[CLSA-2026:1794494836] Fix CVE(s): CVE-2026-111760, CVE-2026-114466
Type:
security
Severity:
Important
Release date:
2026-11-12 14:47:29 UTC
Description:
* SECURITY UPDATE: fast-import export-pack-edges option allows arbitrary file access - debian/patches/CVE-2026-114466.patch: require --allow-unsafe-features for export-pack-edges in the input stream - CVE-2026-114466 * SECURITY UPDATE: code execution during recursive clones via over-long tree paths overwriting a submodule gitfile - debian/patches/CVE-2026-111760.patch: use size_t for tree-walk path lengths and reject cache entries whose name length exceeds INT_MAX or index.maxPathLen - CVE-2026-111760
CVEs fixed:
Updated packages:
  • git_2.20.1-2+deb10u9+tuxcare.els6_amd64.deb
    sha:6ad6a338253172e3f5ce329a94f2aa0534c951e6
  • git-all_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:41080bd1971f0851b134bac826921e0809c63f24
  • git-cvs_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:3f479c7584c432fbad5a4e118843f8ae31eb3c9e
  • git-daemon-run_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:0f99132b98c06ee1104d5fd95486a212a68d72e6
  • git-daemon-sysvinit_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:ae9e4e194fa01411320075d4847407dd8869f675
  • git-doc_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:fcef34fa584a840ed5ed59cf64acca8215f66c13
  • git-el_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:a521274b027a4af381638ce5ce48883e24a1a9d4
  • git-email_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:b0b6af2293e66bb892b0dadf0ecc9002c5286a61
  • git-gui_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:a81bd3459d3fdcd4d8bdf3ea4cebf0907a38f62c
  • git-man_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:f7997acfde1a7a37ecf8643241141ca793112143
  • git-mediawiki_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:7b1336b911a9e6cf8d6752e362c62132cdb9e51a
  • git-svn_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:32bccef5a71a34aef091f1e2e16f7d47719abcae
  • gitk_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:c0457bd8fc785a0965a1963653e7c6727bd04a2a
  • gitweb_2.20.1-2+deb10u9+tuxcare.els6_all.deb
    sha:86a3cd66563ba34e662855c18e48aa4e502e8c06
  • git_2.20.1-2+deb10u9+tuxcare.els6_arm64.deb
    sha:3c93e56f62eca2472e8692e3ea3de9afe4d6a221
  • git_2.20.1-2+deb10u9+tuxcare.els6_armel.deb
    sha:8878d24972dcdbc397b0d29ac264b82524a33c98
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.