[SECURITY] Fedora 43 Update: python-streamlink-8.4.0-2.fc43

Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC. The main purpose of Streamlink is to allow the user to avoid buggy and CPU heavy flash plugins but still be able to enjoy various streamed content. There is also an API available...

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

SummaryHTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handlingunchanged from requests.Session. requests does not check for scheme downgrades orcross-protocol transitions when it follows a redirect, so any https request Streamlink makes canbe redirected by the remote...

PYSEC-2026-4172 Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Summary HTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handling unchanged from requests.Session. requests does not check for scheme downgrades or cross-protocol transitions when it follows a redirect, so any https request Streamlink makes can be redirected by the...

liveproxy (>=0.0.1, <=0.1.1), pccold (>=0.12.0, <=0.32.0) potentially affected by CVE-2026-92164 via streamlink (0.14.2)

streamlink PYPI version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - liveproxy =0.0.1, =0.12.0, =0.32.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.1.0) potentially affected by CVE-2026-92164 via streamlink (1.5.0)

streamlink PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.1.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

streamkeeper (>=1.1.0, <=2.0.1) potentially affected by CVE-2026-92164 via streamlink (1.7.0)

streamlink PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - streamkeeper =1.1.0, =2.0.1 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.2.0) potentially affected by CVE-2026-92164 via streamlink (2.1.2)

streamlink PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.2.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

mlbv (>=0.0.18, <=0.0.19), streamlinkutils (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2026-92164 via streamlink (2.4.0)

streamlink PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - mlbv =0.0.18, =0.0.1, =0.0.2 - tg-autoposter 2.3.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

offstream (>=1.0.0, <=1.0.2), tg-autoposter (>=2.4.0, <=2.4.1) potentially affected by CVE-2026-92164 via streamlink (3.0.3)

streamlink PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - offstream =1.0.0, =2.4.0, =2.4.1 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

offstream (1.0.3) potentially affected by CVE-2026-92164 via streamlink (3.1.1)

streamlink PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - offstream 1.0.3 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.4.2) potentially affected by CVE-2026-92164 via streamlink (3.2.0)

streamlink PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.2 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.4.3) potentially affected by CVE-2026-92164 via streamlink (4.0.0)

streamlink PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.3 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (2.4.4) potentially affected by CVE-2026-92164 via streamlink (4.0.1)

streamlink PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.4 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

gridplayer (0.3.0), tg-autoposter (>=3.0.0, <=3.1.0) potentially affected by CVE-2026-92164 via streamlink (4.1.0)

streamlink PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.3.0 - tg-autoposter =3.0.0, =3.1.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-92164 via streamlink (4.2.0)

streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (>=3.2.0, <=3.4.0b2) potentially affected by CVE-2026-92164 via streamlink (4.3.0)

streamlink PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter =3.2.0, =3.4.0b2 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

tg-autoposter (3.4.0) potentially affected by CVE-2026-92164 via streamlink (5.1.2)

streamlink PYPI version 5.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 3.4.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

gridplayer (>=0.5.0, <=0.5.1), holodex-cli (0.1.5) potentially affected by CVE-2026-92164 via streamlink (5.5.1)

streamlink PYPI version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.5.0, =0.5.1 - holodex-cli 0.1.5 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

gridplayer (0.5.2) potentially affected by CVE-2026-92164 via streamlink (6.1.0)

streamlink PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.2 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

gridplayer (0.5.3) potentially affected by CVE-2026-92164 via streamlink (6.2.1)

streamlink PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.3 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...