Back Linuxsecurity

Fedora 43 rust-bat Important Libgit2 Rebuild Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • August 17, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

A cat(1) clone with wings.

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate. This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

* Fri Aug 14 2026 Fabio Valentini - 0.26.1-3 - Rebuild with latest libgit2-sys crate for libgit2 fixes * Fri Jul 17 2026 Fedora Release Engineering - 0.26.1-2 - Rebuilt for

Fedora Update Notification FEDORA-2026-7ebec18d52 2026-08-17 01:10:33.782373+00:00 Name : rust-bat Product : Fedora 43 Version : 0.26.1 Release : 3.fc43 URL : Summary : Cat(1) clone with wings Description : A cat(1) clone with wings.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7ebec18d52' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Fedora Rust Packages Vulnerable to libgit2 Security Flaws Recent security advisories for Fedora 43 and 44 highlight vulnerabilities in Rust packages linked to the libgit2 library. These vulnerabilities, including CVE-2026-5917 and others, affect applications using Rust bindings for libgit2, which could lead to privilege escalation and system-wide damage. The affected packages include rust-lsd, rust-git-delta, rust-git-interactive-rebase-tool, rust-pretty-git-prompt, and rust-tokei. Users are advised to rebuild their applications with the latest libgit2-sys crate to mitigate these risks. The vulnerabilities were published on August 11, 2026, and updates are available for installation via the dnf update program. The advisories emphasize the importance of auditing Linux privileges to prevent exploitation. 13 sources 74

Extracted Entities

CVEs (6)

CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 CVE-2026-5917

Platforms (6)

Fedora 43 Git2 Libgit2 Libgit2-sys Linux Rust