Fedora 41: 2025-164ac0d01f critical: gh 2.74.0 arbitrary command execution
fedora
June 13, 2025
Update to 2.74.0 - Fixes CVE-2025-48938
Summary
A command-line interface to GitHub for use in your terminal or your scripts.
gh is a tool designed to enhance your workflow when working with GitHub. It
provides a seamless way to interact with GitHub repositories and perform various
actions right from the command line, eliminating the need to switch between your
terminal and the GitHub website.
Update Information:
Update to 2.74.0 - Fixes CVE-2025-48938
Topics Covered
Change Log
* Wed Jun 4 2025 Mikel Olasagasti Uranga
References
[ 1 ] Bug #2369482 - CVE-2025-48938 gh: GitHub CLI may execute arbitrary commands from compromised GitHub Enterprise Server [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2369482
[ 2 ] Bug #2369484 - CVE-2025-48938 gh: GitHub CLI may execute arbitrary commands from compromised GitHub Enterprise Server [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2369484
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-164ac0d01f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: gh
Product: Fedora 41
Version: 2.74.0
Release: 1.fc41
Summary: GitHub's official command line tool
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!