git-lfs-3.4.1-12.el8_10

エラータID: AXSA:2026-1269:09

Release date: 
Thursday, July 16, 2026 - 16:18
Subject: 
git-lfs-3.4.1-12.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. git-lfs-3.4.1-12.el8_10.src.rpm
    MD5: f6bb33fd7fd958bbce8b226a3238cbe5
    SHA-256: f0dee57e1655bd034d930266b407d730c8e1f0bb930db65bf65e3f260b9f271c
    Size: 3.46 MB

Asianux Server 8 for x86_64
  1. git-lfs-3.4.1-12.el8_10.x86_64.rpm
    MD5: 4b8436300a59f829905fc6d8d311fb36
    SHA-256: 8f56fa2e5ed245cf5e698b2cd7e246bd7c3ed672adf532f8cef44249852fd0a0
    Size: 4.73 MB