Red Hat Security Advisory

RHSA-2026:59361

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images libgit2-1.9.7-1.hum1@aarch64, libgit2-1.9.7-1.hum1@src, libgit2-1.9.7-1.hum1@x86_64 +2

Fixes 5 records

TI-2026-38647 CVE-2026-53587

libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data

HIGH 72

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2026-08-20 Partial fix · 1.8.6, 1.9.5 CWE-125

TI-2026-38643 CVE-2026-53583

libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

HIGH 68

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00238 Published 2026-08-20 Partial fix · 1.8.6, 1.9.5 CWE-295

TI-2026-38645 CVE-2026-53585

libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header

MEDIUM 63

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00395 Published 2026-08-20 Partial fix · 1.8.6, 1.9.5 CWE-770

TI-2026-38646 CVE-2026-53586

libgit2: HTTP transport can leak credentials to an offsite redirect target

LOW 29

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00276 Published 2026-08-20 Partial fix · 1.8.6, 1.9.5 CWE-200

TI-2026-38644 CVE-2026-53584

libgit2: Submodule path traversal

LOW 20

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00328 Published 2026-08-20 Partial fix · 1.8.6, 1.9.5 CWE-22