Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 44 python-libcst Important Update RUSTSEC Fixes 2026-17c484fafa

fedora
Calendar Grey July 17, 2026
Scroller Fedora
This advisory informs about the python-libcst update addressing important fixes for RUSTSEC vulnerabilities.
Update to 1.8.6

Summary

LibCST parses Python source code as a CST tree that keeps all formatting

details (comments, whitespaces, parentheses, etc). It's useful for building

automated refactoring (codemod) applications and linters.

LibCST creates a compromise between an Abstract Syntax Tree (AST) and a

traditional Concrete Syntax Tree (CST). By carefully reorganizing and naming

node types and fields, it creates a lossless CST that looks and feels like an

AST.

Update Information:

Update to 1.8.6. Build with PyO3 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177).

Topics%20covered

Topics Covered

security advisory fedora important RUSTSEC python-libcst code refactoring

Change Log

* Wed Jul 8 2026 Benjamin A. Beasley - 1.8.6-4 - Don’t attempt cargo tests on ppc64le due to a linker error * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.6-3 - Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177) * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.6-2 - Also run cargo tests for native (Rust) parser * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.6-1 - Update to 1.8.6 (close RHBZ#2368777) * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.0-12 - Let LICENSE.dependencies be included in the .dist-info * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.0-11 - Test both the pure-Python parser and the Rust parser * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.0-10 - Drop the hypothesmith test dependency (omit fuzz tests) - Also drop hypothesis since it is also only used for fuzz tests * Tue Jul 7 2026 Benjamin A. Beasley - 1.8.0-9 - Simplify and update build conditionals * Wed Jun 3 2026 Python Maint - 1.8.0-8 - Rebuilt for Python 3.15

References

Fedora Update Notification FEDORA-2026-17c484fafa 2026-07-18 00:26:14.272987+00:00
Name : python-libcst Product : Fedora 44 Version : 1.8.6 Release : 4.fc44 URL : https://github.com/Instagram/LibCST Summary : A concrete syntax tree with AST-like properties for Python 3 Description : LibCST parses Python source code as a CST tree that keeps all formatting details (comments, whitespaces, parentheses, etc). It's useful for building automated refactoring (codemod) applications and linters.
LibCST creates a compromise between an Abstract Syntax Tree (AST) and a traditional Concrete Syntax Tree (CST). By carefully reorganizing and naming node types and fields, it creates a lossless CST that looks and feels like an AST.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-17c484fafa' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-libcst
Product: Fedora 44
Version: 1.8.6
Release: 4.fc44
URL: https://github.com/Instagram/LibCST
Summary: A concrete syntax tree with AST-like properties for Python 3

Topics%20covered

Topics Covered

security advisory fedora important RUSTSEC python-libcst code refactoring

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.