Lector de Feeds

Publication date: 06 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-4897 Description Denial of service via unbounded input processing through standard input. (CVE-2026-4897) References

• https://bugs.mageia.org/show_bug.cgi?id=35303
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOQZ5PSNKYLZPW6FHB2MTGHOYDTRJHLV/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4897

SRPMS 9/core

• polkit-122-2.1.mga9

Publication date: 06 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-34743 Description Buffer overflow in lzma_index_append(). (CVE-2026-34743) References

• https://bugs.mageia.org/show_bug.cgi?id=35307
• https://www.openwall.com/lists/oss-security/2026/03/31/13
• https://tukaani.org/xz/index-append-overflow.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34743

SRPMS 9/core

• xz-5.4.3-1.2.mga9

Publication date: 06 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-34982 , CVE-2026-35177 Description Vim modeline bypass via various options affects Vim < 9.2.0276. (CVE-2026-34982) Path traversal issue with zip.vim in Vim < v9.2.0280. (CVE-2026-35177) References

• https://bugs.mageia.org/show_bug.cgi?id=35308
• https://www.openwall.com/lists/oss-security/2026/03/31/14
• https://www.openwall.com/lists/oss-security/2026/04/01/1
• https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9
• https://www.openwall.com/lists/oss-security/2026/04/01/4
• https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34982
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35177

SRPMS 9/core

• vim-9.2.280-1.mga9

Publication date: 06 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-33230 Description nltk Vulnerable to Cross-site Scripting. (CVE-2026-33230) References

• https://bugs.mageia.org/show_bug.cgi?id=35314
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/Z36Q44HZY76RE7YZX5B55777UQB6MPEI/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33230

SRPMS 9/core

• python-nltk-3.9.4-1.mga9