diff options
| author | Santhosh Raju <fox@FreeBSD.org> | 2026-10-28 12:50:19 +0000 |
|---|---|---|
| committer | Santhosh Raju <fox@FreeBSD.org> | 2026-10-28 12:59:37 +0000 |
| commit | 4c5f9ccf9dffc3687362b36449da5b2a612e8474 (patch) | |
| tree | 15a691337938c0e533733dd5e5d50f4916e237a5 /graphics/libdrm/files/(developers-only) | |
| parent | 72cf826742f838f1861b83142fb7d9e530a8b1a2 (diff) | |
3.7.1 fixes CVE-2025-26625 (symlink/hardlink following on checkout and
pull). 3.8.1 fixes CVE-2026-69260, CVE-2026-69261, CVE-2026-105802 and
CVE-2026-105803 (SSH argument injection, cookie leak on redirect,
command execution via submodule URL and via .lfsconfig transfer adapter).
Changelog:
https://github.com/git-lfs/git-lfs/releases/tag/v3.7.0
https://github.com/git-lfs/git-lfs/releases/tag/v3.7.1
https://github.com/git-lfs/git-lfs/releases/tag/v3.8.0
https://github.com/git-lfs/git-lfs/releases/tag/v3.8.1
PR: 298476
Reported by: Ivo Marino <ivo.marino+freebsd@gmail.com>
Approved by: maintainer timeout (egypcio, 6 weeks)
Security: CVE-2025-26625
Security: CVE-2026-69260
Security: CVE-2026-69261
Security: CVE-2026-105802
Security: CVE-2026-105803
Diffstat (limited to 'graphics/libdrm/files/(developers-only)')
0 files changed, 0 insertions, 0 deletions