Stay Secure with the Latest Linux Advisories

security advisoryfedoraCVE

Fedora 42 GitPython 3.1.50 Sec Defects Fix CVE-2026-42215 2026-585a8768df

Update to 3.1.50; fixes CVE-2026-42215 / GHSA-mv93-w799-cj2w. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-585a8768df 2026-05-14 04:02:29.141266+00:00 -------------------------------------------------------------------------------- Name : GitPython Product : Fedora 42 Version : 3.1.50 Release : 1.fc42 URL : https://github.com/gitpython-developers/GitPython Summary : Python Git Library Description : GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, and additionally allows you to access the git repository more directly using either a pure python implementation, or the faster, but more resource intensive git command implementation. The object database implementation is optimized for handling large quantities of objects and large datasets, which is achieved by using low-level structures and data streaming. -------------------------------------------------------------------------------- Update Information: Update to 3.1.50; fixes CVE-2026-42215 / GHSA-mv93-w799-cj2w. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67. -------------------------------------------------------------------------------- ChangeLog: * Wed May 6 2026 Benjamin A. Beasley - 3.1.50-1 - Update to 3.1.50; closes RHBZ#2466957 and fixes CVE-2026-42215 * Wed Apr 29 2026 Benjamin A. Beasley - 3.1.49-1 - Update to 3.1.49; closes RHBZ#2463714 and fixes GHSA-v87r-6q3f-2j67 * Tue Apr 28 2026 Benjamin A. Beasley - 3.1.48-1 - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4, fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24 * Fri Jan 16 2026 FedoraRelease Engineering - 3.1.46-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 3.1.46-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2460480 - GitPython-3.1.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=2460480 [ 2 ] Bug #2463714 - GitPython-3.1.49 is available https://bugzilla.redhat.com/show_bug.cgi?id=2463714 [ 3 ] Bug #2466957 - GitPython-3.1.50 is available https://bugzilla.redhat.com/show_bug.cgi?id=2466957 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-585a8768df' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . GitPython update to 3.1.50 resolves multiple security defects including CVE-2026-42215. Immediate action recommended.. GitPython, Fedora Update, CVE-2026-42215, security defects, updatenotification. . Severity: Important. LinuxSecurity.com Team

May 14, 2026 •Important Fedora