Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Fedora 42 GitPython 3.1.50 Sec Defects Fix CVE-2026-42215 2026-585a8768df

fedora
Calendar Grey May 14, 2026
Dist Fedora Esm H88
GitPython update to 3.1.50 resolves multiple security defects including CVE-2026-42215. Immediate action recommended.
Update to 3.1.50; fixes CVE-2026-42215 / GHSA-mv93-w799-cj2w

Summary

GitPython is a python library used to interact with git repositories,

high-level like git-porcelain, or low-level like git-plumbing.

It provides abstractions of git objects for easy access of repository data, and

additionally allows you to access the git repository more directly using either

a pure python implementation, or the faster, but more resource intensive git

command implementation.

The object database implementation is optimized for handling large quantities

of objects and large datasets, which is achieved by using low-level structures

and data streaming.

Update Information:

Update to 3.1.50; fixes CVE-2026-42215 / GHSA-mv93-w799-cj2w. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67.

Topics%20covered

Topics Covered

security advisory fedora CVE GitPython security defect resource intensive

Change Log

* Wed May 6 2026 Benjamin A. Beasley - 3.1.50-1 - Update to 3.1.50; closes RHBZ#2466957 and fixes CVE-2026-42215 * Wed Apr 29 2026 Benjamin A. Beasley - 3.1.49-1 - Update to 3.1.49; closes RHBZ#2463714 and fixes GHSA-v87r-6q3f-2j67 * Tue Apr 28 2026 Benjamin A. Beasley - 3.1.48-1 - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4, fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24 * Fri Jan 16 2026 Fedora Release Engineering - 3.1.46-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 3.1.46-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2460480 - GitPython-3.1.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=2460480 [ 2 ] Bug #2463714 - GitPython-3.1.49 is available https://bugzilla.redhat.com/show_bug.cgi?id=2463714 [ 3 ] Bug #2466957 - GitPython-3.1.50 is available https://bugzilla.redhat.com/show_bug.cgi?id=2466957

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-585a8768df' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: GitPython
Product: Fedora 42
Version: 3.1.50
Release: 1.fc42
URL: https://github.com/gitpython-developers/GitPython
Summary: Python Git Library

Topics%20covered

Topics Covered

security advisory fedora CVE GitPython security defect resource intensive

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here