Red Hat Security Advisory

RHSA-2026:68281

Red Hat Hardened Images RPMs Security Update

Released 2026-09-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images trivy-0.74.0-0.3.hum1@aarch64, trivy-0.74.0-0.3.hum1@src, trivy-0.74.0-0.3.hum1@x86_64

Fixes 2 records

TI-2026-60293 CVE-2026-88922 · GHSA-34p9-pr49-jvvc

Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

LOW 30

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevat…

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00113 Published 2026-09-15 Partial fix · 2.2.4 CWE-281

TI-2026-50129 CVE-2026-71557 · GHSA-qgq7-7hm3-q39j

go-git: Malicious reference names may modify files outside the reference storage

LOW 28

go-git is an extensible git implementation library written in pure Go.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00413 Published 2026-08-07 Partial fix · 5.19.2, 6.0.0-alpha.5 CWE-22