6.1-7.el9_7",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:3985",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3985",
      "released": "2026-03-12T22:27:24Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-8.el8_10",
      "priority": "High",
      "cveCount": 2,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:9435",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-9435",
      "released": "2026-03-06T21:28:14Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0.3",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:2323",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-2323",
      "released": "2026-02-09T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-7.el8_10",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:4166",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-4166",
      "released": "2026-02-05T17:48:44Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0.2",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:23744",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-23744",
      "released": "2026-01-16T01:46:33Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.6.1-4.el9_7",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:23745",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-23745",
      "released": "2026-01-16T01:45:34Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-6.el8_10",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DEBIAN-CVE-2025-26625",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-26625",
      "released": "2025-10-17T16:15:37Z",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "3.3.0-1\u002Bdeb12u2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DEBIAN-CVE-2025-26625",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-26625",
      "released": "2025-10-17T16:15:37Z",
      "release": "Debian 14",
      "fixedVersion": "3.7.1-1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DEBIAN-CVE-2025-26625",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-26625",
      "released": "2025-10-17T16:15:37Z",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.6.1-1\u002Bdeb13u1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2026:0224",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-0224",
      "released": "2025-10-17T15:30:14Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0.1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "git-lfs 3.4.1-1ubuntu0.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-git-lfs-3.4.1-1ubuntu0.3-esm2",
      "released": "2025-10-17T09:15:00Z",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.4.1-1ubuntu0.3\u002Besm2",
      "priority": "High",
      "cveCount": 2,
      "exploitedCveCount": 0
    },
    {
      "fix": "git-lfs 3.6.1-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-git-lfs-3.6.1-1ubuntu0.1",
      "released": "2025-10-17T09:15:00Z",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.6.1-1ubuntu0.1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:9060",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-9060",
      "released": "2025-06-16T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-5.el8_10",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:9106",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-9106",
      "released": "2025-06-16T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.6.1-2.el9_6",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:7256",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7256",
      "released": "2025-05-13T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.6.1-1.el9",
      "priority": "High",
      "cveCount": 6,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:9063",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-9063",
      "released": "2025-04-08T20:04:34Z",
      "release": "RHEL 10",
      "fixedVersion": "3.6.1-2.el10_0",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:0845",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-0845",
      "released": "2025-01-30T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-4.el8_10",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DSA-5849-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5849-1",
      "released": "2025-01-24T00:00:00Z",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "3.3.0-1\u002Bdeb12u1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2025:0673",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-0673",
      "released": "2025-01-23T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.4.1-4.el9_5",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DLA-4028-1",
      "url": "https://patchblox.com/security/fix/linux/dla-4028-1",
      "released": "2025-01-22T00:00:00Z",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "2.13.2-1\u002Bdeb11u1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DEBIAN-CVE-2024-53263",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-53263",
      "released": "2025-01-14T20:15:28Z",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.5.0-2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "DEBIAN-CVE-2024-53263",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-53263",
      "released": "2025-01-14T20:15:28Z",
      "release": "Debian 14",
      "fixedVersion": "3.5.0-2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "git-lfs 2.3.4-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-lfs-2.3.4-1ubuntu0.1-esm1",
      "released": "2025-01-14T12:15:00Z",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.3.4-1ubuntu0.1~esm1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "git-lfs 2.9.2-1ubuntu0.1~esm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-git-lfs-2.9.2-1ubuntu0.1-esm2",
      "released": "2025-01-14T12:15:00Z",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.9.2-1ubuntu0.1~esm2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "git-lfs 3.0.2-1ubuntu0.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-git-lfs-3.0.2-1ubuntu0.3-esm2",
      "released": "2025-01-14T12:15:00Z",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.0.2-1ubuntu0.3\u002Besm2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2024:7135",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-7135",
      "released": "2024-09-25T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-3.el8_10",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2024:7136",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-7136",
      "released": "2024-09-25T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.4.1-4.el9_4",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2024:3346",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3346",
      "released": "2024-05-23T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-2.el8_10",
      "priority": "High",
      "cveCount": 4,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHBA-2024:3053",
      "url": "https://patchblox.com/security/fix/linux/rhba-2024-3053",
      "released": "2024-05-22T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.4.1-1.el8",
      "priority": "Routine",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2024:2724",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2724",
      "released": "2024-05-07T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.4.1-2.el9_4",
      "priority": "High",
      "cveCount": 4,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHBA-2024:2274",
      "url": "https://patchblox.com/security/fix/linux/rhba-2024-2274",
      "released": "2024-04-30T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.4.1-1.el9",
      "priority": "Routine",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2023:2866",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2866",
      "released": "2023-05-16T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:3.2.0-2.el8",
      "priority": "High",
      "cveCount": 3,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2023:2357",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2357",
      "released": "2023-05-09T00:00:00Z",
      "release": "RHEL 9",
      "fixedVersion": "0:3.2.0-1.el9",
      "priority": "High",
      "cveCount": 10,
      "exploitedCveCount": 0
    },
    {
      "fix": "RHSA-2022:7129",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7129",
      "released": "2022-10-25T00:00:00Z",
      "release": "RHEL 8",
      "fixedVersion": "0:2.13.3-3.el8_6",
      "priority": "High",
      "cveCount": 9,
      "exploitedCveCount": 0
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T00:32:44Z"
}