Back Linuxsecurity

Fedora 44 libgit2 Update 1.9.6 Security Fixes CVE-2026-53583 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 27, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

libgit2 is a portable, pure C implementation of the Git core methods

provided as a re-entrant linkable library with a solid API, allowing

you to write native speed custom Git applications in any language

Update libgit2 to version 1.9.6. Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues, including - but not limited to: CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages always linked the system PCRE2 and did not use the bundled PCRE.

* Thu Jul 23 2026 Fabio Valentini - 1.9.6-1 - Update to version 1.9.6

Fedora Update Notification FEDORA-2026-9d59721e9b 2026-07-27 00:54:18.641579+00:00 Name : libgit2 Product : Fedora 44 Version : 1.9.6 Release : 1.fc44 URL : Summary : C implementation of the Git core methods as a library with a solid API Description : libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 44 libgit2 and rust-libgit2-sys Security Updates Address Multiple CVEs On July 27, 2026, Fedora released updates for libgit2 and rust-libgit2-sys to address multiple security vulnerabilities, including CVE-2026-53583 through CVE-2026-53587. These updates are critical for users of Fedora 44, as they mitigate risks associated with the use of the libgit2 library, a widely utilized Git core methods implementation. The vulnerabilities could potentially lead to privilege escalation and system-wide damage if exploited. Users are advised to update to libgit2 version 1.9.6 and rust-libgit2-sys version 0.18.7 to ensure their systems are secure. The Fedora packages are not affected by a specific vulnerability (GHSA-wfx7-g85r-q6vw) due to their linking practices. The updates were made available on the same day as the announcement. 4 sources 58

Extracted Entities

CVEs (5)

CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587

Platforms (1)

Linux