Linux · Security advisory · July 21, 2025

ALSA-2025:11462: Security update for 15 packages

ALSA-2025:11462, released July 21, 2025, fixes 7 CVEs across 15 products. One of them is being exploited (CVE-2025-48384); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
7
None rated Critical
Exploited
1
CVE-2025-48384
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0438
91st percentile

Priority of the 7 CVEs

Patch now 1 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
gitalmalinux 92.47.3-1.el9_6
git-allalmalinux 92.47.3-1.el9_6
git-corealmalinux 92.47.3-1.el9_6
git-core-docalmalinux 92.47.3-1.el9_6
git-credential-libsecretalmalinux 92.47.3-1.el9_6
git-daemonalmalinux 92.47.3-1.el9_6
git-emailalmalinux 92.47.3-1.el9_6
git-guialmalinux 92.47.3-1.el9_6
git-instawebalmalinux 92.47.3-1.el9_6
git-subtreealmalinux 92.47.3-1.el9_6
git-svnalmalinux 92.47.3-1.el9_6
gitkalmalinux 92.47.3-1.el9_6
gitwebalmalinux 92.47.3-1.el9_6
perl-Gitalmalinux 92.47.3-1.el9_6
perl-Git-SVNalmalinux 92.47.3-1.el9_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-48384 GitHub: CVE-2025-48384 Git Symlink Vulnerability 8.3 0.0438 KEVExploited
High CVE-2025-48385 GitHub: CVE-2025-48385 Git Protocol Injection Vulnerability 8.6 0.0106 None reported
High CVE-2024-52006 Newline confusion in credential helpers can lead to credential exfiltration in git 8.3 0.0104 None reported
High CVE-2024-50349 Git does not sanitize URLs when asking for credentials interactively 8.3 0.0065 None reported
High CVE-2025-46835 GitHub: CVE-2025-46835 Git File Overwrite Vulnerability 8.5 0.0061 None reported
High CVE-2025-27613 GitHub: CVE-2025-27613 Gitk Arguments Vulnerability 8.3 0.0060 None reported
High CVE-2025-27614 GitHub: CVE-2025-27614 Gitk Arbitrary Code Execution Vulnerability 8.6 0.0043 None reported
Showing 1 to 7 of 7 1