RHSA-2026:45785HighCVSS 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
July 25, 2026
Last Modified
August 19, 2026

🔗 CVE IDs covered (5)

CVE-2026-43823 →CVE-2026-67322 →CVE-2026-67323 →CVE-2026-67325 →CVE-2026-67326 →

📋 Description

CVE-2026-43823 — swift-crypto: swift-crypto: Denial of Service due to double-free during RSA public key initialization CVE-2026-67322 — gitpython: GitPython: Environment variable exfiltration via attacker-controlled clone URL CVE-2026-67323 — gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options CVE-2026-67325 — gitpython: GitPython: Command Injection via Git option prefix abbreviation CVE-2026-67326 — gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer()

🎯 Affected products4

  • Red Hat Hardened Images
  • swift-lang-main@aarch64 as a component of Red Hat Hardened Images
  • swift-lang-main@src as a component of Red Hat Hardened Images
  • swift-lang-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, ensure that applications using GitPython's Repo.clone_from() method to clone from untrusted sources operate within a process environment that does not contain sensitive information as environment variables. Alternatively, implement strict validation and sanitization of all Git repository URLs before they are passed to Repo.clone_from() to prevent the inclusion of environment variable tokens. If the application is a service, a restart may be required for environment variable changes to take effect. Workaround: To mitigate the risk, ensure that applications utilizing GitPython are run within a sandboxed environment with minimal privileges. This limits the potential impact of arbitrary command execution or file truncation if an attacker successfully exploits the vulnerability through an application processing untrusted input. Review applications that interact with GitPython to ensure all input is properly sanitized and validated before being passed to methods such as Repo.archive(), git.ls_remote(), Repo.iter_commits(), or Repo.blame(). Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)