Linux
git-lfs security updates
Patch Radar has 47 security fixes for git-lfs, closing 47 CVEs. The newest is RHSA-2026:90757 (3.6.1-2.el10_0.8), released October 29, 2026.
Latest version
n/a
Release date not known
Security fixes
47
On record in Patch Radar
CVEs
47
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | RHSA-2026:90757 | RHEL 10 | 3.6.1-2.el10_0.8 | 1 | Oct 29, 2026 | |
| High | RHSA-2026:67161 | RHEL 8 | 0:3.4.1-13.el8_10 | 3 | Sep 19, 2026 | |
| High | RHSA-2026:66364 | RHEL 9 | 0:3.7.1-4.el9_8.3 | 5 | Sep 13, 2026 | |
| High | RHSA-2026:39319 | RHEL 9 | 0:3.7.1-4.el9_8.2 | 1 | Jul 18, 2026 | |
| High | RHSA-2026:39266 | RHEL 8 | 0:3.4.1-12.el8_10 | 1 | Jul 18, 2026 | |
| Urgent | RHSA-2026:67149 | RHEL 10 | 3.6.1-2.el10_0.7 | 7 | Jun 30, 2026 | |
| Urgent | RHSA-2026:30854 | RHEL 9 | 0:3.7.1-4.el9_8.1 | 1 | Jun 29, 2026 | |
| Urgent | RHSA-2026:30853 | RHEL 8 | 0:3.4.1-11.el8_10 | 1 | Jun 29, 2026 | |
| High | RHSA-2026:19350 | RHEL 9 | 0:3.7.1-4.el9_8 | 8 | May 15, 2026 | |
| High | RHSA-2026:16875 | RHEL 8 | 0:3.4.1-10.el8_10 | 4 | May 15, 2026 | |
| High | RHSA-2026:7259 | RHEL 9 | 0:3.6.1-8.el9_7 | 1 | Apr 15, 2026 | |
| High | RHSA-2026:19715 | RHEL 10 | 3.6.1-2.el10_0.4 | 3 | Apr 8, 2026 | |
| High | RHSA-2026:3928 | RHEL 9 | 0:3.6.1-7.el9_7 | 3 | Mar 12, 2026 | |
| High | RHSA-2026:3985 | RHEL 8 | 0:3.4.1-8.el8_10 | 2 | Mar 12, 2026 | |
| High | RHSA-2026:9435 | RHEL 10 | 3.6.1-2.el10_0.3 | 1 | Mar 6, 2026 | |
| High | RHSA-2026:2323 | RHEL 8 | 0:3.4.1-7.el8_10 | 1 | Feb 9, 2026 | |
| High | RHSA-2026:4166 | RHEL 10 | 3.6.1-2.el10_0.2 | 3 | Feb 5, 2026 | |
| High | RHSA-2025:23744 | RHEL 9 | 0:3.6.1-4.el9_7 | 1 | Jan 16, 2026 | |
| High | RHSA-2025:23745 | RHEL 8 | 0:3.4.1-6.el8_10 | 1 | Jan 16, 2026 | |
| High | DEBIAN-CVE-2025-26625 | Debian 12.15 (bookworm) | 3.3.0-1+deb12u2 | 1 | Oct 17, 2025 | |
| High | DEBIAN-CVE-2025-26625 | Debian 14 | 3.7.1-1 | 1 | Oct 17, 2025 | |
| High | DEBIAN-CVE-2025-26625 | Debian 13.5 (trixie) | 3.6.1-1+deb13u1 | 1 | Oct 17, 2025 | |
| High | RHSA-2026:0224 | RHEL 10 | 3.6.1-2.el10_0.1 | 1 | Oct 17, 2025 | |
| High | git-lfs 3.4.1-1ubuntu0.3+esm2 | Ubuntu 24.04.5 LTS (noble) | 3.4.1-1ubuntu0.3+esm2 | 2 | Oct 17, 2025 | |
| High | git-lfs 3.6.1-1ubuntu0.1 | Ubuntu 25.10 (questing) | 3.6.1-1ubuntu0.1 | 1 | Oct 17, 2025 | |
| High | RHSA-2025:9060 | RHEL 8 | 0:3.4.1-5.el8_10 | 1 | Jun 16, 2025 | |
| High | RHSA-2025:9106 | RHEL 9 | 0:3.6.1-2.el9_6 | 1 | Jun 16, 2025 | |
| High | RHSA-2025:7256 | RHEL 9 | 0:3.6.1-1.el9 | 6 | May 13, 2025 | |
| High | RHSA-2025:9063 | RHEL 10 | 3.6.1-2.el10_0 | 1 | Apr 8, 2025 | |
| High | RHSA-2025:0845 | RHEL 8 | 0:3.4.1-4.el8_10 | 1 | Jan 30, 2025 | |
| High | DSA-5849-1 | Debian 12.15 (bookworm) | 3.3.0-1+deb12u1 | 1 | Jan 24, 2025 | |
| High | RHSA-2025:0673 | RHEL 9 | 0:3.4.1-4.el9_5 | 1 | Jan 23, 2025 | |
| High | DLA-4028-1 | Debian 11.6 (bullseye) | 2.13.2-1+deb11u1 | 1 | Jan 22, 2025 | |
| High | DEBIAN-CVE-2024-53263 | Debian 13.5 (trixie) | 3.5.0-2 | 1 | Jan 14, 2025 | |
| High | DEBIAN-CVE-2024-53263 | Debian 14 | 3.5.0-2 | 1 | Jan 14, 2025 | |
| High | git-lfs 2.3.4-1ubuntu0.1~esm1 | Ubuntu 18.04.6 LTS (bionic) | 2.3.4-1ubuntu0.1~esm1 | 1 | Jan 14, 2025 | |
| High | git-lfs 2.9.2-1ubuntu0.1~esm2 | Ubuntu 20.04 LTS (focal) | 2.9.2-1ubuntu0.1~esm2 | 1 | Jan 14, 2025 | |
| High | git-lfs 3.0.2-1ubuntu0.3+esm2 | Ubuntu 22.04.1 LTS (jammy) | 3.0.2-1ubuntu0.3+esm2 | 1 | Jan 14, 2025 | |
| High | RHSA-2024:7135 | RHEL 8 | 0:3.4.1-3.el8_10 | 1 | Sep 25, 2024 | |
| High | RHSA-2024:7136 | RHEL 9 | 0:3.4.1-4.el9_4 | 1 | Sep 25, 2024 | |
| High | RHSA-2024:3346 | RHEL 8 | 0:3.4.1-2.el8_10 | 4 | May 23, 2024 | |
| Routine | RHBA-2024:3053 | RHEL 8 | 0:3.4.1-1.el8 | 1 | May 22, 2024 | |
| High | RHSA-2024:2724 | RHEL 9 | 0:3.4.1-2.el9_4 | 4 | May 7, 2024 | |
| Routine | RHBA-2024:2274 | RHEL 9 | 0:3.4.1-1.el9 | 1 | Apr 30, 2024 | |
| High | RHSA-2023:2866 | RHEL 8 | 0:3.2.0-2.el8 | 3 | May 16, 2023 | |
| High | RHSA-2023:2357 | RHEL 9 | 0:3.2.0-1.el9 | 10 | May 9, 2023 | |
| High | RHSA-2022:7129 | RHEL 8 | 0:2.13.3-3.el8_6 | 9 | Oct 25, 2022 |