Security update for git
Announcement ID: | SUSE-SU-2025:03037-1 |
---|---|
Release Date: | 2025-09-01T12:46:22Z |
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves five vulnerabilities and contains one feature can now be installed.
Description:
This update for git fixes the following issues:
Updated to 2.43.7 (jsc#PED-13447):
- CVE-2025-27613: Fixed arbitrary writable file creation and truncation in Gitk (bsc#1245938)
- CVE-2025-27614: Fixed arbitrary script execution via repo clonation in Gitk (bsc#1245939)
- CVE-2025-46835: Fixed arbitrary writable file creation via untrusted repository clonation in Git GUI (bsc#1245942)
- CVE-2025-48384: Fixed arbitrary writable file creation when cloning untrusted repositories with submodules using the --recursive flag (bsc#1245943)
- CVE-2025-48385: Fixed arbitrary code execution due to protocol injection via fetching advertised bundle (bsc#1245946)
Other fixes:
- Drop git-credential-gnome-keyring package as it was dropped upstream, use git-credential-libsecret instead
- git-add--interactive was removed upstream in favor of built in implementation, which was already the default in SLE.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Manager Server 4.3 LTS
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-3037=1
-
SUSE Enterprise Storage 7.1
zypper in -t patch SUSE-Storage-7.1-2025-3037=1
-
openSUSE Leap 15.3
zypper in -t patch SUSE-2025-3037=1
-
SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2025-3037=1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-3037=1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-3037=1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-3037=1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-3037=1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-3037=1
-
SUSE Linux Enterprise Server 15 SP3 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-3037=1
-
SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-3037=1
-
SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-3037=1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP3
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-3037=1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-3037=1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-3037=1
-
SUSE Manager Proxy 4.3 LTS
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-3037=1
-
SUSE Manager Retail Branch Server 4.3 LTS
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-LTS-2025-3037=1
Package List:
-
SUSE Manager Server 4.3 LTS (ppc64le s390x x86_64)
- git-core-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-core-debuginfo-2.43.7-150300.10.51.1
-
SUSE Enterprise Storage 7.1 (aarch64 x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Enterprise Storage 7.1 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)
- git-credential-libsecret-2.43.7-150300.10.51.1
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- git-p4-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-credential-libsecret-debuginfo-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
openSUSE Leap 15.3 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server 15 SP3 LTSS (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server 15 SP4 LTSS (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
- git-core-debuginfo-2.43.7-150300.10.51.1
- git-svn-2.43.7-150300.10.51.1
- git-web-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- gitk-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-2.43.7-150300.10.51.1
- git-gui-2.43.7-150300.10.51.1
- git-cvs-2.43.7-150300.10.51.1
- git-daemon-2.43.7-150300.10.51.1
- git-core-2.43.7-150300.10.51.1
- git-daemon-debuginfo-2.43.7-150300.10.51.1
- git-arch-2.43.7-150300.10.51.1
- git-email-2.43.7-150300.10.51.1
- perl-Git-2.43.7-150300.10.51.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
- git-doc-2.43.7-150300.10.51.1
-
SUSE Manager Proxy 4.3 LTS (x86_64)
- git-core-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-core-debuginfo-2.43.7-150300.10.51.1
-
SUSE Manager Retail Branch Server 4.3 LTS (x86_64)
- git-core-2.43.7-150300.10.51.1
- git-debuginfo-2.43.7-150300.10.51.1
- git-debugsource-2.43.7-150300.10.51.1
- git-core-debuginfo-2.43.7-150300.10.51.1
References:
- https://www.suse.com/security/cve/CVE-2025-27613.html
- https://www.suse.com/security/cve/CVE-2025-27614.html
- https://www.suse.com/security/cve/CVE-2025-46835.html
- https://www.suse.com/security/cve/CVE-2025-48384.html
- https://www.suse.com/security/cve/CVE-2025-48385.html
- https://bugzilla.suse.com/show_bug.cgi?id=1245938
- https://bugzilla.suse.com/show_bug.cgi?id=1245939
- https://bugzilla.suse.com/show_bug.cgi?id=1245942
- https://bugzilla.suse.com/show_bug.cgi?id=1245943
- https://bugzilla.suse.com/show_bug.cgi?id=1245946
- https://jira.suse.com/browse/PED-13447