High ELSA-2025-23744 1 CVE

Important: git-lfs security update (Oracle Linux 9)

Published Dec 21, 2025 · Updated Dec 21, 2025

Ecosystem: Oracle Linux

Summary

[3.6.1-4]
- Backport fix for CVE-2025-26625
- Resolves: RHEL-122431

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	git-lfs	0:3.6.1-4.el9_7

Vulnerabilities 1

High 8.6

CVE-2025-26625

Git LFS may write to arbitrary files via crafted symlinks

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git w…

git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Debian Ubuntu Alpine Go

Oct 17, 2025