Thanks for notifying the vulnerability in git package.
It is already in our planned update list and we will upload it to the toolbox mostly in a week or two.
------------------------------
SANGAMESH
------------------------------
Original Message:
Sent: Mon September 08, 2025 11:48 AM
From: Heinz Sporri
Subject: Critical Git security vulnerability (CVE-2025-48384) requires git 2.43.7 or higher
Hi,
Critical Git security vulnerability (CVE-2025-48384) requires git 2.43.7 or higher. At the moment the AIX Open Source repository has 2.41.
Are there updates planned to 2.51 (or at least >= 2.43.7) to provide a correction for CVE-2025-48384 ?
I spent a bit of time trying to compile the tar ball but didn't get very far. What would be the approach there ?
Thanks
Heinz
------------------------------
Heinz Sporri
------------------------------
#AIXOpenSource