Lector de Feeds

Publication date: 21 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-72712 Description
Denial of Service via Zero-Length TCP Option Packet. (CVE-2026-72712) References

• https://bugs.mageia.org/show_bug.cgi?id=36129
• https://www.openwall.com/lists/oss-security/2026/07/29/4
• https://github.com/nmap/nmap/issues/3368
• https://www.vulncheck.com/advisories/nmap-denial-of-service-via-zero-length-tcp-option-packet
• https://www.cve.org/CVERecord?id=CVE-2026-72712

SRPMS 10/core

• nmap-7.98-1.2.mga10

9/core

• nmap-7.95-1.2.mga9

Publication date: 21 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
Description
Out-of-bounds Access in libvterm Resize Handling in Vim < 9.2.1013 Integer Overflow in Undo File Entry Size Check in Vim < v9.2.1014 && Vim >= v8.1.0688 References

• https://bugs.mageia.org/show_bug.cgi?id=36204
• https://www.openwall.com/lists/oss-security/2026/08/26/17
• https://www.openwall.com/lists/oss-security/2026/08/26/18
• https://github.com/vim/vim/security/advisories/GHSA-vfc7-mhvm-gjp8
• https://github.com/vim/vim/security/advisories/GHSA-cvc5-p4x9-3f9f

SRPMS 10/core

• vim-9.2.1054-1.mga10

9/core

• vim-9.2.1054-1.mga9

Publication date: 21 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-86145 Description
Out-of-bounds write in pcre2_dfa_match() with recursive patterns under a low heap limit (CVE-2026-86145). References

• https://bugs.mageia.org/show_bug.cgi?id=36263
• https://www.openwall.com/lists/oss-security/2026/09/04/7
• https://www.openwall.com/lists/oss-security/2026/09/05/3
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9
• https://www.cve.org/CVERecord?id=CVE-2026-86145

SRPMS 10/core

• pcre2-10.48-1.mga10

9/core

• pcre2-10.48-1.mga9

Publication date: 21 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
The conda version we had was not ready for Python 3.13. This update allows it to be compatible, with updates of msgpack and pluggy too. References

• https://bugs.mageia.org/show_bug.cgi?id=36305
• https://github.com/conda/conda/issues/14439

SRPMS 10/core

• conda-26.5.3-1.mga10
• python-msgpack-1.2.2-1.mga10
• python-pluggy-1.6.0-1.mga10