Skip to content
OpenAdvisories
High RHSA-2026:45785 5 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 28, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 swift-lang 0:6.3.3-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 swift-lang-runtime 0:6.3.3-0.1.1.hum1

Vulnerabilities 5

  • High 8.8
    CVE-2026-67325

    GitPython before 3.1.51 Command Injection via option prefix abbreviation

    GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like upload_p instead of upload…

    gitpython-developers GitPython checkov gitpython Debian Ubuntu Wolfi PyPI
  • High 8.4
    CVE-2026-67323

    GitPython before 3.1.51 Command Injection via unguarded Git options

    GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbitrary command execution). Additionally,…

    gitpython-developers GitPython checkov gitpython Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-43823

    When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the …

    Apple swift-crypto
  • High 7.5
    CVE-2026-67322

    GitPython before 3.1.52 Environment Variable Exfiltration via clone_from

    GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote URL is passed through Git.polish_url(), which on non-Cygwin platforms calls os.path.expandvars() on the URL before invoking git clone. …

    gitpython-developers GitPython checkov gitpython Debian Ubuntu Wolfi PyPI
  • High 7.0
    CVE-2026-67326

    GitPython before 3.1.50 Newline Injection via config_writer section

    GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged [core] section with hooksPath p…

    gitpython-developers GitPython gitpython python-git Debian Ubuntu PyPI

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-43823
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-67322
  • report
    https://access.redhat.com/security/cve/CVE-2026-67326
  • report
    https://access.redhat.com/security/cve/CVE-2026-67323
  • report
    https://access.redhat.com/security/cve/CVE-2026-67325
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45785.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2506494
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43823
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43823
  • article
    https://github.com/apple/swift-crypto/security/advisories/GHSA-8q93-f6xh-4f6f
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510021
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67322
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67322
  • article
    https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573
  • article
    https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-clone-from
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2509976
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67323
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67323
  • article
    https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v
  • article
    https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-unguarded-git-options
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2509975
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67325
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67325
  • article
    https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
  • article
    https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-option-prefix-abbreviation
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510003
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67326
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67326
  • article
    https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
  • article
    https://www.vulncheck.com/advisories/gitpython-before-newline-injection-via-config-writer-section