{"id":"CLSA-2025-1754940060","summary":"Fix CVE(s): CVE-2025-27613, CVE-2025-27614, CVE-2025-46835","details":"   * SECURITY UPDATE: multiple vulnerabilities in Gitk and Git GUI\n     - debian/patches/CVE-2025-27614_CVE-2025-27613_CVE-2025-46835.patch:\n       Prevent script execution via specially crafted filenames in Gitk.\n       Sanitize filename handling to avoid unintended file creation/truncation.\n       Validate directory names in Git GUI to prevent unsafe file overwrites\n       when editing files\n     - CVE-2025-27614, CVE-2025-27613, CVE-2025-46835","modified":"2026-06-04T09:47:24.334176636Z","published":"2025-08-11T19:21:04Z","upstream":["CVE-2025-27613","CVE-2025-27614","CVE-2025-46835"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1754940060.html"}],"affected":[{"package":{"name":"git","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-all","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-all?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-cvs","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-cvs?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-daemon-run","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-daemon-run?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-daemon-sysvinit","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-daemon-sysvinit?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-el","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-el?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-email","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-email?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-gui","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-gui?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-man","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-man?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-mediawiki","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-mediawiki?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"git-svn","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/git-svn?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"gitk","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/gitk?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}},{"package":{"name":"gitweb","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/gitweb?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1754940060.json"}}],"schema_version":"1.7.5"}