Back Linuxsecurity

Fedora 42 Stgit Critical Permission Modification CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 31, 2026

Stacked Git, StGit for short, is an application for managing Git commits as a stack of patches. With a patch stack workflow, multiple patches can be developed concurrently and efficiently, with each patch focused on a single concern, resulting in both a clean Git commit history and improved productivity. Update Information : Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Stacked Git, StGit for short, is an application for managing Git commits as a

With a patch stack workflow, multiple patches can be developed concurrently and

efficiently, with each patch focused on a single concern, resulting in both a

clean Git commit history and improved productivity.

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

* Sun Mar 22 2026 Benjamin A. Beasley - 2.5.5-5 - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 - Fixes RHBZ#2449690 - Updated the License expression and wrote it one-term-per-line * Sat Jan 17 2026 Fedora Release Engineering - 2.5.5-4 - Rebuilt for

[ 1 ] Bug #2449690 - CVE-2026-33056 stgit: tar-rs: Arbitrary directory permission modification via crafted tar archive [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9e26f48b50' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Permission Modification Vulnerability in Fedora StGit (CVE-2026-33056) Fedora has released updates addressing a critical permission modification vulnerability in StGit, identified as CVE-2026-33056. This vulnerability allows arbitrary directory permission modifications through crafted tar archives, potentially impacting users who utilize StGit for managing Git commits. The issue was published on March 20, 2026, and affects Fedora versions 42 and 43. The updates were rebuilt with rust-tar 0.4.45 to mitigate this vulnerability. Users are advised to upgrade their systems using the 'dnf' update program. The vulnerability was reported in Bug #2449690, which details the nature of the flaw. This situation emphasizes the importance of timely updates to prevent exploitation. Current status indicates that the patch is available and should be applied immediately. 2 sources 73

Extracted Entities

Fedora 42 Stgit Critical Permission Modification CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

MITRE ATT&CK (1)

Tools (1)