Description:
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.
Security Fix(es):
* encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
* net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
* crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
git-lfs-3.4.1-13.el8_10.aarch64.rpm |
495ba1b86639e1e352168999c671de742ddd0b5832a3ae54ee2ff74f4a7cfa2d |
| ppc64le |
git-lfs-3.4.1-13.el8_10.ppc64le.rpm |
decfd03b18641c91c1e629b6b15da9fc611a3ef56bd7ce3e540da9cec1fefe61 |
| s390x |
git-lfs-3.4.1-13.el8_10.s390x.rpm |
3a07d59719f2756dbb7f50fd101171f577f1d9eda15adc1ab13b9601dc02e02a |
| x86_64 |
git-lfs-3.4.1-13.el8_10.x86_64.rpm |
04f75b4d7798c1acf7acf5e60ecd953327d07667d6b9ef9b445085c1e9a2cc5f |