Lector de Feeds

Publication date: 10 Aug 2026
Type: security
Affected Mageia releases : 10
Description Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. (CVE-2026-10723) Key Record using PRIVATEDNS algorithm may lead to unexpected exit. (CVE-2026-10822) Potential wildcard CNAME RPZ policy bypass. (CVE-2026-11331) Unnecessary validation of DNSSEC signed records. (CVE-2026-11605) Cache poisoning possible with label count discrepancy, RRSIG, and wildcards. (CVE-2026-11721) Record ordering based unexpected exit with CNAME or DNAME. (CVE-2026-12617) Unexpected exit in certain situations with NSEC and NSEC3 both present. (CVE-2026-13204) DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field. (CVE-2026-13321) References

• https://bugs.mageia.org/show_bug.cgi?id=36003
• https://www.openwall.com/lists/oss-security/2026/07/22/8
• https://kb.isc.org/docs/cve-2026-10723
• https://kb.isc.org/docs/cve-2026-10822
• https://kb.isc.org/docs/cve-2026-11331
• https://kb.isc.org/docs/cve-2026-11605
• https://kb.isc.org/docs/cve-2026-11622
• https://kb.isc.org/docs/cve-2026-11721
• https://kb.isc.org/docs/cve-2026-12617
• https://kb.isc.org/docs/cve-2026-13204
• https://kb.isc.org/docs/cve-2026-13321

SRPMS 10/core

• bind-9.20.26-1.mga10

Publication date: 10 Aug 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-17544 , CVE-2026-9672 , CVE-2026-17543 , CVE-2026-7260 Description Updated php 8.5 packages fix some security vulnerabilities. For details see the references. References

• https://bugs.mageia.org/show_bug.cgi?id=36036
• https://www.php.net/ChangeLog-8.php#8.5.9
• https://www.cve.org/CVERecord?id=CVE-2026-17544
• https://www.cve.org/CVERecord?id=CVE-2026-9672
• https://www.cve.org/CVERecord?id=CVE-2026-17543
• https://www.cve.org/CVERecord?id=CVE-2026-7260

SRPMS 10/core

• php8.5-8.5.9-1.mga10

Publication date: 10 Aug 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-17544 , CVE-2026-9672 , CVE-2026-17543 , CVE-2026-7260 Description The updated php 8.4 packages fix some security vulnerabilities. See the references for more information. References

• https://bugs.mageia.org/show_bug.cgi?id=36037
• https://www.php.net/ChangeLog-8.php#8.4.24
• https://www.cve.org/CVERecord?id=CVE-2026-17544
• https://www.cve.org/CVERecord?id=CVE-2026-9672
• https://www.cve.org/CVERecord?id=CVE-2026-17543
• https://www.cve.org/CVERecord?id=CVE-2026-7260

SRPMS 10/core

• php8.4-8.4.24-1.1.mga10

Publication date: 10 Aug 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-48977 Description Arbitrary memory write with crafted Ventana BIF file. (CVE-2026-48977) References

• https://bugs.mageia.org/show_bug.cgi?id=35719
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LT3YC2CS4XTDLRWSH72YZE3EJ6BQCTJ/
• https://www.cve.org/CVERecord?id=CVE-2026-48977

SRPMS 10/core

• openslide-4.0.0-1.1.mga10

Publication date: 10 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description This is rawtherapee version 5.13, the latest from upstream. It is a bugfix and features release. References

• https://bugs.mageia.org/show_bug.cgi?id=36025

SRPMS 10/core

• rawtherapee-5.13-1.mga10

Publication date: 10 Aug 2026
Type: bugfix
Affected Mageia releases : 10
Description Upstream ported RemoteBox to Gtk3 long ago, but we still let the package depend on Gtk2. This update fixes the issue. References

• https://bugs.mageia.org/show_bug.cgi?id=36022

SRPMS 10/core

• remotebox-3.7-1.1.mga10

Publication date: 10 Aug 2026
Type: bugfix
Affected Mageia releases : 9
Description mock chroots for mageia 10 still are using the cauldron configuration and don't produce rpm files for mageia 10. This update fixes the reported issue. References

• https://bugs.mageia.org/show_bug.cgi?id=35939

SRPMS 9/core

• mock-core-configs-39.1-2.4.mga9
• mock-mageia-configs-9-1.2.mga9