Aggregator

FEDORA-2026-010f9a18bb Packages in this update:

• janus-1.4.3-1.fc43

Update description:

Update to v1.4.3 (rhbz#2549665):

Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switch potentially causing a crash in SIP plugin (PR #3689)

Bug fixes & enhancements: - Keep DTLS retransmission timer running after handshake (PR #3687) - Enable TWCC feedback for audio-only connections (PR #3674) - Avoid discarding NACKs with duplicate queue pops (PR #3684) - Add new option to restrict info API when using secrets or tokens (PR #3646) - Add optional AudioBridge audio limiter based on AGC2 (PR #3593) - Add support for outgoing late offers (offerless INVITE) to the SIP plugin (PR #3660) - Fix contact header sometimes missing in REFER messages in the SIP plugin

FEDORA-2026-099de3a670 Packages in this update:

• janus-1.4.3-1.fc45

Update description:

Update to v1.4.3 (rhbz#2549665):

Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switch potentially causing a crash in SIP plugin (PR #3689)

Bug fixes & enhancements: - Keep DTLS retransmission timer running after handshake (PR #3687) - Enable TWCC feedback for audio-only connections (PR #3674) - Avoid discarding NACKs with duplicate queue pops (PR #3684) - Add new option to restrict info API when using secrets or tokens (PR #3646) - Add optional AudioBridge audio limiter based on AGC2 (PR #3593) - Add support for outgoing late offers (offerless INVITE) to the SIP plugin (PR #3660) - Fix contact header sometimes missing in REFER messages in the SIP plugin

FEDORA-2026-47eb160009 Packages in this update:

• janus-1.4.3-1.fc44

Update description:

Update to v1.4.3 (rhbz#2549665):

Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switch potentially causing a crash in SIP plugin (PR #3689)

Bug fixes & enhancements: - Keep DTLS retransmission timer running after handshake (PR #3687) - Enable TWCC feedback for audio-only connections (PR #3674) - Avoid discarding NACKs with duplicate queue pops (PR #3684) - Add new option to restrict info API when using secrets or tokens (PR #3646) - Add optional AudioBridge audio limiter based on AGC2 (PR #3593) - Add support for outgoing late offers (offerless INVITE) to the SIP plugin (PR #3660) - Fix contact header sometimes missing in REFER messages in the SIP plugin

FEDORA-2026-d8cf5f20d7 Packages in this update:

• python-streamlink-8.6.2-1.fc43

Update description: streamlink 8.6.2 (2026-10-07)

• SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags (CVE-2026-TO-BE-ASSIGNED / GHSA-j7pf-m7gx-jr33) (98781761)
• Changed: validate.xml_xpath() and validate.xml_xpath_string() to include access to re:test(), re:match() and re:replace() regex functions (#7151)
• Changed: log format of deprecation warnings (#7141)
• Fixed: missing deprecation warnings for already deprecated CLI arguments (req. Python 3.13+) (#7141)
• Fixed: being able to close SegmentedStreamReader streams without opening them first, emitting log records on garbage collection (#7146)
• Updated plugins:
• blazetv: fixed live streams (#7147)
• cinergroup: fixed Bloomberg HT (#7132)
• dogan: fixed plugin (#7138)
• facebook: re-introduced plugin with new implementation (#7115)
• vimeo: rewritten and fixed plugin (#7069)
• youtvua: added new plugin (#7140)
• Docs: tightened rules about AI-assisted contributions and security vulnerability reports (#7136, #7152)

Full changelog

streamlink 8.6.1 (2026-09-16)

• Fixed: compatibility with urllib3 2.8.0 (#7117)

Full changelog

streamlink 8.6.0 (2026-09-13)

• SECURITY: fixed arbitrary local file read via HTTP(S) redirection to file:// URL (CVE-2026-92164 / GHSA-vf2x-4v53-pm7v) (4b99c64d)
• SECURITY: fixed insecure cross-scheme redirection (HTTPS -> HTTP) (CVE-2026-92164 / GHSA-vf2x-4v53-pm7v) (4b99c64d)
• Added: official support for Python 3.15 (#7026)
• Added: support for HLS packed audio streams (#7083, #7082)
• Added: HLSSegment.{get,iter}_content() and HLSStreamWriter.{get,iter}_segment_content() for being able to modify segment data (#7059)
• Added: itsoffset option to FFMPEGMuxer (#7081)
• Added: nextjs_inline_rsc() to validate API (#7110)
• Fixed: HTTP server of --player-http/--player-continuous-http binding to all interfaces (#7051)
• Fixed: zero or negative duration values in HLS dateranges (#7074)
• Fixed: incorrect t attribute evaluation in DASH SegmentTimeline.S nodes (#7075)
• Updated plugins:
• ard_live: removed plugin (#7091)
• ard_mediathek: rewritten and fixed plugin (#7090)
• atresplayer: refactored stream retrieval (#7062)
• bigo: added MPEG-TS packet header decryption due to Bigo's web-protection (#7056, #7059)
• bigo: worked around account requirements (#7106, #7109)
• cdnbg: fixed player_url schema (#7036)
• douyu: fixed API call failures on systems with unsynced clocks (#7065)
• filmon: updated URL matcher and switched to v2 APIs (#7105)
• goodgame: fixed stream retrieval (#7086)
• kick: fixed VODs (#7108)
• nimotv: fixed access to streams (#7111)
• okru: fixed metadata schema (#7092)
• piczel: removed plugin (#7102)
• pluto: fixed URL matcher, channel ID resolver and VODs (#7048, #7100)
• tiktok: rewritten and fixed stream data schema for access to origin streams (#7077)
• twitch: added support for portrait-format streams (#7087)
• twitch: fixed missing category stream metadata breaking all stream metadata (#7025)
• vidio: rewritten and fixed plugin (#7063)
• zdf_mediathek: rewritten and fixed plugin (#7093)
• Dependencies: bumped min. version requirement of lxml to 5.0.0 (#7029)

Full changelog

streamlink 8.5.0 (2026-08-01)

• Fixed: named-pipe player inputs not being cleaned up on pre-open failure (#6935)
• Fixed: stream start offsets being incorrectly cast to int in HLS (#6941)
• Fixed: hls-playlist-reload-time not accepting floats (#6957)
• Refactored: HTTPSession and fixed many typing issues (#6924)
• Refactored: MPDNode in DASH manifest parser to allow attribute namespaces (#6988)
• Updated plugins:
• douyin: fixed validation schema (#6930)
• douyu: re-introduced plugin with new implementation (#6959, #7003)
• mdstrm: added support for VODs / embedded streams with access tokens (#6994)
• nos: rewritten and fixed plugin (#6954)
• radiko: fixed live_url value (#6962)
• trovo: removed plugin (#6999)
• tvazteca: added new plugin (#6994)
• Docs: clarified requirements of Twitch high quality streams (#6992)
• Tests: fixed test failures since Python 3.15 beta 1 (#6919)
• Security: made GitHub releases immutable (#6927)
• Security: pinned all GitHub actions to commit IDs (#6936)
• Security: switched to uv lockfile for all CI workflows and for building release assets (#6948)
• Misc: added pre-built FISH shell completions to release tarballs and wheels (#7014)

Full changelog

FEDORA-2026-6ffee677d1 Packages in this update:

• python-streamlink-8.6.2-1.fc44

Update description: streamlink 8.6.2 (2026-10-07)

• SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags (CVE-2026-TO-BE-ASSIGNED / GHSA-j7pf-m7gx-jr33) (98781761)
• Changed: validate.xml_xpath() and validate.xml_xpath_string() to include access to re:test(), re:match() and re:replace() regex functions (#7151)
• Changed: log format of deprecation warnings (#7141)
• Fixed: missing deprecation warnings for already deprecated CLI arguments (req. Python 3.13+) (#7141)
• Fixed: being able to close SegmentedStreamReader streams without opening them first, emitting log records on garbage collection (#7146)
• Updated plugins:
• blazetv: fixed live streams (#7147)
• cinergroup: fixed Bloomberg HT (#7132)
• dogan: fixed plugin (#7138)
• facebook: re-introduced plugin with new implementation (#7115)
• vimeo: rewritten and fixed plugin (#7069)
• youtvua: added new plugin (#7140)
• Docs: tightened rules about AI-assisted contributions and security vulnerability reports (#7136, #7152)

Full changelog

streamlink 8.6.1 (2026-09-16)

• Fixed: compatibility with urllib3 2.8.0 (#7117)

Full changelog

streamlink 8.6.0 (2026-09-13)

• SECURITY: fixed arbitrary local file read via HTTP(S) redirection to file:// URL (CVE-2026-92164 / GHSA-vf2x-4v53-pm7v) (4b99c64d)
• SECURITY: fixed insecure cross-scheme redirection (HTTPS -> HTTP) (CVE-2026-92164 / GHSA-vf2x-4v53-pm7v) (4b99c64d)
• Added: official support for Python 3.15 (#7026)
• Added: support for HLS packed audio streams (#7083, #7082)
• Added: HLSSegment.{get,iter}_content() and HLSStreamWriter.{get,iter}_segment_content() for being able to modify segment data (#7059)
• Added: itsoffset option to FFMPEGMuxer (#7081)
• Added: nextjs_inline_rsc() to validate API (#7110)
• Fixed: HTTP server of --player-http/--player-continuous-http binding to all interfaces (#7051)
• Fixed: zero or negative duration values in HLS dateranges (#7074)
• Fixed: incorrect t attribute evaluation in DASH SegmentTimeline.S nodes (#7075)
• Updated plugins:
• ard_live: removed plugin (#7091)
• ard_mediathek: rewritten and fixed plugin (#7090)
• atresplayer: refactored stream retrieval (#7062)
• bigo: added MPEG-TS packet header decryption due to Bigo's web-protection (#7056, #7059)
• bigo: worked around account requirements (#7106, #7109)
• cdnbg: fixed player_url schema (#7036)
• douyu: fixed API call failures on systems with unsynced clocks (#7065)
• filmon: updated URL matcher and switched to v2 APIs (#7105)
• goodgame: fixed stream retrieval (#7086)
• kick: fixed VODs (#7108)
• nimotv: fixed access to streams (#7111)
• okru: fixed metadata schema (#7092)
• piczel: removed plugin (#7102)
• pluto: fixed URL matcher, channel ID resolver and VODs (#7048, #7100)
• tiktok: rewritten and fixed stream data schema for access to origin streams (#7077)
• twitch: added support for portrait-format streams (#7087)
• twitch: fixed missing category stream metadata breaking all stream metadata (#7025)
• vidio: rewritten and fixed plugin (#7063)
• zdf_mediathek: rewritten and fixed plugin (#7093)
• Dependencies: bumped min. version requirement of lxml to 5.0.0 (#7029)

Full changelog

streamlink 8.5.0 (2026-08-01)

• Fixed: named-pipe player inputs not being cleaned up on pre-open failure (#6935)
• Fixed: stream start offsets being incorrectly cast to int in HLS (#6941)
• Fixed: hls-playlist-reload-time not accepting floats (#6957)
• Refactored: HTTPSession and fixed many typing issues (#6924)
• Refactored: MPDNode in DASH manifest parser to allow attribute namespaces (#6988)
• Updated plugins:
• douyin: fixed validation schema (#6930)
• douyu: re-introduced plugin with new implementation (#6959, #7003)
• mdstrm: added support for VODs / embedded streams with access tokens (#6994)
• nos: rewritten and fixed plugin (#6954)
• radiko: fixed live_url value (#6962)
• trovo: removed plugin (#6999)
• tvazteca: added new plugin (#6994)
• Docs: clarified requirements of Twitch high quality streams (#6992)
• Tests: fixed test failures since Python 3.15 beta 1 (#6919)
• Security: made GitHub releases immutable (#6927)
• Security: pinned all GitHub actions to commit IDs (#6936)
• Security: switched to uv lockfile for all CI workflows and for building release assets (#6948)
• Misc: added pre-built FISH shell completions to release tarballs and wheels (#7014)

Full changelog

FEDORA-2026-73fcc91d16 Packages in this update:

• python-streamlink-8.6.2-1.fc45

Update description: streamlink 8.6.2 (2026-10-07)

• SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags (CVE-2026-TO-BE-ASSIGNED / GHSA-j7pf-m7gx-jr33) (98781761)
• Changed: validate.xml_xpath() and validate.xml_xpath_string() to include access to re:test(), re:match() and re:replace() regex functions (#7151)
• Changed: log format of deprecation warnings (#7141)
• Fixed: missing deprecation warnings for already deprecated CLI arguments (req. Python 3.13+) (#7141)
• Fixed: being able to close SegmentedStreamReader streams without opening them first, emitting log records on garbage collection (#7146)
• Updated plugins:
• blazetv: fixed live streams (#7147)
• cinergroup: fixed Bloomberg HT (#7132)
• dogan: fixed plugin (#7138)
• facebook: re-introduced plugin with new implementation (#7115)
• vimeo: rewritten and fixed plugin (#7069)
• youtvua: added new plugin (#7140)
• Docs: tightened rules about AI-assisted contributions and security vulnerability reports (#7136, #7152)

Full changelog

streamlink 8.6.1 (2026-09-16)

• Fixed: compatibility with urllib3 2.8.0 (#7117)

Full changelog

streamlink 8.6.0 (2026-09-13)

• SECURITY: fixed arbitrary local file read via HTTP(S) redirection to file:// URL (CVE-2026-92164 / GHSA-vf2x-4v53-pm7v) (4b99c64d)
• SECURITY: fixed insecure cross-scheme redirection (HTTPS -> HTTP) (CVE-2026-92164 / GHSA-vf2x-4v53-pm7v) (4b99c64d)
• Added: official support for Python 3.15 (#7026)
• Added: support for HLS packed audio streams (#7083, #7082)
• Added: HLSSegment.{get,iter}_content() and HLSStreamWriter.{get,iter}_segment_content() for being able to modify segment data (#7059)
• Added: itsoffset option to FFMPEGMuxer (#7081)
• Added: nextjs_inline_rsc() to validate API (#7110)
• Fixed: HTTP server of --player-http/--player-continuous-http binding to all interfaces (#7051)
• Fixed: zero or negative duration values in HLS dateranges (#7074)
• Fixed: incorrect t attribute evaluation in DASH SegmentTimeline.S nodes (#7075)
• Updated plugins:
• ard_live: removed plugin (#7091)
• ard_mediathek: rewritten and fixed plugin (#7090)
• atresplayer: refactored stream retrieval (#7062)
• bigo: added MPEG-TS packet header decryption due to Bigo's web-protection (#7056, #7059)
• bigo: worked around account requirements (#7106, #7109)
• cdnbg: fixed player_url schema (#7036)
• douyu: fixed API call failures on systems with unsynced clocks (#7065)
• filmon: updated URL matcher and switched to v2 APIs (#7105)
• goodgame: fixed stream retrieval (#7086)
• kick: fixed VODs (#7108)
• nimotv: fixed access to streams (#7111)
• okru: fixed metadata schema (#7092)
• piczel: removed plugin (#7102)
• pluto: fixed URL matcher, channel ID resolver and VODs (#7048, #7100)
• tiktok: rewritten and fixed stream data schema for access to origin streams (#7077)
• twitch: added support for portrait-format streams (#7087)
• twitch: fixed missing category stream metadata breaking all stream metadata (#7025)
• vidio: rewritten and fixed plugin (#7063)
• zdf_mediathek: rewritten and fixed plugin (#7093)
• Dependencies: bumped min. version requirement of lxml to 5.0.0 (#7029)

Full changelog

streamlink 8.5.0 (2026-08-01)

• Fixed: named-pipe player inputs not being cleaned up on pre-open failure (#6935)
• Fixed: stream start offsets being incorrectly cast to int in HLS (#6941)
• Fixed: hls-playlist-reload-time not accepting floats (#6957)
• Refactored: HTTPSession and fixed many typing issues (#6924)
• Refactored: MPDNode in DASH manifest parser to allow attribute namespaces (#6988)
• Updated plugins:
• douyin: fixed validation schema (#6930)
• douyu: re-introduced plugin with new implementation (#6959, #7003)
• mdstrm: added support for VODs / embedded streams with access tokens (#6994)
• nos: rewritten and fixed plugin (#6954)
• radiko: fixed live_url value (#6962)
• trovo: removed plugin (#6999)
• tvazteca: added new plugin (#6994)
• Docs: clarified requirements of Twitch high quality streams (#6992)
• Tests: fixed test failures since Python 3.15 beta 1 (#6919)
• Security: made GitHub releases immutable (#6927)
• Security: pinned all GitHub actions to commit IDs (#6936)
• Security: switched to uv lockfile for all CI workflows and for building release assets (#6948)
• Misc: added pre-built FISH shell completions to release tarballs and wheels (#7014)

Full changelog

FEDORA-2026-898c0e2c77 Packages in this update:

• gnome-remote-desktop-51.0-2.fc45

Update description:

Fix for CVE-2026-96541

FEDORA-2026-29b06c5638 Packages in this update:

• gnome-remote-desktop-50.2-2.fc44

Update description:

Fix for CVE-2026-96541

FEDORA-2026-3bacbb1eb5 Packages in this update:

• ruby-4.0.9-40.fc44

Update description:

New version 4.0.9 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation.

FEDORA-2026-f03a317854 Packages in this update:

• ruby-4.0.9-40.fc45

Update description:

New version 4.0.9 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation.

FEDORA-2026-ba39729bff Packages in this update:

• vhs-0.11.0-4.fc44

Update description:

Update bundled x/net to 0.55.0 and x/crypto to 0.56.0 and rebuild with golang 1.26.10. All together, this fixes 14 different CVEs.

FEDORA-2026-ff352aea5d Packages in this update:

• vhs-0.12.1-1.fc45

Update description:

Update to version 0.12.1.

https://github.com/charmbracelet/vhs/releases/tag/v0.12.1

FEDORA-2026-a896cbb3f0 Packages in this update:

• flatpak-1.16.6-2.fc43

Update description:

Fixes CVE-2026-96807 and CVE-2026-96808

FEDORA-2026-c84199fbcd Packages in this update:

• eog-49.3-2.fc43

Update description:

Fix for CVE-2026-107651

FEDORA-2026-4c1a243e63 Packages in this update:

• epiphany-49.9.1-3.fc43

Update description:

Fix for CVE-2026-18487 and CVE-2026-94291

FEDORA-2026-87be295150 Packages in this update:

• epiphany-50.6-3.fc44

Update description:

Fix for CVE-2026-18487 and CVE-2026-94291

FEDORA-EPEL-2026-05535be744 Packages in this update:

• glow-3.0.0-1.el10_4

Update description:

Update to version 3.0.0, and updated bundled golang.org/x/net to 0.55.0 to resolve CVE-2026-25681.

https://github.com/charmbracelet/glow/releases/tag/v3.0.0

FEDORA-2026-21f4914bca Packages in this update:

• accessibility-inspector-26.08.2-1.fc45
• akonadi-calendar-26.08.2-1.fc45
• akonadi-calendar-tools-26.08.2-1.fc45
• akonadiconsole-26.08.2-1.fc45
• akonadi-contacts-26.08.2-1.fc45
• akonadi-import-wizard-26.08.2-1.fc45
• akonadi-mime-26.08.2-1.fc45
• akonadi-search-26.08.2-1.fc45
• akonadi-server-26.08.2-2.fc45
• akregator-26.08.2-1.fc45
• alligator-26.08.2-2.fc45
• analitza-26.08.2-2.fc45
• angelfish-26.08.2-2.fc45
• applet-window-buttons-0.14.0^20250224.b114cf2-4.fc45
• arianna-26.08.2-2.fc45
• ark-26.08.2-1.fc45
• artikulate-26.08.2-2.fc45
• audex-26.08.2-1.fc45
• audiocd-kio-26.08.2-1.fc45
• audiotube-26.08.2-2.fc45
• aurorae-6.8.1-1.fc45
• baloo-widgets-26.08.2-1.fc45
• blinken-26.08.2-1.fc45
• bluedevil-6.8.1-1.fc45
• bomber-26.08.2-1.fc45
• bovo-26.08.2-1.fc45
• breeze-gtk-6.8.1-1.fc45
• bup-0.34-1.fc45
• calendarsupport-26.08.2-1.fc45
• calindori-26.08.2-1.fc45
• calligra-26.08.2-2.fc45
• cantor-26.08.2-1.fc45
• colord-kde-26.08.2-1.fc45
• cxx-rust-cssparser-1.1.0-1.fc45
• dolphin-26.08.2-3.fc45
• dolphin-plugins-26.08.2-1.fc45
• dragon-26.08.2-2.fc45
• elisa-player-26.08.2-2.fc45
• eventviews-26.08.2-1.fc45
• falkon-26.08.2-2.fc45
• fcitx-configtool-0.4.10-27.fc45
• ffmpegthumbs-26.08.2-1.fc45
• filelight-26.08.2-1.fc45
• flatpak-kcm-6.8.1-1.fc45
• francis-26.08.2-2.fc45
• ghostwriter-26.08.2-1.fc45
• granatier-26.08.2-1.fc45
• grantlee-editor-26.08.2-1.fc45
• grantleetheme-26.08.2-1.fc45
• grub2-breeze-theme-6.8.1-1.fc45
• gwenview-26.08.2-2.fc45
• incidenceeditor-26.08.2-1.fc45
• isoimagewriter-26.08.2-1.fc45
• itinerary-26.08.2-2.fc45
• juk-26.08.2-1.fc45
• k3b-26.08.2-1.fc45
• kaccounts-integration-26.08.2-1.fc45
• kaccounts-providers-26.08.2-1.fc45
• kactivitymanagerd-6.8.1-1.fc45
• kaddressbook-26.08.2-1.fc45
• kajongg-26.08.2-1.fc45
• kalarm-26.08.2-1.fc45
• kalgebra-26.08.2-1.fc45
• kalk-26.08.2-2.fc45
• kalm-26.08.2-2.fc45
• kalzium-26.08.2-1.fc45
• kamera-26.08.2-1.fc45
• kamoso-26.08.2-1.fc45
• kanagram-26.08.2-1.fc45
• kapman-26.08.2-1.fc45
• kapptemplate-26.08.2-2.fc45
• kasts-26.08.2-2.fc45
• kate-26.08.2-2.fc45
• katomic-26.08.2-1.fc45
• kbackup-26.08.2-1.fc45
• kblackbox-26.08.2-1.fc45
• kblocks-26.08.2-1.fc45
• kbounce-26.08.2-1.fc45
• kbruch-26.08.2-1.fc45
• kcachegrind-26.08.2-1.fc45
• kcalc-26.08.2-1.fc45
• kcalutils-26.08.2-1.fc45
• kcharselect-26.08.2-1.fc45
• kclock-26.08.2-2.fc45
• kcolorchooser-26.08.2-1.fc45
• kcron-26.08.2-1.fc45
• kdebugsettings-26.08.2-1.fc45
• kde-cli-tools-6.8.1-1.fc45
• kde-connect-26.08.2-2.fc45
• kdecoration-6.8.1-1.fc45
• kde-dev-scripts-26.08.2-1.fc45
• kde-dev-utils-26.08.2-1.fc45
• kdeedu-data-26.08.2-1.fc45
• kdegraphics-mobipocket-26.08.2-1.fc45
• kdegraphics-thumbnailers-26.08.2-1.fc45
• kde-gtk-config-6.8.1-1.fc45
• kde-inotify-survey-26.08.2-1.fc45
• kdenetwork-filesharing-26.08.2-1.fc45
• kdenlive-26.08.2-2.fc45
• kde-partitionmanager-26.08.2-1.fc45
• kdepim-addons-26.08.2-1.fc45
• kdepim-runtime-26.08.2-1.fc45
• kdeplasma-addons-6.8.1-1.fc45
• kdesdk-kioslaves-26.08.2-1.fc45
• kdesdk-thumbnailers-26.08.2-1.fc45
• kdevelop-26.08.2-1.fc45
• kdevelop-php-26.08.2-1.fc45
• kdevelop-python-26.08.2-1.fc45
• kdf-26.08.2-1.fc45
• kdialog-26.08.2-1.fc45
• kdiamond-26.08.2-1.fc45
• kdnssd-26.08.2-1.fc45
• kdominate-26.08.2-1.fc45
• keditbookmarks-26.08.2-1.fc45
• keepsecret-26.08.2-2.fc45
• keysmith-26.08.2-2.fc45
• kf6-baloo-6.31.0-2.fc45
• kfind-26.08.2-1.fc45
• kfourinline-26.08.2-1.fc45
• kgeography-26.08.2-1.fc45
• kget-26.08.2-1.fc45
• kglobalacceld-6.8.1-1.fc45
• kgoldrunner-26.08.2-1.fc45
• kgpg-26.08.2-1.fc45
• kgraphviewer-26.08.2-1.fc45
• khangman-26.08.2-2.fc45
• khealthcertificate-26.08.2-1.fc45
• khelpcenter-26.08.2-1.fc45
• kidentitymanagement-26.08.2-2.fc45
• kig-26.08.2-1.fc45
• kigo-26.08.2-1.fc45
• killbots-26.08.2-1.fc45
• kimagemapeditor-26.08.2-1.fc45
• kimap-26.08.2-1.fc45
• kinfocenter-6.8.1-1.fc45
• kio-admin-26.08.2-1.fc45
• kio-extras-26.08.2-1.fc45
• kio-gdrive-26.08.2-1.fc45
• kirigami-gallery-26.08.2-1.fc45
• kiriki-26.08.2-1.fc45
• kiten-26.08.2-1.fc45
• kitinerary-26.08.2-1.fc45
• kjournald-26.08.2-1.fc45
• kjumpingcube-26.08.2-1.fc45
• kldap-26.08.2-1.fc45
• kleopatra-26.08.2-1.fc45
• klettres-26.08.2-1.fc45
• klickety-26.08.2-1.fc45
• klines-26.08.2-1.fc45
• kmag-26.08.2-1.fc45
• kmahjongg-26.08.2-1.fc45
• kmail-26.08.2-1.fc45
• kmail-account-wizard-26.08.2-2.fc45
• kmailtransport-26.08.2-1.fc45
• kmbox-26.08.2-1.fc45
• kmenuedit-6.8.1-1.fc45
• kmines-26.08.2-1.fc45
• kmix-26.08.2-1.fc45
• kmousetool-26.08.2-1.fc45
• kmouth-26.08.2-1.fc45
• kmplot-26.08.2-1.fc45
• knavalbattle-26.08.2-1.fc45
• knetwalk-26.08.2-1.fc45
• knights-26.08.2-1.fc45
• knighttime-6.8.1-1.fc45
• koko-26.08.2-2.fc45
• kolf-26.08.2-1.fc45
• kollision-26.08.2-1.fc45
• kolourpaint-26.08.2-1.fc45
• kompare-26.08.2-1.fc45
• kongress-26.08.2-2.fc45
• konqueror-26.08.2-2.fc45
• konquest-26.08.2-1.fc45
• konsole-26.08.2-1.fc45
• kontact-26.08.2-1.fc45
• kontactinterface-26.08.2-2.fc45
• kontrast-26.08.2-2.fc45
• konversation-26.08.2-1.fc45
• kopeninghours-26.08.2-1.fc45
• korganizer-26.08.2-1.fc45
• kosmindoormap-26.08.2-2.fc45
• kpat-26.08.2-1.fc45
• kpimtextedit-26.08.2-1.fc45
• kpipewire-6.8.1-1.fc45
• kpkpass-26.08.2-1.fc45
• kpmcore-26.08.2-1.fc45
• kpublictransport-26.08.2-2.fc45
• kqtquickcharts-26.08.2-1.fc45
• krdc-26.08.2-2.fc45
• krdp-6.8.1-1.fc45
• krecorder-26.08.2-1.fc45
• kreversi-26.08.2-1.fc45
• krfb-26.08.2-2.fc45
• kruler-26.08.2-2.fc45
• ksanecore-26.08.2-1.fc45
• kscreen-6.8.1-1.fc45
• kscreenlocker-6.8.1-1.fc45
• kshisen-26.08.2-1.fc45
• ksirk-26.08.2-1.fc45
• ksmtp-26.08.2-1.fc45
• ksnakeduel-26.08.2-1.fc45
• kspaceduel-26.08.2-1.fc45
• ksquares-26.08.2-1.fc45
• ksshaskpass-6.8.1-1.fc45
• ksudoku-26.08.2-1.fc45
• ksystemlog-26.08.2-1.fc45
• ksystemstats-6.8.1-1.fc45
• kteatime-26.08.2-1.fc45
• ktimer-26.08.2-1.fc45
• ktnef-26.08.2-1.fc45
• ktorrent-26.08.2-1.fc45
• ktouch-26.08.2-2.fc45
• ktrip-26.08.2-2.fc45
• ktuberling-26.08.2-1.fc45
• kturtle-26.08.2-1.fc45
• kubrick-26.08.2-1.fc45
• kunifiedpush-26.08.2-1.fc45
• kup-backup-6.8.1-1.fc45
• kwalletmanager5-26.08.2-1.fc45
• kwave-26.08.2-1.fc45
• kwayland-6.8.1-1.fc45
• kwayland-integration-6.8.1-1.fc45
• kweather-26.08.2-1.fc45
• kweathercore-26.08.2-1.fc45
• kwin-6.8.1-2.fc45
• kwordquiz-26.08.2-1.fc45
• kwrited-6.8.1-1.fc45
• layer-shell-qt-6.8.1-1.fc45
• libgravatar-26.08.2-1.fc45
• libkcddb-26.08.2-1.fc45
• libkdcraw-26.08.2-1.fc45
• libkdegames-26.08.2-2.fc45
• libkdepim-26.08.2-1.fc45
• libkeduvocdocument-26.08.2-1.fc45
• libkexiv2-26.08.2-1.fc45
• libkgapi-26.08.2-1.fc45
• libkleo-26.08.2-1.fc45
• libkmahjongg-26.08.2-1.fc45
• libkomparediff2-26.08.2-1.fc45
• libksane-26.08.2-1.fc45
• libkscreen-6.8.1-1.fc45
• libksieve-26.08.2-1.fc45
• libksysguard-6.8.1-1.fc45
• libktorrent-26.08.2-1.fc45
• libplasma-6.8.1-1.fc45
• libquotient-0.9.6.1-2.fc45
• lokalize-26.08.2-1.fc45
• lskat-26.08.2-1.fc45
• mailcommon-26.08.2-1.fc45
• mailimporter-26.08.2-1.fc45
• marble-26.08.2-2.fc45
• markdownpart-26.08.2-1.fc45
• massif-visualizer-26.08.2-1.fc45
• mbox-importer-26.08.2-1.fc45
• merkuro-26.08.2-2.fc45
• messagelib-26.08.2-1.fc45
• mimetreeparser-26.08.2-2.fc45
• minuet-26.08.2-2.fc45
• neochat-26.08.2-2.fc45
• ocean-sound-theme-6.8.1-1.fc45
• okular-26.08.2-2.fc45
• oxygen-sounds-6.8.1-1.fc45
• palapeli-26.08.2-1.fc45
• pam-kwallet-6.8.1-1.fc45
• parley-26.08.2-1.fc45
• picmi-26.08.2-1.fc45
• pimcommon-26.08.2-1.fc45
• pim-data-exporter-26.08.2-1.fc45
• pim-sieve-editor-26.08.2-1.fc45
• plasma5support-6.8.1-1.fc45
• plasma-activities-6.8.1-1.fc45
• plasma-activities-stats-6.8.1-1.fc45
• plasma-bigscreen-6.8.1-1.fc45
• plasma-breeze-6.8.1-1.fc45
• plasma-browser-integration-6.8.1-1.fc45
• plasma-camera-26.08.2-1.fc45
• plasma-desktop-6.8.1-1.fc45
• plasma-dialer-6.8.1-1.fc45
• plasma-discover-6.8.1-1.fc45
• plasma-disks-6.8.1-1.fc45
• plasma-drkonqi-6.8.1-1.fc45
• plasma-firewall-6.8.1-1.fc45
• plasma-integration-6.8.1-1.fc45
• plasma-keyboard-6.8.1-1.fc45
• plasma-login-manager-6.8.1-1.fc45
• plasma-milou-6.8.1-1.fc45
• plasma-mobile-6.8.1-1.fc45
• plasma-nano-6.8.1-1.fc45
• plasma-nm-6.8.1-1.fc45
• plasma-oxygen-6.8.1-1.fc45
• plasma-pa-6.8.1-1.fc45
• plasma-phonebook-26.08.2-2.fc45
• plasma-print-manager-6.8.1-1.fc45
• plasma-sdk-6.8.1-1.fc45
• plasma-settings-26.08.2-2.fc45
• plasma-setup-6.8.1-1.fc45
• plasma-systemmonitor-6.8.1-1.fc45
• plasma-systemsettings-6.8.1-1.fc45
• plasma-thunderbolt-6.8.1-1.fc45
• plasmatube-26.08.2-2.fc45
• plasma-union-6.8.1-1.fc45
• plasma-vault-6.8.1-1.fc45
• plasma-wayland-protocols-1.23.0-1.fc45
• plasma-welcome-6.8.1-1.fc45
• plasma-workspace-6.8.1-3.fc45
• plasma-workspace-wallpapers-6.8.1-1.fc45
• plymouth-kcm-6.8.1-1.fc45
• plymouth-theme-breeze-6.8.1-1.fc45
• polkit-kde-6.8.1-1.fc45
• powerdevil-6.8.1-1.fc45
• poxml-26.08.2-1.fc45
• qmlkonsole-26.08.2-1.fc45
• qqc2-breeze-style-6.8.1-1.fc45
• qrca-26.08.2-2.fc45
• rocs-26.08.2-2.fc45
• sddm-kcm-6.8.1-1.fc45
• signon-kwallet-extension-26.08.2-1.fc45
• skanlite-26.08.2-1.fc45
• skanpage-26.08.2-1.fc45
• skladnik-26.08.2-1.fc45
• spacebar-6.8.1-1.fc45
• spectacle-6.8.1-1.fc45
• step-26.08.2-1.fc45
• svgpart-26.08.2-1.fc45
• sweeper-26.08.2-1.fc45
• tokodon-26.08.2-2.fc45
• umbrello-26.08.2-1.fc45
• xdg-desktop-portal-kde-6.8.1-1.fc45
• yakuake-26.08.2-2.fc45
• zanshin-26.08.2-1.fc45

Update description:

KDE Plasma 6.8.1 + Gear 28.08.2 (And related rebuilds)

• CVE-2026-110236 Arbitrary command execution via crafted folder name

FEDORA-2026-2fd016c93c Packages in this update:

• mupdf-1.27.2-5.fc43

Update description:

fix CVE-2026-112036 (rhbz#2558213)