Lector de Feeds

Publication date: 29 Aug 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-62383 , CVE-2026-62384 , CVE-2026-62385 , CVE-2026-62388 , CVE-2026-63311 , CVE-2026-63312 , CVE-2026-63315 , CVE-2026-71513 , CVE-2026-71514 , CVE-2026-71518 , CVE-2026-78680 , CVE-2026-78681 , CVE-2026-78682 , CVE-2026-78683 , CVE-2026-79657 , CVE-2026-79674 , CVE-2026-79675 , CVE-2026-79676 Description
Updated packages fix security vulnerabilities. Please see the links. References

• https://bugs.mageia.org/show_bug.cgi?id=36186
• https://github.com/nltk/nltk/releases#release-v3.10.0
• https://github.com/nltk/nltk/releases#release-v3.10.2
• https://github.com/nltk/nltk/releases#release-v3.10.3
• https://www.cve.org/CVERecord?id=CVE-2026-62383
• https://www.cve.org/CVERecord?id=CVE-2026-62384
• https://www.cve.org/CVERecord?id=CVE-2026-62385
• https://www.cve.org/CVERecord?id=CVE-2026-62388
• https://www.cve.org/CVERecord?id=CVE-2026-63311
• https://www.cve.org/CVERecord?id=CVE-2026-63312
• https://www.cve.org/CVERecord?id=CVE-2026-63315
• https://www.cve.org/CVERecord?id=CVE-2026-71513
• https://www.cve.org/CVERecord?id=CVE-2026-71514
• https://www.cve.org/CVERecord?id=CVE-2026-71518
• https://www.cve.org/CVERecord?id=CVE-2026-78680
• https://www.cve.org/CVERecord?id=CVE-2026-78681
• https://www.cve.org/CVERecord?id=CVE-2026-78682
• https://www.cve.org/CVERecord?id=CVE-2026-78683
• https://www.cve.org/CVERecord?id=CVE-2026-79657
• https://www.cve.org/CVERecord?id=CVE-2026-79674
• https://www.cve.org/CVERecord?id=CVE-2026-79675
• https://www.cve.org/CVERecord?id=CVE-2026-79676

SRPMS 10/core

• python-nltk-3.10.3-1.mga10

9/core

• python-nltk-3.10.3-1.mga9

Publication date: 27 Aug 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-15307 , CVE-2026-15337 , CVE-2026-15830 , CVE-2026-15920 Description
CVE-2026-15307: Server-side file-write and request forgery via spatial lookups CVE-2026-15337: Potential denial-of-service vulnerability in `check_for_language()` CVE-2026-15830: Potential denial-of-service vulnerability via nested geometry collections CVE-2026-15920: Potential cross-site scripting via `URLField` values in the admin References

• https://bugs.mageia.org/show_bug.cgi?id=36132
• https://www.openwall.com/lists/oss-security/2026/08/04/6
• https://docs.djangoproject.com/en/dev/releases/5.2.17/
• https://www.cve.org/CVERecord?id=CVE-2026-15307
• https://www.cve.org/CVERecord?id=CVE-2026-15337
• https://www.cve.org/CVERecord?id=CVE-2026-15830
• https://www.cve.org/CVERecord?id=CVE-2026-15920

SRPMS 10/core

• python-django-5.2.17-1.mga10

Publication date: 27 Aug 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2025-59529 , CVE-2026-24401 , CVE-2026-34933 Description
Simple protocol server ignores accepts unlimited connections and logs failures without limit. (CVE-2025-59529) Avahi has Uncontrolled Recursion in lookup_handle_cname function. (CVE-2026-24401) Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon. (CVE-2026-34933) References

• https://bugs.mageia.org/show_bug.cgi?id=35044
• https://www.openwall.com/lists/oss-security/2025/12/19/1
• https://www.openwall.com/lists/oss-security/2026/04/11/9
• https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LK4OWC4GTD6XELDD5SALQ5NAKJF2JEJ3/
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QRADPW6Z7LALOMFKDKQVKGWAXCKCS226/
• https://www.cve.org/CVERecord?id=CVE-2025-59529
• https://www.cve.org/CVERecord?id=CVE-2026-24401
• https://www.cve.org/CVERecord?id=CVE-2026-34933

SRPMS 10/core

• avahi-0.8-18.1.mga10

9/core

• avahi-0.8-10.4.mga9

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10 , 9
Description
YouTube videos are no longer loaded and instead terminated with error 'forbidden'. This update fixes the reported issue. References

• https://bugs.mageia.org/show_bug.cgi?id=36119
• https://github.com/yt-dlp/yt-dlp/releases/tag/2026.08.19
• https://github.com/yt-dlp/yt-dlp/releases/tag/2026.07.04

SRPMS 10/core

• yt-dlp-2026.08.19-1.1.mga10

9/core

• yt-dlp-2026.08.19-1.1.mga9

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
Drop the unnecessary fs-uae-arcade build and use only the fs-uae-launcher arcade mode. This update preserves the user install and launching procedure. References

• https://bugs.mageia.org/show_bug.cgi?id=36120

SRPMS 10/core

• fs-uae-3.2.35-2.1.mga10

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
This new version allows easily adding 20 French national radio stations that are no longer provided by Tunein. References

• https://bugs.mageia.org/show_bug.cgi?id=36116

SRPMS 10/core

• guayadeque-0.7.6-1.mga10

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
This release should fix the errors in starting the app due to missing files in python wheels built directly from source, improving the quitting process of the app, and silencing some Qt warnings. References

• https://bugs.mageia.org/show_bug.cgi?id=36115

SRPMS 10/core

• mnemosyne-2.11-3.2.mga10

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
The last update of opencpn to version 5.14.0 in core/updates was supposed to obsolete and remove one of its plugins (opencpn-squiddio-plugin) which caused a core dump for opencpn if it were present and activated. This update fixes the reported behaviour. References

• https://bugs.mageia.org/show_bug.cgi?id=36112

SRPMS 10/core

• opencpn-5.14.0-2.mga10

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
Fix a missing dependency on the "proj" database causing a segmentation fault. References

• https://bugs.mageia.org/show_bug.cgi?id=36109

SRPMS 10/core

• viking-1.11-2.1.mga10

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
Since serd has been updated, sord, sratom, suil, lilv and lv2 needed to be rebuilt. References

• https://bugs.mageia.org/show_bug.cgi?id=36107
• https://drobilla.net/

SRPMS 10/core

• serd-0.32.10-1.mga10
• sord-0.16.22-2.mga10
• sratom-0.6.22-2.mga10
• suil-0.10.26-4.mga10
• lilv-0.26.4-2.mga10
• lv2-1.18.10-6.mga10

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
New versions brings bugs fixed by upstream. References

• https://bugs.mageia.org/show_bug.cgi?id=36104

SRPMS 10/nonfree

• opencpn-o-charts-plugin-2.1.19-1.mga10.nonfree
• opencpn-s63-plugin-1.50.0.0-1.mga10.nonfree

Publication date: 27 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description
php-imagick and php-gmagick modules should not be allowed to be installed together. This update fixes the reported issue. References

• https://bugs.mageia.org/show_bug.cgi?id=36103

SRPMS 10/core

• php8.4-gmagick-2.0.6-0.RC1.15.1.mga10
• php8.5-gmagick-2.0.6-0.RC1.1.1.mga10
• php8.4-imagick-3.8.1-2.1.mga10
• php8.5-imagick-3.8.1-1.1.mga10