Red Hat Security Advisory

RHSA-2026:79372

Technical preview of the satellite/iop-vmaas-rhel9 container image

Released 2026-10-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9

Fixes 1 record

TI-2026-54689 CVE-2026-78677 · GHSA-8mcc-hrx5-hvxc

GitPython before 3.1.59 Path Traversal via separate-git-dir

HIGH 77

GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00651 Published 2026-08-25 Partial fix · 3.1.59 CWE-22