High ELSA-2025-23745 1 CVE

Important: git-lfs security update (Oracle Linux 8)

Published Dec 21, 2025 · Updated Dec 21, 2025

Ecosystem: Oracle Linux

Summary

[3.4.1-6]
- Backport CVE-2025-26625 fixes
- Resolves: RHEL-122423

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	git-lfs	0:3.4.1-6.el8_10

Vulnerabilities 1

High 8.6

CVE-2025-26625

Git LFS may write to arbitrary files via crafted symlinks

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git w…

git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Debian Ubuntu Alpine Go

Oct 17, 2025