CLSA-2025-1754413251

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2025-1754413251
Upstream
Published
2025-08-05T17:00:55Z
Modified
2026-06-01T00:33:21Z
Summary
git: Fix of 2 CVEs
Details
  • CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary script execution via specially crafted filenames in a repository
  • CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary file creation/truncation
  • CVE-2025-46835: fix a vulnerability in Git GUI where editing files in maliciously named directories could lead to arbitrary file overwrite
References

Affected packages

TuxCare:CentOS:8.4
git

Package

Name
git
Purl
pkg:rpm/tuxcare/git?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-all

Package

Name
git-all
Purl
pkg:rpm/tuxcare/git-all?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-core

Package

Name
git-core
Purl
pkg:rpm/tuxcare/git-core?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-core-doc

Package

Name
git-core-doc
Purl
pkg:rpm/tuxcare/git-core-doc?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-credential-libsecret

Package

Name
git-credential-libsecret
Purl
pkg:rpm/tuxcare/git-credential-libsecret?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-daemon

Package

Name
git-daemon
Purl
pkg:rpm/tuxcare/git-daemon?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-email

Package

Name
git-email
Purl
pkg:rpm/tuxcare/git-email?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-gui

Package

Name
git-gui
Purl
pkg:rpm/tuxcare/git-gui?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-instaweb

Package

Name
git-instaweb
Purl
pkg:rpm/tuxcare/git-instaweb?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-subtree

Package

Name
git-subtree
Purl
pkg:rpm/tuxcare/git-subtree?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
git-svn

Package

Name
git-svn
Purl
pkg:rpm/tuxcare/git-svn?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
gitk

Package

Name
gitk
Purl
pkg:rpm/tuxcare/gitk?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
gitweb

Package

Name
gitweb
Purl
pkg:rpm/tuxcare/gitweb?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
perl-Git

Package

Name
perl-Git
Purl
pkg:rpm/tuxcare/perl-Git?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"
perl-Git-SVN

Package

Name
perl-Git-SVN
Purl
pkg:rpm/tuxcare/perl-Git-SVN?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.27.0-1.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2025-1754413251.json"