Description:
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.
Security Fix(es):
* encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
* net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
* crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
git-lfs-3.7.1-4.el9_8.3.aarch64.rpm |
0a4853f8c1a6fc50ea9e918c4919c0913d07835cff6b9fbaac7fcadf4885e2ab |
| ppc64le |
git-lfs-3.7.1-4.el9_8.3.ppc64le.rpm |
0302825a53b91c35d1f360a20159a64928abe91353b11879d510478a5004264f |
| s390x |
git-lfs-3.7.1-4.el9_8.3.s390x.rpm |
3eff1dac7fb1bf1cef79af1ed732e836593de39164f75882e6b7ad64a90b3c6d |
| x86_64 |
git-lfs-3.7.1-4.el9_8.3.x86_64.rpm |
2c421162594c49cb225e4cd503b21956b41c5da167c191c82caaeb1e2b20c9fd |