{"id":"CVE-2025-52005","aliases":["CLSA-2025-1749743573","CLSA-2025-1750338301","CLSA-2025-1750352922","CLSA-2026-1768210963","CLSA-2026-1768211438","CLSA-2026-1768587600"],"status":"published","title":"git: Fix of CVE-2025-52005","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which\n  gives a possibility to avoid control characters in sideband","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-06-12T15:52:58Z","modified":"2026-10-21T10:48:13Z","fixes":[{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-all","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-core","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-core-doc","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-credential-libsecret","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-daemon","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-email","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-gui","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-instaweb","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-subtree","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"git-svn","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gitk","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gitweb","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"perl-Git","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"perl-Git-SVN","fixed_in":["2.43.0-1.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-all","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-core","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-core-doc","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-credential-libsecret","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-daemon","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-email","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-gui","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-instaweb","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-subtree","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"git-svn","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gitk","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gitweb","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"perl-Git","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"perl-Git-SVN","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-all","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-core","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-core-doc","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-credential-libsecret","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-daemon","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-email","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-gui","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-instaweb","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-subtree","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"git-svn","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gitk","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gitweb","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"perl-Git","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"perl-Git-SVN","fixed_in":["2.27.0-1.el8.tuxcare.els6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-credential-libsecret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-subtree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.0-1.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-credential-libsecret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-subtree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-credential-libsecret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-subtree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-gnome-keyring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-gnome-keyring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-gnome-keyring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els7"}]}],"bundled":2}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1749743573.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1750338301.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1750352922.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1768210963.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1768211438.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1768587600.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1749743573","title":"git: Fix of CVE-2025-52005","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which\n  gives a possibility to avoid control characters in sideband","status":"published","published":"2025-06-12T15:52:58Z","modified":"2026-06-01T00:32:58.556390083Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1750338301","title":"git: Fix of CVE-2025-52005","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which\n  gives a possibility to avoid control characters in sideband\n- fix multiple memory leaks in config","status":"published","published":"2025-06-19T13:48:54Z","modified":"2026-06-01T00:33:21.280496359Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1750352922","title":"git: Fix of CVE-2025-52005","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which\n  gives a possibility to avoid control characters in sideband\n- fix multiple memory leaks in config","status":"published","published":"2025-06-19T17:10:14Z","modified":"2026-06-01T00:33:23.105328801Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1768210963","title":"git: Fix of 2 CVEs","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which gives\n  a possibility to avoid control characters in sideband\n- CVE-2024-52006: fix newline confusion in credential helpers that can lead to\n  credential exfiltration","status":"published","published":"2026-01-12T09:42:46Z","modified":"2026-10-21T10:48:12.719959923Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1768211438","title":"git: Fix of 2 CVEs","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which gives\n  a possibility to avoid control characters in sideband\n- CVE-2024-52006: fix newline confusion in credential helpers that can lead to\n  credential exfiltration","status":"published","published":"2026-01-12T09:50:41Z","modified":"2026-10-21T10:48:13.815369505Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1768587600","title":"git: Fix of 2 CVEs","description":"- CVE-2025-52005: add sideband.allowControlCharacters config which gives\n  a possibility to avoid control characters in sideband\n- CVE-2024-52006: fix newline confusion in credential helpers that can lead to\n  credential exfiltration","status":"published","published":"2026-01-20T12:08:21Z","modified":"2026-10-21T10:48:04.526579365Z","updated_at":"2026-11-02T15:43:42.847264Z"}]}}