{"id":"CLSA-2026-1789732304","aliases":[],"status":"published","title":"Update of git","description":"- rebase to 1.8.3.1-25.0.1.el7_9\n- drop the 1 TuxCare CVE backport; 1.8.3.1 already incorporates it\n- no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-09-21T23:29:02Z","modified":"2026-10-26T09:31:43Z","fixes":[{"ecosystem":"TuxCare:CentOS:7","package":"emacs-git","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"emacs-git-el","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-all","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-bzr","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-cvs","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-daemon","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-email","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-gnome-keyring","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-gui","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-hg","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-instaweb","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-p4","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"git-svn","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gitk","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gitweb","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"perl-Git","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"perl-Git-SVN","fixed_in":["1.8.3.1-25.0.1.el7_9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-gnome-keyring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.0.1.el7_9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1789732304.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1789732304","title":"Update of git","description":"- rebase to 1.8.3.1-25.0.1.el7_9\n- drop the 1 TuxCare CVE backport; 1.8.3.1 already incorporates it\n- no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative","status":"published","published":"2026-09-21T23:29:02Z","modified":"2026-10-26T09:31:43.104048235Z","updated_at":"2026-11-02T15:43:48.28229Z"}]}}