Fedora Security Advisories

• nextcloud-34.0.4-1.fc44

34.0.4 Release

• nextcloud-34.0.4-1.fc45

34.0.4 Release

• suricata-8.0.7-1.fc45

upstream bugfix/security release

• python-streamlink-8.4.0-2.fc43
• python-urllib3-2.8.0-1.fc43

Update python-urllib3 to version 2.8.0, fixing three security issues:

• The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77)
• HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA-vxq7-64xx-v4gw)
• Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g)

• python-streamlink-8.4.0-2.fc44
• python-urllib3-2.8.0-1.fc44

Update python-urllib3 to version 2.8.0, fixing three security issues:

• The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77)
• HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA-vxq7-64xx-v4gw)
• Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g)

• python-quart-trio-0.13.0-1.fc45
• python-streamlink-8.4.0-5.fc45
• python-urllib3-2.8.0-1.fc45

Update python-urllib3 to version 2.8.0, fixing three security issues:

• The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77)
• HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA-vxq7-64xx-v4gw)
• Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g)

• python-streamlink-8.4.0-5.fc46
• python-urllib3-2.8.0-1.fc46

Update python-urllib3 to version 2.8.0, fixing three security issues:

• The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77)
• HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA-vxq7-64xx-v4gw)
• Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g)

• doctl-1.169.0-1.fc44

Update to 1.169.0

• doctl-1.169.0-1.fc45

Update to 1.169.0

• goose-1.45.0-1.el10_3

Update to 1.45.0

• goose-1.45.0-1.el10_2

Update to 1.45.0

• goose-1.45.0-1.el9

Update to 1.45.0

• goose-1.45.0-1.fc43

Update to 1.45.0

• goose-1.45.0-1.fc44

Update to 1.45.0

• libheif-1.23.4-6.fc44

Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.4 .

• Resolves a number of vulnerabilities.
• Splits out the FFmpeg plugin to an optional subpackage to limit main package dependencies.

• lego-5.5.1-1.fc45

Update to 5.5.1

• lego-5.5.1-1.fc44

Update to 5.5.1

• mingw-gstreamer1-1.28.7-1.fc45
• mingw-gstreamer1-plugins-bad-free-1.28.7-1.fc45
• mingw-gstreamer1-plugins-base-1.28.7-1.fc45
• mingw-gstreamer1-plugins-good-1.28.7-1.fc45

Update to gstreamer-1.28.7.

• mingw-gstreamer1-1.28.7-1.fc44
• mingw-gstreamer1-plugins-bad-free-1.28.7-1.fc44
• mingw-gstreamer1-plugins-base-1.28.7-1.fc44
• mingw-gstreamer1-plugins-good-1.28.7-1.fc44

Update to gstreamer-1.28.7.

• assimp-6.0.5-5.fc45

Add fixes for CVE-2026-14610, CVE-2026-19968, CVE-2026-19999, CVE-2026-14604, CVE-2025-15666