{"id":"CLSA-2026-1788041847","summary":"Fix CVE(s): CVE-2025-48384","details":"   * SECURITY UPDATE: arbitrary code execution via CR in config values\n     - debian/patches/CVE-2025-48384.patch: quote config values containing\n       a carriage return so that it is not stripped when read back\n     - CVE-2025-48384","modified":"2026-10-26T09:31:53.130942236Z","published":"2026-08-29T22:17:38Z","upstream":["CVE-2025-48384"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1788041847.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48384"}],"affected":[{"package":{"name":"git","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-all","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-all?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-cvs","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-cvs?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-daemon-run","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-daemon-run?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-daemon-sysvinit","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-daemon-sysvinit?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-el","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-el?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-email","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-email?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-gui","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-gui?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-man","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-man?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-mediawiki","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-mediawiki?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"git-svn","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/git-svn?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"gitk","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/gitk?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}},{"package":{"name":"gitweb","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/gitweb?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u9+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788041847.json"}}],"schema_version":"1.9.0"}