RHSA-2025:11794
- Source
- https://access.redhat.com/errata/RHSA-2025:11794
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2025:11794.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/RHSA-2025:11794
- Upstream
- Published
- 2025-07-28T10:03:05Z
- Modified
- 2025-07-28T11:00:48.828512Z
- Severity
-
- 8.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L CVSS Calculator
- Summary
- Red Hat Security Advisory: git security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2025:11794
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2378806
- https://bugzilla.redhat.com/show_bug.cgi?id=2378808
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11794.json
- https://access.redhat.com/security/cve/CVE-2025-48384
- https://www.cve.org/CVERecord?id=CVE-2025-48384
- https://nvd.nist.gov/vuln/detail/CVE-2025-48384
- https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384
- https://github.com/git/git/commit/05e9cd64ee23bbadcea6bcffd6660ed02b8eab89
- https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9
- https://access.redhat.com/security/cve/CVE-2025-48385
- https://www.cve.org/CVERecord?id=CVE-2025-48385
- https://nvd.nist.gov/vuln/detail/CVE-2025-48385
- https://github.com/git/git/security/advisories/GHSA-m98c-vgpc-9655
Affected packages
Red Hat:rhel_e4s:8.8::appstream / git
Package
- Name
- git
- Purl
- pkg:rpm/redhat/git
Red Hat:rhel_e4s:8.8::appstream / git-all
Package
- Name
- git-all
- Purl
- pkg:rpm/redhat/git-all
Red Hat:rhel_e4s:8.8::appstream / git-core
Package
- Name
- git-core
- Purl
- pkg:rpm/redhat/git-core
Red Hat:rhel_e4s:8.8::appstream / git-core-debuginfo
Package
- Name
- git-core-debuginfo
- Purl
- pkg:rpm/redhat/git-core-debuginfo
Red Hat:rhel_e4s:8.8::appstream / git-core-doc
Package
- Name
- git-core-doc
- Purl
- pkg:rpm/redhat/git-core-doc
Red Hat:rhel_e4s:8.8::appstream / git-credential-libsecret
Package
- Name
- git-credential-libsecret
- Purl
- pkg:rpm/redhat/git-credential-libsecret
Red Hat:rhel_e4s:8.8::appstream / git-credential-libsecret-debuginfo
Package
- Name
- git-credential-libsecret-debuginfo
- Purl
- pkg:rpm/redhat/git-credential-libsecret-debuginfo
Red Hat:rhel_e4s:8.8::appstream / git-daemon
Package
- Name
- git-daemon
- Purl
- pkg:rpm/redhat/git-daemon
Red Hat:rhel_e4s:8.8::appstream / git-daemon-debuginfo
Package
- Name
- git-daemon-debuginfo
- Purl
- pkg:rpm/redhat/git-daemon-debuginfo
Red Hat:rhel_e4s:8.8::appstream / git-debuginfo
Package
- Name
- git-debuginfo
- Purl
- pkg:rpm/redhat/git-debuginfo
Red Hat:rhel_e4s:8.8::appstream / git-debugsource
Package
- Name
- git-debugsource
- Purl
- pkg:rpm/redhat/git-debugsource
Red Hat:rhel_e4s:8.8::appstream / git-email
Package
- Name
- git-email
- Purl
- pkg:rpm/redhat/git-email
Red Hat:rhel_e4s:8.8::appstream / git-gui
Package
- Name
- git-gui
- Purl
- pkg:rpm/redhat/git-gui
Red Hat:rhel_e4s:8.8::appstream / git-instaweb
Package
- Name
- git-instaweb
- Purl
- pkg:rpm/redhat/git-instaweb
Red Hat:rhel_e4s:8.8::appstream / git-subtree
Package
- Name
- git-subtree
- Purl
- pkg:rpm/redhat/git-subtree
Red Hat:rhel_e4s:8.8::appstream / git-svn
Package
- Name
- git-svn
- Purl
- pkg:rpm/redhat/git-svn
Red Hat:rhel_e4s:8.8::appstream / gitk
Package
- Name
- gitk
- Purl
- pkg:rpm/redhat/gitk
Red Hat:rhel_e4s:8.8::appstream / gitweb
Package
- Name
- gitweb
- Purl
- pkg:rpm/redhat/gitweb
Red Hat:rhel_e4s:8.8::appstream / perl-Git
Package
- Name
- perl-Git
- Purl
- pkg:rpm/redhat/perl-Git
Red Hat:rhel_e4s:8.8::appstream / perl-Git-SVN
Package
- Name
- perl-Git-SVN
- Purl
- pkg:rpm/redhat/perl-Git-SVN
Red Hat:rhel_tus:8.8::appstream / git
Package
- Name
- git
- Purl
- pkg:rpm/redhat/git
Red Hat:rhel_tus:8.8::appstream / git-all
Package
- Name
- git-all
- Purl
- pkg:rpm/redhat/git-all
Red Hat:rhel_tus:8.8::appstream / git-core
Package
- Name
- git-core
- Purl
- pkg:rpm/redhat/git-core
Red Hat:rhel_tus:8.8::appstream / git-core-debuginfo
Package
- Name
- git-core-debuginfo
- Purl
- pkg:rpm/redhat/git-core-debuginfo
Red Hat:rhel_tus:8.8::appstream / git-core-doc
Package
- Name
- git-core-doc
- Purl
- pkg:rpm/redhat/git-core-doc
Red Hat:rhel_tus:8.8::appstream / git-credential-libsecret
Package
- Name
- git-credential-libsecret
- Purl
- pkg:rpm/redhat/git-credential-libsecret
Red Hat:rhel_tus:8.8::appstream / git-credential-libsecret-debuginfo
Package
- Name
- git-credential-libsecret-debuginfo
- Purl
- pkg:rpm/redhat/git-credential-libsecret-debuginfo
Red Hat:rhel_tus:8.8::appstream / git-daemon
Package
- Name
- git-daemon
- Purl
- pkg:rpm/redhat/git-daemon
Red Hat:rhel_tus:8.8::appstream / git-daemon-debuginfo
Package
- Name
- git-daemon-debuginfo
- Purl
- pkg:rpm/redhat/git-daemon-debuginfo
Red Hat:rhel_tus:8.8::appstream / git-debuginfo
Package
- Name
- git-debuginfo
- Purl
- pkg:rpm/redhat/git-debuginfo
Red Hat:rhel_tus:8.8::appstream / git-debugsource
Package
- Name
- git-debugsource
- Purl
- pkg:rpm/redhat/git-debugsource
Red Hat:rhel_tus:8.8::appstream / git-email
Package
- Name
- git-email
- Purl
- pkg:rpm/redhat/git-email
Red Hat:rhel_tus:8.8::appstream / git-gui
Package
- Name
- git-gui
- Purl
- pkg:rpm/redhat/git-gui
Red Hat:rhel_tus:8.8::appstream / git-instaweb
Package
- Name
- git-instaweb
- Purl
- pkg:rpm/redhat/git-instaweb
Red Hat:rhel_tus:8.8::appstream / git-subtree
Package
- Name
- git-subtree
- Purl
- pkg:rpm/redhat/git-subtree
Red Hat:rhel_tus:8.8::appstream / git-svn
Package
- Name
- git-svn
- Purl
- pkg:rpm/redhat/git-svn
Red Hat:rhel_tus:8.8::appstream / gitk
Package
- Name
- gitk
- Purl
- pkg:rpm/redhat/gitk
Red Hat:rhel_tus:8.8::appstream / gitweb
Package
- Name
- gitweb
- Purl
- pkg:rpm/redhat/gitweb
Red Hat:rhel_tus:8.8::appstream / perl-Git
Package
- Name
- perl-Git
- Purl
- pkg:rpm/redhat/perl-Git