CVE-2025-27613

EUVD-2025-21005

10.07.2025, 15:15

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

OS Command Injection

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.6 LOW	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 13%

Debian Releases

Debian Product

Codename

git

bookworm	1:2.39.5-0+deb12u3 fixed
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	1:2.30.2-1+deb11u5 fixed
forky	1:2.53.0-1 fixed
sid	1:2.53.0-1 fixed
trixie	1:2.47.3-0+deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

git

bionic	Fixed 1:2.17.1-1ubuntu0.18+esm4 released
focal	Fixed 1:2.25.1-1ubuntu3.14+esm3 released
jammy	Fixed 1:2.34.1-1ubuntu1.15 released
noble	Fixed 1:2.43.0-1ubuntu7.3 released
oracular	Fixed 1:2.45.2-1ubuntu1.2 released
plucky	Fixed 1:2.48.1-0ubuntu1.1 released
xenial	Fixed 1:2.7.4-0ubuntu1.10+esm11 released

openSUSE / SLES Releases

openSUSE Product

Release

git

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-arch

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-core

suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed

git-cvs

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-daemon

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-doc

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-email

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-gui

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-lfs

suse enterprise desktop 15 SP6	3.7.0-150600.13.3.1 fixed
suse enterprise desktop 15 SP7	3.7.0-150600.13.3.1 fixed
suse enterprise sap 15 SP6	3.7.0-150600.13.3.1 fixed
suse enterprise sap 15 SP7	3.7.0-150600.13.3.1 fixed
suse enterprise server 15 SP6	3.7.0-150600.13.3.1 fixed
suse enterprise server 15 SP7	3.7.0-150600.13.3.1 fixed

git-svn

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-web

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

gitk

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 12 SP3	2.26.2-27.81.1 fixed
suse enterprise server 12 SP5	2.26.2-27.81.1 fixed
suse enterprise server 15 SP2	2.26.2-150000.64.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

perl-Git

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

git

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-all

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-core

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-core-doc

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-credential-libsecret

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-daemon

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-email

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-gui

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-instaweb

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-subtree

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-svn

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

gitk

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

gitweb

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

perl-Git

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

perl-Git-SVN

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5

https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652

https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v

http://www.openwall.com/lists/oss-security/2025/07/08/4

https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html