Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: git-lfs 2025-1de066b8af critical: credential exfiltration

fedora
Calendar Grey January 24, 2025
Dist Fedora Esm H88
The git-lfs version 3.6.1 update in Fedora 41 resolves a significant vulnerability related to credential leakage.
Update to latest version Fix CVE-2024-53263

Summary

Git Large File Storage (LFS) replaces large files such as audio samples,

videos, datasets, and graphics with text pointers inside Git, while

storing the file contents on a remote server.

Update Information:

Update to latest version Fix CVE-2024-53263

Topics%20covered

Topics Covered

security advisory security issue Fedora remote access git-lfs credential exfiltration

Change Log

* Wed Jan 15 2025 Elliott Sales de Andrade - 3.6.1-1 - Update to latest version (#2338023)

References


[ 1 ] Bug #2338002 - CVE-2024-53263 git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs https://bugzilla.redhat.com/show_bug.cgi?id=2338002

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-1de066b8af' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: git-lfs
Product: Fedora 41
Version: 3.6.1
Release: 1.fc41
URL: https://git-lfs.com/
Summary: Git extension for versioning large files

Topics%20covered

Topics Covered

security advisory security issue Fedora remote access git-lfs credential exfiltration

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here