Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Fedora 43 python-streamlink Critical Local File Read Fix CVE-2026-44353

fedora
Calendar Grey July 4, 2026
Dist Fedora Esm H88
Critical security fixed for Python Streamlink's local file access issue in Fedora 43. Update advised.
streamlink 8.4.0 (2026-05-06) SECURITY: fixed arbitrary local file read via file:// URI in HLS and DASH (CVE-2026-44353 / GHSA-hgqw-6m45-hw5f) Added: --stream-passthrough-encrypted...

Summary

Streamlink is a command-line utility that pipes video streams from various

services into a video player, such as VLC. The main purpose of Streamlink is to

allow the user to avoid buggy and CPU heavy flash plugins but still be able to

enjoy various streamed content. There is also an API available for developers

who want access to the video stream data. This project was forked from

Livestreamer, which is no longer maintained.

Update Information:

streamlink 8.4.0 (2026-05-06) SECURITY: fixed arbitrary local file read via file:// URI in HLS and DASH (CVE-2026-44353 / GHSA-hgqw-6m45-hw5f) Added: --stream-passthrough-encrypted for passing through encrypted HLS/DASH segments to the output stream without any checks (#6896) Fixed: --interface selection by name on macOS (#6908) Fixed: --interface not being applied to adapters mounted after session init (#6915) Updated plugins: goltelevision: rewritten and fixed plugin (#6916) twitcasting: improved ad segment filtering (#6910) Full changelog streamlink 8.3.0 (2026-04-10) Added: support for choosing the --interface by name on non-Windows systems, with optional prefixes, similar to curl (#6862) Added: support for also checking stream segments in HLSStream.parse_variant_playlist() by setting check_streams="segments" (#6878) Fixed: stdout/stderr streams in ProcessOutput not being fully line-buffered (#6868) Updated plugins: cdnbg: rewritten and fixed plugin (#6890) ...

Topics%20covered

Topics Covered

security advisory fedora critical file read arbitrary read streamlink

Change Log

* Thu Jun 25 2026 Mohamed El Morabity - 8.4.0-1 - Update to 8.4.0

References


[ 1 ] Bug #2457332 - python-streamlink-8.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2457332 [ 2 ] Bug #2458672 - python-streamlink fails to build with Python 3.15: test_help_color: TypeError: TestPrint._color..() got an unexpected keyword argument 'file' https://bugzilla.redhat.com/show_bug.cgi?id=2458672

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4d6aae2d33' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-streamlink
Product: Fedora 43
Version: 8.4.0
Release: 1.fc43
URL: https://streamlink.github.io
Summary: Python library for extracting streams from various websites

Topics%20covered

Topics Covered

security advisory fedora critical file read arbitrary read streamlink

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here