[CLSA-2026:1794503584] Fix CVE(s): CVE-2026-111760, CVE-2026-114466
Type:
security
Severity:
Important
Release date:
2026-11-12 17:13:16 UTC
Description:
* SECURITY UPDATE: code execution during recursive clones via over-long tree paths overwriting a submodule gitfile - debian/patches/CVE-2026-111760.patch: reject cache entries whose name length exceeds INT_MAX or index.maxPathLen - CVE-2026-111760 * SECURITY UPDATE: fast-import rewrite-submodules and export-pack-edges allow arbitrary file access - debian/patches/CVE-2026-114466.patch: require --allow-unsafe-features for these features and options in the input stream - CVE-2026-114466
Updated packages:
  • git_2.30.2-1+deb11u5+tuxcare.els3_amd64.deb
    sha:c107e3b4d3838b7500df06e365c869761546da66
  • git-all_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:6fa79f8375657b67257023b1bf6fa09e485fb7fe
  • git-cvs_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:23a72d684ef90aecf8cb07037ee2dfd43fa2e5e3
  • git-daemon-run_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:57bc44128c9c8cd85e35d9552f3a63ac0c8ba622
  • git-daemon-sysvinit_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:f0dcc9df5b7a94d0ef75ad31dae2070c45739ed8
  • git-doc_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:b9f1c129b10ac08c4f13b535a8847d654a0015c5
  • git-el_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:3c4a0ba0e24df5e3a56743c588abbf95b0427872
  • git-email_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:67cc221faa4ff257d34d5e26491573f7141df12d
  • git-gui_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:45249823a2ad35f5f9a37a96690c12472ca29dcd
  • git-man_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:92ab813ea3e6494dbe927ca2942c32b800d24f0c
  • git-mediawiki_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:7d6ac6bb6a98350e3f0e7f34ceef2c54c45d5e18
  • git-svn_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:b546e86e8f6269a16e070d37be328c3ed3db3227
  • gitk_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:74b9b61ce1fc431a49a01d0a8dc84e454bcbc44b
  • gitweb_2.30.2-1+deb11u5+tuxcare.els3_all.deb
    sha:4bea3421cc0f65f11f1bbd52f90d1ff20389344a
  • git_2.30.2-1+deb11u5+tuxcare.els3_arm64.deb
    sha:f981601685e7fa10932eecd2b79f57bad6878800
  • git_2.30.2-1+deb11u5+tuxcare.els3_armel.deb
    sha:f8f3d3c96ab36a127a6fd24c3d98da54daa65e98
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.