p PatchFirst

CVE-2025-46835

CVE-2025-46835 · Git GUI can create and overwrite files for which the user has write permission

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS 8.5 · Alta · EPSS 0,6% · Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • git-gui

    Versiones
    • < 2.43.7: Afectada
    • >= 2.44.0, < 2.44.4: Afectada
    • >= 2.45.0, < 2.45.4: Afectada
    • >= 2.46.0, < 2.46.4: Afectada
    • >= 2.47.0, < 2.47.3: Afectada
    • >= 2.48.0, < 2.48.2: Afectada
    • >= 2.49.0, < 2.49.1: Afectada
    • >= 2.50.0, < 2.50.1: Afectada

    Sin corrección publicada

  • git Debian:12

    Versiones
    • 1:2.39.2+next.20230215-1
    • 1:2.39.2-1.1
    • 1:2.39.5-0+deb12u1
    • 1:2.39.5-0+deb12u2
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.39.5-0+deb12u3

    Actualiza a 1:2.39.5-0+deb12u3

  • git Debian:13

    Versiones
    • 1:2.47.2-0.2
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.47.3-0+deb13u1

    Actualiza a 1:2.47.3-0+deb13u1

  • git Debian:14

    Versiones
    • 1:2.47.2-0.2
    • 1:2.48.0~rc1+next.20250101-1
    • 1:2.49.0+next.20250314-1
    • 1:2.49.0-1
    • 1:2.49.0-2
    • 1:2.49.0-3
    • 1:2.50.0+next.20250615-1
    • 1:2.50.0-1
    • 1:2.50.0~rc0+next.20250528-1
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.50.1-0.1

    Actualiza a 1:2.50.1-0.1

  • git Ubuntu:Pro:16.04:LTS

    Versiones
    • 1:2.5.0-1
    • 1:2.6.2-1
    • 1:2.6.3-1
    • 1:2.6.4-1
    • 1:2.7.0~rc3-1
    • 1:2.7.0-1
    • 1:2.7.3-0ubuntu1
    • 1:2.7.4-0ubuntu1
    • 1:2.7.4-0ubuntu1.1
    • 1:2.7.4-0ubuntu1.2
    • 1:2.7.4-0ubuntu1.3
    • 1:2.7.4-0ubuntu1.4
    • 1:2.7.4-0ubuntu1.5
    • 1:2.7.4-0ubuntu1.6
    • 1:2.7.4-0ubuntu1.7
    • 1:2.7.4-0ubuntu1.8
    • 1:2.7.4-0ubuntu1.9
    • 1:2.7.4-0ubuntu1.10
    • 1:2.7.4-0ubuntu1.10+esm1
    • 1:2.7.4-0ubuntu1.10+esm3
    • 1:2.7.4-0ubuntu1.10+esm4
    • 1:2.7.4-0ubuntu1.10+esm5
    • 1:2.7.4-0ubuntu1.10+esm6
    • 1:2.7.4-0ubuntu1.10+esm7
    • 1:2.7.4-0ubuntu1.10+esm8
    • 1:2.7.4-0ubuntu1.10+esm9
    • 1:2.7.4-0ubuntu1.10+esm10
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.7.4-0ubuntu1.10+esm11

    Actualiza a 1:2.7.4-0ubuntu1.10+esm11

  • git Ubuntu:Pro:18.04:LTS

    Versiones
    • 1:2.14.1-1ubuntu4
    • 1:2.15.1-1ubuntu2
    • 1:2.17.0-1ubuntu1
    • 1:2.17.1-1ubuntu0.1
    • 1:2.17.1-1ubuntu0.3
    • 1:2.17.1-1ubuntu0.4
    • 1:2.17.1-1ubuntu0.5
    • 1:2.17.1-1ubuntu0.6
    • 1:2.17.1-1ubuntu0.7
    • 1:2.17.1-1ubuntu0.8
    • 1:2.17.1-1ubuntu0.9
    • 1:2.17.1-1ubuntu0.10
    • 1:2.17.1-1ubuntu0.11
    • 1:2.17.1-1ubuntu0.12
    • 1:2.17.1-1ubuntu0.13
    • 1:2.17.1-1ubuntu0.14
    • 1:2.17.1-1ubuntu0.15
    • 1:2.17.1-1ubuntu0.16
    • 1:2.17.1-1ubuntu0.17
    • 1:2.17.1-1ubuntu0.18
    • 1:2.17.1-1ubuntu0.18+esm1
    • 1:2.17.1-1ubuntu0.18+esm2
    • 1:2.17.1-1ubuntu0.18+esm3
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.17.1-1ubuntu0.18+esm4

    Actualiza a 1:2.17.1-1ubuntu0.18+esm4

  • git Ubuntu:Pro:20.04:LTS

    Versiones
    • 1:2.20.1-2ubuntu1
    • 1:2.24.0-1ubuntu1
    • 1:2.24.0-1ubuntu2
    • 1:2.25.0-1ubuntu1
    • 1:2.25.1-1ubuntu1
    • 1:2.25.1-1ubuntu2
    • 1:2.25.1-1ubuntu3
    • 1:2.25.1-1ubuntu3.1
    • 1:2.25.1-1ubuntu3.2
    • 1:2.25.1-1ubuntu3.3
    • 1:2.25.1-1ubuntu3.4
    • 1:2.25.1-1ubuntu3.5
    • 1:2.25.1-1ubuntu3.6
    • 1:2.25.1-1ubuntu3.7
    • 1:2.25.1-1ubuntu3.8
    • 1:2.25.1-1ubuntu3.10
    • 1:2.25.1-1ubuntu3.11
    • 1:2.25.1-1ubuntu3.12
    • 1:2.25.1-1ubuntu3.13
    • 1:2.25.1-1ubuntu3.14
    • 1:2.25.1-1ubuntu3.14+esm1
    • 1:2.25.1-1ubuntu3.14+esm2
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.25.1-1ubuntu3.14+esm3

    Actualiza a 1:2.25.1-1ubuntu3.14+esm3

  • git Ubuntu:22.04:LTS

    Versiones
    • 1:2.32.0-1ubuntu1
    • 1:2.33.1-1ubuntu1
    • 1:2.34.1-1ubuntu1
    • 1:2.34.1-1ubuntu1.1
    • 1:2.34.1-1ubuntu1.2
    • 1:2.34.1-1ubuntu1.4
    • 1:2.34.1-1ubuntu1.5
    • 1:2.34.1-1ubuntu1.6
    • 1:2.34.1-1ubuntu1.8
    • 1:2.34.1-1ubuntu1.9
    • 1:2.34.1-1ubuntu1.10
    • 1:2.34.1-1ubuntu1.11
    • 1:2.34.1-1ubuntu1.12
    • 1:2.34.1-1ubuntu1.13
    • 1:2.34.1-1ubuntu1.14
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.34.1-1ubuntu1.15

    Actualiza a 1:2.34.1-1ubuntu1.15

  • git Ubuntu:24.04:LTS

    Versiones
    • 1:2.40.1-1ubuntu1
    • 1:2.43.0-1ubuntu1
    • 1:2.43.0-1ubuntu5
    • 1:2.43.0-1ubuntu6
    • 1:2.43.0-1ubuntu7
    • 1:2.43.0-1ubuntu7.1
    • 1:2.43.0-1ubuntu7.2
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.43.0-1ubuntu7.3

    Actualiza a 1:2.43.0-1ubuntu7.3

Fuentes originales

Comprueba tu servidor →