Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 42: gitleaks Important CVE-2025-47910 Update 2025-a10fad6506

fedora
Calendar Grey November 14, 2025
Dist Fedora Esm H88
Upgrade gitleaks on Fedora 42 to ensure scanning for secrets works effectively and maintain security integrity.
Update to 8.29.0

Summary

Scan git repos (or files) for secrets using regex and entropy.

Update Information:

Update to 8.29.0

Change Log

* Wed Nov 5 2025 Packit - 8.29.0-1 - Update to 8.29.0 upstream release - Resolves: rhbz#2412408 * Fri Oct 10 2025 Alejandro Sez - 8.28.0-2 - rebuild

References


[ 1 ] Bug #2398693 - CVE-2025-47910 gitleaks: CrossOriginProtection bypass in net/http [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2398693 [ 2 ] Bug #2399374 - CVE-2025-47906 gitleaks: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399374 [ 3 ] Bug #2403150 - CVE-2025-11579 gitleaks: RarDecode Out Of Memory Crash [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2403150 [ 4 ] Bug #2407897 - CVE-2025-58189 gitleaks: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2407897 [ 5 ] Bug #2408173 - CVE-2025-58189 gitleaks: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408173 [ 6 ] Bug #2408645 - CVE-2025-61725 gitleaks: Excessive CPU consumption in ParseAddress in net/mail [fedora-42] ...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a10fad6506' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: gitleaks
Product: Fedora 42
Version: 8.29.0
Release: 1.fc42
Summary: Scan git repos (or files) for secrets using regex and entropy

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here