Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 43 Domoticz Critical Arbitrary Script Exec Advisory 2026-45d8852ca3

Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-45d8852ca3 2026-04-04 00:48:12.438594+00:00 -------------------------------------------------------------------------------- Name : domoticz Product : Fedora 43 Version : 2026.1 Release : 1.fc43 URL : http://www.domoticz.com Summary : Open source Home Automation System Description : Domoticz is a Home Automation System that lets you monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more. Notifications/Alerts can be sent to any mobile device -------------------------------------------------------------------------------- Update Information: Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 25 2026 Michael Cronenworth - 2026.1-1 - New stable release * Sun Mar 22 2026 Bjrn Esser - 2025.2-6 - Rebuild (jsoncpp) * Fri Feb 27 2026 Tom Callaway - 2025.2-5 - rebuild for lua 5.5 * Fri Jan 16 2026 Fedora Release Engineering - 2025.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 2025.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Jan 14 2026 Michael Cronenworth - 2025.2-2 - Rebuilt for Boost 1.90 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2451138 - domoticz-2026.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2451138 [ 2 ] Bug #2451507 - CVE-2026-1001 domoticz: Domoticz: Arbitrary script execution via stored cross-site scripting in web interface [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2451507 [ 3 ] Bug #2451509 - CVE-2026-1001 domoticz: Domoticz: Arbitrary script execution via stored cross-site scripting in web interface [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2451509 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-45d8852ca3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update fixes critical vulnerability in Fedora 43 Domoticz, addressing arbitrary script execution in web interface.. Domoticz Update, Fedora Security, Script Execution Risk, Cross-Site Scripting. . Severity: Critical. LinuxSecurity.com Team

Apr 04, 2026 •Critical Fedora