# Git for Win - CVE-2025-68121 - Impact Analysis and Fix

1 messages from 2026-02-26 to 2026-02-26. Participants: Matthiesen, Jan.
Thread: https://gitlist.dev/t/65080

## Matthiesen, Jan, 2026-02-26 18:08

Subject: Git for Win - CVE-2025-68121 - Impact Analysis and Fix
Message-ID: <d65bd23d95fb4ae19651e83f4578850a@bwi.de>
URL: https://gitlist.dev/e/d65bd23d95fb4ae19651e83f4578850a%40bwi.de

```
Hi Git dev team,

we've noted above critical CVE (CVSS 10.0) and wanted to inquire about any possible dependencies for the (2.53.0) x64 version of Git for Windows and any fix perspective. 
Given Git is not a Google tool it should be quick to decide and respond to.

The CVE relates to packet crypto/tls in the standard library of Go (Golang).
Impacted software: Go-versions prior to 1.26.0-rc.1 plus distros based on it (e.g. Debian Bullseye/Bookworm, RHEL 10, Ubuntu).

How can we ensure the latest Git version is not or no longer impacted by this CV?

Kind regards
Jan.Matthiesen@bwi.de

```