Lector de Feeds

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86145 , CVE-2026-103111 Description
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API). (CVE-2026-86145) PCRE2: out-of-bounds write in JIT matching with large stack allocations. (CVE-2026-103111) References

• https://bugs.mageia.org/show_bug.cgi?id=36377
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4WZRH5FLU3A6ZQIPE6WRM7UV7K6S6UHP/
• https://www.openwall.com/lists/oss-security/2026/09/29/2
• https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
• https://lists.debian.org/debian-security-announce/2026/msg00443.html
• https://www.cve.org/CVERecord?id=CVE-2026-86145
• https://www.cve.org/CVERecord?id=CVE-2026-103111

SRPMS 10/core

• mingw-pcre2-10.49-1.mga10
• pcre2-10.49-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-97023 , CVE-2026-97024 , CVE-2026-97025 , CVE-2026-97026 , CVE-2026-97027 , CVE-2026-97029 Description
Arbitrary file deletion in root context via path traversal in deploy directory export/bin. (CVE-2026-97023) Arbitrary write in root context via path traversal in deploy directory files/etc. (CVE-2026-97024) World-readable oci authentication token in system-helper cache path. (CVE-2026-97025) World-writable temporary child repositories in system-helper cache path. (CVE-2026-97026) Denial of service via unsanitized keys in exported desktop entry / d-bus service files. (CVE-2026-97027) Sandboxed app can signal unsandboxed processes in the same process group. (CVE-2026-97029) References

• https://bugs.mageia.org/show_bug.cgi?id=36401
• https://www.openwall.com/lists/oss-security/2026/09/28/6
• https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf
• https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54
• https://github.com/flatpak/flatpak/security/advisories/GHSA-7rvf-rqr3-43j4
• https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8
• https://github.com/flatpak/flatpak/security/advisories/GHSA-v64f-hrwr-j4vh
• https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2
• https://lists.debian.org/debian-security-announce/2026/msg00437.html
• https://www.cve.org/CVERecord?id=CVE-2026-97023
• https://www.cve.org/CVERecord?id=CVE-2026-97024
• https://www.cve.org/CVERecord?id=CVE-2026-97025
• https://www.cve.org/CVERecord?id=CVE-2026-97026
• https://www.cve.org/CVERecord?id=CVE-2026-97027
• https://www.cve.org/CVERecord?id=CVE-2026-97029

SRPMS 10/core

• flatpak-1.16.6-1.2.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86243 , CVE-2026-86246 , CVE-2026-86247 Description
DoS via TLS handshake. (CVE-2026-86243) Insecure OpenSSL options enabled. (CVE-2026-86246) Client certificate requirements can be down-graded. (CVE-2026-86247) References

• https://bugs.mageia.org/show_bug.cgi?id=36469
• https://www.openwall.com/lists/oss-security/2026/09/23/31
• https://lists.apache.org/thread/8p4jf02w54m22x0cwpq2x53w3ov8o557
• https://www.openwall.com/lists/oss-security/2026/09/23/32
• https://lists.apache.org/thread/dgyvfwb24nbk45ptvlhdyhdhl5o7k5ol
• https://www.openwall.com/lists/oss-security/2026/09/23/33
• https://lists.apache.org/thread/obsson6zhvfg0wsp2bx602l61ltj87r1
• https://www.cve.org/CVERecord?id=CVE-2026-86243
• https://www.cve.org/CVERecord?id=CVE-2026-86246
• https://www.cve.org/CVERecord?id=CVE-2026-86247

SRPMS 10/core

• tomcat-native-1.3.9-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-54634 Description
Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw() in tests/rigctl_parse.c, which writes a NUL byte at buf[buf_len + 1] outside its 200-byte stack buffer, and rig_send_raw() in src/rig.c, which copies reply_len - 1 bytes instead of the actual nbytes received. A remote client can send the CR terminator with a short payload to trigger both flaws in one command under the default no-password configuration. The out-of-bounds write can crash the daemon or corrupt adjacent stack memory, while the oversized copy can return up to 198 bytes of uninitialized stack data to the client. This issue is fixed in version 4.7.2. References

• https://bugs.mageia.org/show_bug.cgi?id=35756
• https://www.cve.org/CVERecord?id=CVE-2026-54634

SRPMS 10/core

• hamlib-4.7.2-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-32239 , CVE-2026-32240 Description
A negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead (CVE-2026-32239). When using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer (CVE-2026-32240). References

• https://bugs.mageia.org/show_bug.cgi?id=36190
• https://ubuntu.com/security/notices/USN-8650-1
• https://github.com/capnproto/capnproto/security/advisories/GHSA-qjx3-pp3m-9jpm
• https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm
• https://www.cve.org/CVERecord?id=CVE-2026-32239
• https://www.cve.org/CVERecord?id=CVE-2026-32240

SRPMS 10/core

• capnproto-1.5.0-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-78136 Description
CHIRP — Arbitrary Code Execution via eval() in Kenwood ITM Driver References

• https://bugs.mageia.org/show_bug.cgi?id=36278
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJ6SIERICON7N75T5BO4GAWZ2WSJTQK4/
• https://github.com/cduram/CHIRP-CodeExecution_via_Malicious_ImageFile
• https://github.com/kk7ds/chirp/commit/39178dbfc4fece083ab9ed20286d6ae3a91a718e
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ON7ELO5JWTMNPI6AGJ5VGCQ54D2YEMA5/
• https://www.cve.org/CVERecord?id=CVE-2026-78136

SRPMS 10/core

• chirp-20260925-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-50811 Description
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates. (CVE-2026-50811) References

• https://bugs.mageia.org/show_bug.cgi?id=35931
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZFL5DU5VYR7IO6AIBJXA3PU262H5MJCS/
• https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1436
• https://ubuntu.com/security/notices/USN-8562-1
• https://www.cve.org/CVERecord?id=CVE-2026-50811

SRPMS 10/tainted

• freetype2-2.14.2-1.1.mga10.tainted

Publication date: 09 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
The updated package brings the support for ARM64 architecture on Linux and MacOS. Moreover, it includes support for 3mf, several bugfixes and improvements. References

• https://bugs.mageia.org/show_bug.cgi?id=36447
• https://www.meshlab.net/#news

SRPMS 10/core

• meshlab-2025.07-1.mga10

Publication date: 08 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-59679 , CVE-2026-44950 Description
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2. (CVE-2026-44950) fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2. (CVE-2026-59679) References

• https://bugs.mageia.org/show_bug.cgi?id=36174
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NP3ZEUVKBUAKXYPBOSJNJAGWTMNRTSSG/
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PTGMTNHE2PKU34GA4TVT54ZYUWSQDO6P/
• https://www.cve.org/CVERecord?id=CVE-2026-59679
• https://www.cve.org/CVERecord?id=CVE-2026-44950

SRPMS 10/core

• libxfont2-2.0.9-1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
nfsdclnts requires python3-pyyaml to work. This update add the missing requirement to nfs-utils References

• https://bugs.mageia.org/show_bug.cgi?id=36335

SRPMS 10/core

• nfs-utils-2.8.3-2.1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
marnav is updated to version 0.14.1. References

• https://bugs.mageia.org/show_bug.cgi?id=36399
• https://github.com/mariokonrad/marnav/releases/tag/v0.14.1

SRPMS 10/core

• marnav-0.14.1-1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
This version 5.14.2 of OpenCPN is a maintenance release of the previous version 5.14.0 as usually such a maintenance release is provided some time after the main release has been published. It brings some corrections and improvements needed after user reports. References

• https://bugs.mageia.org/show_bug.cgi?id=36433
• https://opencpn.org/

SRPMS 10/core

• opencpn-5.14.2-1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
This new version 1.2.35 now allows the use of jack with pipewire in addition to the use with pulseaudio (the previous version 1.2.34 allowed only the use of jack with pulseaudio). References

• https://bugs.mageia.org/show_bug.cgi?id=36434
• https://lsp-plug.in/

SRPMS 10/core

• lsp-plugins-1.2.35-1.mga10

Publication date: 07 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
vokoscreenNG requires the openh264 & gif gstreamer components. We now provide openh264 packages from the noopenh264 sources, packages generated from rust-gst-plugin-gif and update gstreamer1.0-plugins-bad to generate the missing components. Note: gstreamer1.0-openh264 should be installed by hand if you do not have tainted repositories enabled before the update. References

• https://bugs.mageia.org/show_bug.cgi?id=36097
• https://forums.mageia.org/en/viewtopic.php?t=15995

SRPMS 10/core

• rust-gst-plugin-gif-0.14.5-1.1.mga10
• vokoscreenNG-4.8.3-1.1.mga10
• gstreamer1.0-plugins-bad-1.26.11-3.1.mga10

10/tainted

• noopenh264-2.6.0-1.mga10.tainted
• gstreamer1.0-plugins-bad-1.26.11-3.1.mga10.tainted

Publication date: 07 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
The zrythm package has a build id that matches one in the carla package. This prevents both packages from being installed together and causes migrations from Mageia 9 to Mageia 10 to fail if both packages were installed before the migration. This update fixes the reported issue. References

• https://bugs.mageia.org/show_bug.cgi?id=36437

SRPMS 10/core

• zrythm-1.0.0-3.1.mga10

Publication date: 07 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-73067 , CVE-2026-88047 , CVE-2026-88048 , CVE-2026-88049 , CVE-2026-88050 , CVE-2026-88051 , CVE-2026-88052 , CVE-2026-88053 , CVE-2026-88054 Description
This is a security update. It fixes nine vulnerabilities in tesseract, the OCR (text recognition) engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file (.traineddata) or a crafted word-list file. Depending on the specific flaw, this can cause a crash (denial of service) or memory corruption. CVE-2026-73067: out-of-bounds read when loading a crafted word-list file. CVE-2026-73066: out-of-bounds write when loading a crafted recognition model file. CVE-2026-88047: stack buffer overflow when loading a crafted language-normalisation file. CVE-2026-88048: out-of-bounds read/write from a crafted neural-network layer in a recognition model file. CVE-2026-88049: out-of-bounds write from a crafted neural-network layer in a recognition model file. CVE-2026-88050: out-of-bounds write from invalid character-encoding values in a crafted recognition model file. CVE-2026-88051: out-of-bounds write when loading a malformed internal data structure from a crafted recognition model file. CVE-2026-88052: out-of-bounds write when loading a crafted character-set file. CVE-2026-88053: out-of-bounds write when loading a crafted legacy recognition template file. CVE-2026-88054: crash (denial of service) when loading a crafted recognition model with an empty internal network. The tesseract package is updated to version 5.5.3, which on its own fixes CVE-2026-73067 and CVE-2026-73066. The remaining seven issues (CVE-2026-88047 to CVE-2026-88054) are not yet fixed in any upstream release, so nine patches taken from upstream's main development branch are also applied. Reported by Tristan Madani (CVE-2026-88047) and Zhixi "Jace" Sun (CVE-2026-88048 to CVE-2026-88054); see the individual advisories below for full credits, including CVE-2026-73067 and CVE-2026-73066. References

• https://bugs.mageia.org/show_bug.cgi?id=36427
• https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.3
• https://osv.dev/vulnerability/openSUSE-SU-2026:21957-1
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/25OCRCHOE46S5WTJZC25DVGO7KC2KVWO/
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-x3vq-7rr7-5x3h
• https://github.com/tesseract-ocr/tesseract/pull/4581
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-7j76-5rq5-5jg8
• https://github.com/tesseract-ocr/tesseract/pull/4588
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-5j2p-r5vc-q7f3
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-q44c-23p6-5mw6
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-jgq8-pprg-vc68
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-7v9h-3q3m-w68g
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-88qp-4g94-3rf3
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-2hm8-q5c7-c373
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-rphx-x795-5qjv
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-f6h7-cqr4-6fx4
• https://www.cve.org/CVERecord?id=CVE-2026-73067
• https://www.cve.org/CVERecord?id=CVE-2026-88047
• https://www.cve.org/CVERecord?id=CVE-2026-88048
• https://www.cve.org/CVERecord?id=CVE-2026-88049
• https://www.cve.org/CVERecord?id=CVE-2026-88050
• https://www.cve.org/CVERecord?id=CVE-2026-88051
• https://www.cve.org/CVERecord?id=CVE-2026-88052
• https://www.cve.org/CVERecord?id=CVE-2026-88053
• https://www.cve.org/CVERecord?id=CVE-2026-88054

SRPMS 10/core

• tesseract-5.5.3-1.mga10

Publication date: 06 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-55868 , CVE-2026-55869 Description
Encryption State Machine Downgrade. (CVE-2026-55868) KMREQ/KMRSP Stack-Based Buffer Overflow. (CVE-2026-55869) References

• https://bugs.mageia.org/show_bug.cgi?id=36158
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XN3R27AYMZKANUF4IXBPFLBC773HW7LM/
• https://lists.debian.org/debian-security-announce/2026/msg00361.html
• https://github.com/Haivision/srt/security/advisories/GHSA-4mc6-qmpp-g7gw
• https://github.com/Haivision/srt/security/advisories/GHSA-6xg9-784j-24rm
• https://www.cve.org/CVERecord?id=CVE-2026-55868
• https://www.cve.org/CVERecord?id=CVE-2026-55869

SRPMS 10/core

• srt-1.5.4-2.1.mga10

Publication date: 06 Oct 2026
Type: security
Affected Mageia releases : 10
Description
Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address could not be parsed. TROVE-2026-050 References

• https://bugs.mageia.org/show_bug.cgi?id=36365
• https://www.openwall.com/lists/oss-security/2026/09/24/2
• https://lists.debian.org/debian-security-announce/2026/msg00445.html

SRPMS 10/core

• tor-0.4.9.13-1.mga10