Fedora 44 yt-dlp Vital Command Injection Patch FEDORA-2023-937e768834
fedora
March 5, 2026
Update to 2026.02.21
Summary
yt-dlp is a command-line program to download videos from many different online
video platforms, such as youtube.com. The project is a fork of youtube-dl with
additional features and fixes.
Update Information:
Update to 2026.02.21. Fixes rhbz#2441709.
Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)
* Sat Feb 21 2026 Dominik 'Rathann' Mierzejewski
Topics Covered
Change Log
* Tue Feb 24 2026 Maxwell G
References
[ 1 ] Bug #2441709 - yt-dlp-2026.02.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2441709
[ 2 ] Bug #2442244 - CVE-2026-26331 yt-dlp: yt-dlp: Arbitrary command injection via maliciously crafted URL when --netrc-cmd is used [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2442244
[ 3 ] Bug #2442427 - [F44 CLONE] CVE-2026-26331 yt-dlp: yt-dlp: Arbitrary command injection via maliciously crafted URL when --netrc-cmd is used [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2442427
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-937e768833' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: yt-dlp
Product: Fedora 44
Version: 2026.02.21
Release: 1.fc44
Summary: A command-line program to download videos from online video platforms
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!