Fedora Security Advisories

• rust-lsd-1.2.0-8.el10_2

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

• rust-bat-0.26.1-2.el9
• rust-git-delta-0.19.1-7.el9
• rust-lsd-1.2.0-8.el9
• rust-tokei-14.0.0-7.el9

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

• rust-bat-0.26.1-3.fc43
• rust-git-delta-0.19.1-7.fc43
• rust-git-interactive-rebase-tool-2.4.1-17.fc43
• rust-lsd-1.2.0-8.fc43
• rust-pretty-git-prompt-0.2.2-11.fc43
• rust-tokei-14.0.0-7.fc43

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

• rust-bat-0.26.1-3.fc44
• rust-git-delta-0.19.1-7.fc44
• rust-git-interactive-rebase-tool-2.4.1-17.fc44
• rust-lsd-1.2.0-8.fc44
• rust-pretty-git-prompt-0.2.2-11.fc44
• rust-tokei-14.0.0-7.fc44

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

• rust-bat-0.26.1-3.el10_3
• rust-git-delta-0.19.1-7.el10_3
• rust-lsd-1.2.0-8.el10_3
• rust-tokei-14.0.0-7.el10_3

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

• AusweisApp2-2.5.5-1.fc43

Update to the latest upstream release:

• https://github.com/Governikus/AusweisApp/releases/tag/2.5.5

• AusweisApp2-2.5.5-1.fc44

Update to the latest upstream release:

• https://github.com/Governikus/AusweisApp/releases/tag/2.5.5

• libgit2_1.9-1.9.7-1.el10_3

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

• libgit2_1.9-1.9.7-1.el9

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

• libgit2_1.9-1.9.7-1.el10_2

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

• libgit2-1.9.7-1.fc44

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

• libgit2-1.9.7-1.fc43

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

• libsoup3-3.6.6-4.fc43

Fix for several CVEs

• pack-0.40.9-1.el8

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

• pack-0.40.9-1.el9

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

• pack-0.40.9-1.fc43

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

• pack-0.40.9-1.fc44

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

• libsoup3-3.6.6-9.fc44

Patches for several CVEs

• dotnet9.0-9.0.120-1.fc44

Update to .NET SDK 9.0.120 and Runtime 9.0.19

Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.120.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.19.md

• dotnet9.0-9.0.120-1.fc43

Update to .NET SDK 9.0.120 and Runtime 9.0.19

Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.120.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.19.md