High ELSA-2025-23667 1 CVE

Important: git-lfs security update (Oracle Linux 10)

Published Dec 18, 2025 · Updated Dec 18, 2025

Ecosystem: Oracle Linux

Summary

[3.6.1-4]
- Backport fix for CVE-2025-26625

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	git-lfs	0:3.6.1-4.el10_1

Vulnerabilities 1

High 8.6

CVE-2025-26625

Git LFS may write to arbitrary files via crafted symlinks

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git w…

git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Debian Ubuntu Alpine Go

Oct 17, 2025