{"id":"CLSA-2025-1754648405","summary":"Fix CVE(s): CVE-2025-27613, CVE-2025-27614, CVE-2025-46835","details":"   * SECURITY UPDATE: potential file creation/truncation when cloning untrusted\n     repository in gitk\n     - debian/patches/CVE-2025-27613_CVE-2025-27614_CVE-2025-46835.patch: improve dark mode\n       support, remove hard-coded colors in ttext calls and use colors from the theme for text\n       widgets via Text.Background and Text.Foreground\n     - CVE-2025-27613\n   * SECURITY UPDATE: security vulnerability allowing arbitrary script execution\n     - debian/patches/CVE-2025-27613_CVE-2025-27614_CVE-2025-46835.patch: Fix hard-coded\n       colors in ttext widgets to use theme colors\n     - CVE-2025-27614\n   * SECURITY UPDATE: security issue with untrusted repository cloning and file\n     editing\n     - debian/patches/CVE-2025-27613_CVE-2025-27614_CVE-2025-46835.patch: validate directory\n       names to prevent file overwrite attacks\n     - CVE-2025-46835","modified":"2026-06-04T09:46:49.308944688Z","published":"2025-08-08T10:20:09Z","upstream":["CVE-2025-27613","CVE-2025-27614","CVE-2025-46835"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1754648405.html"}],"affected":[{"package":{"name":"git","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-all","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-all?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-arch","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-arch?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-core","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-core?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-cvs","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-cvs?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-daemon-run","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-daemon-run?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-daemon-sysvinit","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-daemon-sysvinit?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-el","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-el?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-email","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-email?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-gui","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-gui?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-man","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-man?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-mediawiki","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-mediawiki?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"git-svn","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/git-svn?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"gitk","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/gitk?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}},{"package":{"name":"gitweb","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/gitweb?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1754648405.json"}}],"schema_version":"1.7.5"}