Aggregator

USN-8925-1: YAML-LibYAML vulnerabilities

Ubuntu Security Advisories
7 hours 48 minutes ago
Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to delete files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2017-20285) It was discovered that YAML-LibYAML did not correctly handle parsing certain documents. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-25777) It was discovered that YAML-LibYAML contained a regular expression susceptible to catastrophic backtracking. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2026-63676)

gnome-shell-extension-gsconnect-73-1.fc45

Fedora Security Advisories
11 hours 39 minutes ago
FEDORA-2026-508badc038 Packages in this update:
  • gnome-shell-extension-gsconnect-73-1.fc45
Update description:

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

What's Changed
  • Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
  • Vipinus fix/clipboard handler safety net by @daniellandau in #2177
  • Improve CLI support for non-GNOME environment by @JingMatrix in #2157
  • Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
  • Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
  • Fix DesktopAppInfo loading by @ferdnyc in #2178
  • Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
  • lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
  • Keyboard shortcuts without grabbing by @daniellandau in #2037
  • Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
  • Better conditional GioUnix loading by @ferdnyc in #2189
  • GNOME 51 by @DaPigGuy in #2192

gnome-shell-extension-gsconnect-73-1.fc43

Fedora Security Advisories
11 hours 39 minutes ago
FEDORA-2026-eb93fa8f63 Packages in this update:
  • gnome-shell-extension-gsconnect-73-1.fc43
Update description:

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

What's Changed
  • Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
  • Vipinus fix/clipboard handler safety net by @daniellandau in #2177
  • Improve CLI support for non-GNOME environment by @JingMatrix in #2157
  • Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
  • Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
  • Fix DesktopAppInfo loading by @ferdnyc in #2178
  • Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
  • lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
  • Keyboard shortcuts without grabbing by @daniellandau in #2037
  • Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
  • Better conditional GioUnix loading by @ferdnyc in #2189
  • GNOME 51 by @DaPigGuy in #2192

gnome-shell-extension-gsconnect-73-1.fc44

Fedora Security Advisories
11 hours 39 minutes ago
FEDORA-2026-37da8aa1f8 Packages in this update:
  • gnome-shell-extension-gsconnect-73-1.fc44
Update description:

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

What's Changed
  • Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
  • Vipinus fix/clipboard handler safety net by @daniellandau in #2177
  • Improve CLI support for non-GNOME environment by @JingMatrix in #2157
  • Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
  • Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
  • Fix DesktopAppInfo loading by @ferdnyc in #2178
  • Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
  • lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
  • Keyboard shortcuts without grabbing by @daniellandau in #2037
  • Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
  • Better conditional GioUnix loading by @ferdnyc in #2189
  • GNOME 51 by @DaPigGuy in #2192

nicotine+-3.3.11-1.fc44

Fedora Security Advisories
15 hours 59 minutes ago
FEDORA-2026-5524bd90b2 Packages in this update:
  • nicotine+-3.3.11-1.fc44
Update description: Version 3.3.11 (September 16, 2026) Changes
  • Added menu items for moving column headers due to broken drag-and-drop in GTK
  • Enabled fixed number of upload slots by default
  • Show global recommendations for interests when no personalized ones are available
  • Only show online status of open chat history users to reduce server traffic
  • Expire cached user IP addresses after 30 minutes at the latest
  • Removed 'Everyone' permission for receiving files sent via manual upload
  • Removed automatic port forwarding from isolated mode (Docker containers)
Corrections
  • Important: Prevent unbounded memory use for large uncompressed network messages
  • Important: Prevent file uploads from going through to spoofed users
  • Important: Added rate limits for CTCP messages
  • Important: Fixed a rare shares database corruption due to similar file names
  • Important: Fixed an issue where peers would sometimes receive the wrong username
  • Important: Fixed some incorrect behavior in the distributed search network
  • Fixed a crash when searching for room files with no chatroom specified
  • Fixed a rare crash when opening File Properties dialog
  • Fixed rare crashes when starting/quitting the application
  • Fixed broken Add Buddy text entry in the buddies sidebar
  • Fixed configuration files not being saved when restarting or logging out
  • Fixed upload removals when banning an IP address from the Preferences dialog
  • Fixed loading a saved shares file list from disk while offline
  • Fixed shares not always rescanning on startup when databases were missing/corrupted
  • Fixed folder downloads adding files from other users with identical folder paths
  • Fixed incorrect average transfer speed when uploading the same file many times
  • Fixed transfer list not always updating fully until switching to another tab
  • Fixed zero-byte downloads not finishing immediately
  • Fixed an issue where the first connection to the server could fail
  • Fixed occasional performance issues when responding to search requests
  • Fixed incorrect sort order in file lists in some cases
  • Fixed inaccurate stuck current folder count during rescan
  • Fixed missing shared file count for users with no shared files
  • Fixed issues reading audio properties for some files when rescanning shares
  • Fixed tabs unexpectedly being marked as read when scrolling through them
  • Fixed room list order sometimes changing after restarting
  • Fixed removed private rooms not being fully cleaned from lists until reconnecting
  • Fixed long usernames not being ellipsized in private chat tabs
  • Fixed minor sizing issues with pages context menu on some systems
  • Fixed cosmetic issue with invalid folder paths in folder chooser button
  • Removed 'Insert Emoji' menu item from text entries that don't accept emoji

nicotine+-3.3.11-1.fc43

Fedora Security Advisories
15 hours 59 minutes ago
FEDORA-2026-843c104a8c Packages in this update:
  • nicotine+-3.3.11-1.fc43
Update description: Version 3.3.11 (September 16, 2026) Changes
  • Added menu items for moving column headers due to broken drag-and-drop in GTK
  • Enabled fixed number of upload slots by default
  • Show global recommendations for interests when no personalized ones are available
  • Only show online status of open chat history users to reduce server traffic
  • Expire cached user IP addresses after 30 minutes at the latest
  • Removed 'Everyone' permission for receiving files sent via manual upload
  • Removed automatic port forwarding from isolated mode (Docker containers)
Corrections
  • Important: Prevent unbounded memory use for large uncompressed network messages
  • Important: Prevent file uploads from going through to spoofed users
  • Important: Added rate limits for CTCP messages
  • Important: Fixed a rare shares database corruption due to similar file names
  • Important: Fixed an issue where peers would sometimes receive the wrong username
  • Important: Fixed some incorrect behavior in the distributed search network
  • Fixed a crash when searching for room files with no chatroom specified
  • Fixed a rare crash when opening File Properties dialog
  • Fixed rare crashes when starting/quitting the application
  • Fixed broken Add Buddy text entry in the buddies sidebar
  • Fixed configuration files not being saved when restarting or logging out
  • Fixed upload removals when banning an IP address from the Preferences dialog
  • Fixed loading a saved shares file list from disk while offline
  • Fixed shares not always rescanning on startup when databases were missing/corrupted
  • Fixed folder downloads adding files from other users with identical folder paths
  • Fixed incorrect average transfer speed when uploading the same file many times
  • Fixed transfer list not always updating fully until switching to another tab
  • Fixed zero-byte downloads not finishing immediately
  • Fixed an issue where the first connection to the server could fail
  • Fixed occasional performance issues when responding to search requests
  • Fixed incorrect sort order in file lists in some cases
  • Fixed inaccurate stuck current folder count during rescan
  • Fixed missing shared file count for users with no shared files
  • Fixed issues reading audio properties for some files when rescanning shares
  • Fixed tabs unexpectedly being marked as read when scrolling through them
  • Fixed room list order sometimes changing after restarting
  • Fixed removed private rooms not being fully cleaned from lists until reconnecting
  • Fixed long usernames not being ellipsized in private chat tabs
  • Fixed minor sizing issues with pages context menu on some systems
  • Fixed cosmetic issue with invalid folder paths in folder chooser button
  • Removed 'Insert Emoji' menu item from text entries that don't accept emoji

nicotine+-3.3.11-1.fc45

Fedora Security Advisories
15 hours 59 minutes ago
FEDORA-2026-4b6e8bed0f Packages in this update:
  • nicotine+-3.3.11-1.fc45
Update description: Version 3.3.11 (September 16, 2026) Changes
  • Added menu items for moving column headers due to broken drag-and-drop in GTK
  • Enabled fixed number of upload slots by default
  • Show global recommendations for interests when no personalized ones are available
  • Only show online status of open chat history users to reduce server traffic
  • Expire cached user IP addresses after 30 minutes at the latest
  • Removed 'Everyone' permission for receiving files sent via manual upload
  • Removed automatic port forwarding from isolated mode (Docker containers)
Corrections
  • Important: Prevent unbounded memory use for large uncompressed network messages
  • Important: Prevent file uploads from going through to spoofed users
  • Important: Added rate limits for CTCP messages
  • Important: Fixed a rare shares database corruption due to similar file names
  • Important: Fixed an issue where peers would sometimes receive the wrong username
  • Important: Fixed some incorrect behavior in the distributed search network
  • Fixed a crash when searching for room files with no chatroom specified
  • Fixed a rare crash when opening File Properties dialog
  • Fixed rare crashes when starting/quitting the application
  • Fixed broken Add Buddy text entry in the buddies sidebar
  • Fixed configuration files not being saved when restarting or logging out
  • Fixed upload removals when banning an IP address from the Preferences dialog
  • Fixed loading a saved shares file list from disk while offline
  • Fixed shares not always rescanning on startup when databases were missing/corrupted
  • Fixed folder downloads adding files from other users with identical folder paths
  • Fixed incorrect average transfer speed when uploading the same file many times
  • Fixed transfer list not always updating fully until switching to another tab
  • Fixed zero-byte downloads not finishing immediately
  • Fixed an issue where the first connection to the server could fail
  • Fixed occasional performance issues when responding to search requests
  • Fixed incorrect sort order in file lists in some cases
  • Fixed inaccurate stuck current folder count during rescan
  • Fixed missing shared file count for users with no shared files
  • Fixed issues reading audio properties for some files when rescanning shares
  • Fixed tabs unexpectedly being marked as read when scrolling through them
  • Fixed room list order sometimes changing after restarting
  • Fixed removed private rooms not being fully cleaned from lists until reconnecting
  • Fixed long usernames not being ellipsized in private chat tabs
  • Fixed minor sizing issues with pages context menu on some systems
  • Fixed cosmetic issue with invalid folder paths in folder chooser button
  • Removed 'Insert Emoji' menu item from text entries that don't accept emoji