Lector de Feeds

Publication date: 22 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-82474 , CVE-2026-96512 Description
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. (CVE-2026-82474) tz environment variable allows bypass of notbefore/notafter time-based authorization. (CVE-2026-96512) References

• https://bugs.mageia.org/show_bug.cgi?id=36362
• https://ubuntu.com/security/notices/USN-8803-1
• https://www.openwall.com/lists/oss-security/2026/09/24/4
• https://access.redhat.com/security/cve/CVE-2026-96512
• https://bugzilla.redhat.com/show_bug.cgi?id=2539327
• https://www.cve.org/CVERecord?id=CVE-2026-82474
• https://www.cve.org/CVERecord?id=CVE-2026-96512

SRPMS 10/core

• sudo-1.9.17p1-2.1.mga10

Publication date: 22 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-109618 , CVE-2026-109619 Description
Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible. References

• https://bugs.mageia.org/show_bug.cgi?id=36558
• https://www.php.net/archive/2026.php#2026-10-21-5
• https://www.cve.org/CVERecord?id=CVE-2026-109618
• https://www.cve.org/CVERecord?id=CVE-2026-109619

SRPMS 10/core

• php8.4-8.4.27-1.1.mga10
• php8.5-8.5.12-1.mga10