[ubuntu/questing-security] git-lfs 3.6.1-1ubuntu0.1 (Accepted)

[John Breton]

git-lfs (3.6.1-1ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file writing
    - debian/patches/CVE-2025-26625-1.patch: docs,lfs,t: create new
      files on checkout and pull
    - debian/patches/CVE-2025-26625-2.patch: check for dir/symlink
      conflicts on checkout/pull
    - debian/patches/CVE-2025-26625-3.patch: fix bare repo pull/checkout
      path handling bug
    - CVE-2025-26625

Date: 2026-01-22 15:30:11.661889+00:00
Changed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/git-lfs/3.6.1-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.