Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2025-11688 1 CVE

Important: git security update (Oracle Linux 7)

Published Aug 12, 2025 · Updated Aug 12, 2025

Ecosystem: Oracle Linux

Summary

[1.8.3.1-25.0.1]
- Fixed CVE-2025-48384 [Orabug: 38234220 ]

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 7 emacs-git 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 emacs-git-el 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-all 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-bzr 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-cvs 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-daemon 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-email 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-gnome-keyring 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-gui 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-hg 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-instaweb 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-p4 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 git-svn 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 gitk 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 gitweb 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 perl-Git 0:1.8.3.1-25.0.1.el7_9
Oracle Linux · 7 perl-Git-SVN 0:1.8.3.1-25.0.1.el7_9

Vulnerabilities 1

  • High 8.1
    CVE-2025-48384 Exploited Public exploit

    Git allows arbitrary code execution through broken config quoting

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). W…

    git git git git Debian Ubuntu Azure Linux Alpine
    KEV Aug 25, 2025