Linux · Security advisory · October 4, 2025
RLSA-2025:11462: git security update
RLSA-2025:11462, released October 4, 2025, fixes 7 CVEs in git (version 0:2.47.3-1.el9_6). One of them is being exploited (CVE-2025-48384); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
7
None rated Critical
Exploited
1
CVE-2025-48384
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0438
91st percentile
Priority of the 7 CVEs
Patch now 1
Urgent 0
High 6
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| git | rocky 9 | 0:2.47.3-1.el9_6 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-48384 | GitHub: CVE-2025-48384 Git Symlink Vulnerability | 8.3 | 0.0438 | KEVExploited | |
| High | CVE-2025-48385 | GitHub: CVE-2025-48385 Git Protocol Injection Vulnerability | 8.6 | 0.0106 | None reported | |
| High | CVE-2024-52006 | Newline confusion in credential helpers can lead to credential exfiltration in git | 8.3 | 0.0104 | None reported | |
| High | CVE-2024-50349 | Git does not sanitize URLs when asking for credentials interactively | 8.3 | 0.0065 | None reported | |
| High | CVE-2025-46835 | GitHub: CVE-2025-46835 Git File Overwrite Vulnerability | 8.5 | 0.0061 | None reported | |
| High | CVE-2025-27613 | GitHub: CVE-2025-27613 Gitk Arguments Vulnerability | 8.3 | 0.0060 | None reported | |
| High | CVE-2025-27614 | GitHub: CVE-2025-27614 Gitk Arbitrary Code Execution Vulnerability | 8.6 | 0.0043 | None reported |
Showing 1 to 7 of 7
1