UbuntuUpdates.org

Package "git-lfs"

Name: git-lfs

Description:

Git Large File Support
Latest version: 3.6.1-1ubuntu0.1
Release: questing (25.10)
Level: security
Repository: universe
Homepage: https://git-lfs.github.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "git-lfs"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "git-lfs" in Questing

Repository Area Version
base universe 3.6.1-1
updates universe 3.6.1-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.6.1-1ubuntu0.1 2026-01-26 16:13:36 UTC

  git-lfs (3.6.1-1ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file writing
    - debian/patches/CVE-2025-26625-1.patch: docs,lfs,t: create new
      files on checkout and pull
    - debian/patches/CVE-2025-26625-2.patch: check for dir/symlink
      conflicts on checkout/pull
    - debian/patches/CVE-2025-26625-3.patch: fix bare repo pull/checkout
      path handling bug
    - CVE-2025-26625

 -- John Breton <email address hidden> Thu, 22 Jan 2026 09:54:54 -0500
CVE-2025-26625 Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with


About   -   Send Feedback to @ubuntu_updates