Linux · Security advisory · June 3, 2025

ELSA-2025-8414: Security update for 15 packages

ELSA-2025-8414, released June 3, 2025, fixes 1 CVE across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0051
43rd percentile

Fixed package versions

ProductReleaseFixed in
gitol 80:2.43.5-3.el8_10
git-allol 80:2.43.5-3.el8_10
git-coreol 80:2.43.5-3.el8_10
git-core-docol 80:2.43.5-3.el8_10
git-credential-libsecretol 80:2.43.5-3.el8_10
git-daemonol 80:2.43.5-3.el8_10
git-emailol 80:2.43.5-3.el8_10
git-guiol 80:2.43.5-3.el8_10
git-instawebol 80:2.43.5-3.el8_10
git-subtreeol 80:2.43.5-3.el8_10
git-svnol 80:2.43.5-3.el8_10
gitkol 80:2.43.5-3.el8_10
gitwebol 80:2.43.5-3.el8_10
perl-Gitol 80:2.43.5-3.el8_10
perl-Git-SVNol 80:2.43.5-3.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-52005 The sideband payload is passed unfiltered to the terminal in git 7.5 0.0051 None reported
Showing 1 to 1 of 1 1