MGASA-2026-0594: Updated amule packages fix security vulnerabilities
A security release first: it fixes 15 vulnerabilities reported through GitHub Security Advisories, and 11 of them are also present in aMule 2.3.3. If you still run 2.3.x or any 3.x release, please upgrade. The release is 455 merged PRs on top of 3.1.0, including the 12 advisory fixes merged at release time. Around those fixes: uploads that no longer stall behind a slow disk, new downloads that find sources sooner, an "All" search across eD2k and Kad, chat spam protection everywhere, an appearance setting, connection-state tray icons on Linux, and the Web UI in seven languages. Upgrading is a drop-in, but a few defaults changed for safety. Read https://github.com/amule-org/amule/releases#before-you-upgrade if you drive aMule from a remote GUI, amuleapi, amuleweb or scripts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
mageia/amuleto a version that resolves this vulnerability.Fixed in 3.2.0-1.1.mga10
Event History
Frequently Asked Questions
Which installations should be prioritized for upgrading?
Systems running aMule 2.3.x or any 3.x release should be upgraded. Eleven of the reported vulnerabilities are also present in aMule 2.3.3.
Are there operational considerations before upgrading?
The upgrade is described as drop-in, but some defaults changed for safety. Review the upstream upgrade guidance before upgrading if you use a remote GUI, amuleapi, amuleweb, or automation scripts.