[CLSA-2026:1794452753] Fix CVE(s): CVE-2026-105437
Type:
security
Severity:
Important
Release date:
2026-11-12 03:06:04 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in three-way merge - debian/patches/CVE-2026-105437.patch: compute the merge buffer size in xdiff/xmerge.c as size_t with overflow-checked additions, and fail the merge when it does not fit in a long. - CVE-2026-105437
CVEs fixed:
Updated packages:
  • git_2.20.1-2+deb10u9+tuxcare.els5_amd64.deb
    sha:7d9aa603e4d52f6108d262cf06ce21db6322b34c
  • git-all_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:5b783d16db45316350450c17280a236944a507ff
  • git-cvs_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:77a59d9c9ebd380e80286ec936716b7c2a6a766a
  • git-daemon-run_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:5fe0117ebe5bda9e60e04f1b1dc905f13747cfc8
  • git-daemon-sysvinit_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:e657ecdd4ff704476c0dc829d74b31b2e4bc7649
  • git-doc_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:476413e08518e74a26b90b10d840c6962fa3c3fe
  • git-el_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:ed82436bdefa5943c9960706b77999fc7eb2f746
  • git-email_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:fda8d902a277c302b1c0887102d4f8daffff47b2
  • git-gui_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:f0568baee8ebf420ffb9db9a224b62117c3ede0d
  • git-man_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:c6203117f28a6a3629b81ba204fded45c80c843f
  • git-mediawiki_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:2fe6aff568ec1451a4a360b2220445f263652fe3
  • git-svn_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:eda1ba4176fce741a2db4d49a407f17964181c18
  • gitk_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:43dc6653b48207d74ee038a06245836289e36916
  • gitweb_2.20.1-2+deb10u9+tuxcare.els5_all.deb
    sha:0e710fa70f35d76384a3bb48a1add6f7bdb1e0a5
  • git_2.20.1-2+deb10u9+tuxcare.els5_arm64.deb
    sha:0d0ada60356e0190d22361fef577301f75eaa702
  • git_2.20.1-2+deb10u9+tuxcare.els5_armel.deb
    sha:9e25b11f3f893d747c7acca4762a391ca553f4a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.