[CLSA-2026:1794452438] Fix CVE(s): CVE-2026-105437
Type:
security
Severity:
Important
Release date:
2026-11-12 03:00:48 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in three-way merge - debian/patches/CVE-2026-105437.patch: compute the merge buffer size in xdiff/xmerge.c as size_t with overflow-checked additions, and fail the merge when it does not fit in a long. - CVE-2026-105437
CVEs fixed:
Updated packages:
  • git_2.30.2-1+deb11u5+tuxcare.els2_amd64.deb
    sha:149b445bf7a5dc88ae308141116686d3409e1c91
  • git-all_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:4e11e5bbc0dd37bf35df591a81a6156c90ed0a7f
  • git-cvs_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:129d79fa998995d763e4de83083d538859899224
  • git-daemon-run_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:57247b0a83c13b440da4a5ba92b03e0b05e2ed68
  • git-daemon-sysvinit_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:e81055faf7116da4fc969ffcdfa4119456f01949
  • git-doc_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:b22eaf7a8e526cec09a29785cd98829f941deb75
  • git-el_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:0d63da925f8c082f994ce2fac82e29c98cccf98b
  • git-email_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:77b97cc934454a15eb8bf2b883c0fe7c9c8affcd
  • git-gui_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:66c0d732ec237a562e036fbccc44af2c7dca8990
  • git-man_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:a9adf89a2750ffba644e1c2ca177b67f32bd66d6
  • git-mediawiki_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:8cdf60265a002343c9dcc3dca6e987ea814e280e
  • git-svn_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:7c5e12f9f842014ccc8410f6b905b182e6cd890a
  • gitk_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:485903b4350f24ce852b09d30eb4a5261fc11ae4
  • gitweb_2.30.2-1+deb11u5+tuxcare.els2_all.deb
    sha:17b48591d60be173098700e51ea416ee37297cc5
  • git_2.30.2-1+deb11u5+tuxcare.els2_arm64.deb
    sha:e44596093d7d4c45457286fd98374d1228fbf81e
  • git_2.30.2-1+deb11u5+tuxcare.els2_armel.deb
    sha:b49a12abca703c7bb706dfe051f08b0373c61b79
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.