Back Linuxsecurity

Fedora 42 GitPython 3.1.50 Sec Defects Fix CVE-2026-42215 2026

Linuxsecurity •LinuxSecurity Advisories • May 14, 2026

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, and additionally allows you to access the git repository more directly using either a pure python implementation, or the faster, but more resource intensive git command implementation. The object database implementation is optimized for handling large quantities of objects and large datasets, which is achieved by using low-level structures and data streaming. Update Information : Update to 3.1.50; fixes CVE-2026-42215 / GHSA-mv93-w799-cj2w. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67.

GitPython is a python library used to interact with git repositories,

high-level like git-porcelain, or low-level like git-plumbing.

It provides abstractions of git objects for easy access of repository data, and

additionally allows you to access the git repository more directly using either

a pure python implementation, or the faster, but more resource intensive git

command implementation.

The object database implementation is optimized for handling large quantities

of objects and large datasets, which is achieved by using low-level structures

Update to 3.1.50; fixes CVE-2026-42215 / GHSA-mv93-w799-cj2w. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67.

* Wed May 6 2026 Benjamin A. Beasley - 3.1.50-1 - Update to 3.1.50; closes RHBZ#2466957 and fixes CVE-2026-42215 * Wed Apr 29 2026 Benjamin A. Beasley - 3.1.49-1 - Update to 3.1.49; closes RHBZ#2463714 and fixes GHSA-v87r-6q3f-2j67 * Tue Apr 28 2026 Benjamin A. Beasley - 3.1.48-1 - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4, fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24 * Fri Jan 16 2026 Fedora Release Engineering - 3.1.46-3 - Rebuilt for * Fri Jan 16 2026 Fedora Release Engineering - 3.1.46-2 - Rebuilt for

[ 1 ] Bug #2460480 - GitPython-3.1.48 is available [ 2 ] Bug #2463714 - GitPython-3.1.49 is available [ 3 ] Bug #2466957 - GitPython-3.1.50 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-585a8768df' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaw in GitPython Fixed in Fedora 42 and 43 Updates GitPython, a Python library for interacting with Git repositories, has a critical security vulnerability identified as CVE-2026-42215, which was published on 2026-05-07. This flaw affects users of Fedora 42 and 43 who utilize GitPython version 3.1.50. The vulnerability could potentially allow unauthorized access or manipulation of Git repositories. The Fedora project has released updates to version 3.1.50 to address this issue, along with several other security defects. Users are advised to upgrade their installations using the 'dnf' update program. The updates were made available on 2026-05-06, just prior to the CVE publication. The affected systems include Fedora distributions utilizing GitPython, which is widely used in software development environments. The updates also close several other related bugs and vulnerabilities. 2 sources 71

Extracted Entities

CVEs (1)

CVE-2026-42215