Back Linuxsecurity

Fedora 44 rust-lsd Security Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • August 16, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

An ls command with a lot of pretty colors and some other stuff.

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate. This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

* Fri Aug 14 2026 Fabio Valentini - 1.2.0-8 - Rebuild with latest libgit2-sys crate for libgit2 fixes * Fri Jul 17 2026 Fedora Release Engineering - 1.2.0-7 - Rebuilt for * Mon Apr 27 2026 Michel Lind - 1.2.0-6 - Allow both lscolors 0.20 and 0.21 * Mon Apr 27 2026 Michel Lind - 1.2.0-5 - Update uzers to 0.12 and xdg to 3

Fedora Update Notification FEDORA-2026-74c4a6f82e 2026-08-16 01:05:31.112859+00:00 Name : rust-lsd Product : Fedora 44 Version : 1.2.0 Release : 8.fc44 URL : Summary : Ls command with a lot of pretty colors and some other stuff Description : An ls command with a lot of pretty colors and some other stuff.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Fedora Rust Packages Vulnerable to libgit2 Security Flaws Recent security advisories for Fedora 43 and 44 highlight vulnerabilities in Rust packages linked to the libgit2 library. These vulnerabilities, including CVE-2026-5917 and others, affect applications using Rust bindings for libgit2, which could lead to privilege escalation and system-wide damage. The affected packages include rust-lsd, rust-git-delta, rust-git-interactive-rebase-tool, rust-pretty-git-prompt, and rust-tokei. Users are advised to rebuild their applications with the latest libgit2-sys crate to mitigate these risks. The vulnerabilities were published on August 11, 2026, and updates are available for installation via the dnf update program. The advisories emphasize the importance of auditing Linux privileges to prevent exploitation. 13 sources 74

Extracted Entities

Fedora 44 rust-lsd Security Advisory 2026

The full story

Extracted Entities

Companies (1)

CVEs (6)

Platforms (1)