Lector de Feeds

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-88812 , CVE-2026-93515 , CVE-2026-93516 , CVE-2026-93517 , CVE-2026-93518 , CVE-2026-93519 , CVE-2026-93520 , CVE-2026-93521 , CVE-2026-93522 , CVE-2026-93523 , CVE-2026-93524 , CVE-2026-93536 Description
XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812) Present Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515) XInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516) GLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517) XKB ResizeKeyType Numeric Truncation. (CVE-2026-93518) XFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519) XKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520) RandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521) Glamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522) XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write. (CVE-2026-93523) XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read. (CVE-2026-93524) GestureBuildSprite Use-After-Free. (CVE-2026-93536) References

• https://bugs.mageia.org/show_bug.cgi?id=36467
• https://www.openwall.com/lists/oss-security/2026/10/07/23
• https://bugs.mageia.org/show_bug.cgi?id=36488
• https://www.cve.org/CVERecord?id=CVE-2026-88812
• https://www.cve.org/CVERecord?id=CVE-2026-93515
• https://www.cve.org/CVERecord?id=CVE-2026-93516
• https://www.cve.org/CVERecord?id=CVE-2026-93517
• https://www.cve.org/CVERecord?id=CVE-2026-93518
• https://www.cve.org/CVERecord?id=CVE-2026-93519
• https://www.cve.org/CVERecord?id=CVE-2026-93520
• https://www.cve.org/CVERecord?id=CVE-2026-93521
• https://www.cve.org/CVERecord?id=CVE-2026-93522
• https://www.cve.org/CVERecord?id=CVE-2026-93523
• https://www.cve.org/CVERecord?id=CVE-2026-93524
• https://www.cve.org/CVERecord?id=CVE-2026-93536

SRPMS 10/core

• x11-server-21.1.25-2.mga10
• x11-server-xwayland-24.1.14-1.mga10
• tigervnc-1.15.0-7.3.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94286 Description
Out-of-bounds read in libXtst's RECORD reply parser. (CVE-2026-94286) References

• https://bugs.mageia.org/show_bug.cgi?id=36451
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QZFYBLNVDL6SO35IRJEHPL6F5QAKZ6GB/
• https://www.cve.org/CVERecord?id=CVE-2026-94286

SRPMS 10/core

• libxtst-1.2.5-2.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94287 Description
Denial of service via unsigned underflow in libXpm's write path. (CVE-2026-94287) References

• https://bugs.mageia.org/show_bug.cgi?id=36450
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/K7VZ2AXP776DE3BBHUU44LSZH4BNWXRF/
• https://ubuntu.com/security/notices/USN-8862-1
• https://www.cve.org/CVERecord?id=CVE-2026-94287

SRPMS 10/core

• libxpm-3.5.19-1.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-93541 , CVE-2026-93542 , CVE-2026-93543 , CVE-2026-93544 , CVE-2026-93545 , CVE-2026-94281 , CVE-2026-94282 Description
Out-of-bounds read in libXi's XQueryDeviceState(). (CVE-2026-93541) Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes(). (CVE-2026-93542) Out-of-bounds read in libXi's XI2 class parser. (CVE-2026-93543) Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing. (CVE-2026-93544) Out-of-bounds read in libXi's XListInputDevices(). (CVE-2026-93545) Out-of-bounds read in libXi's XListInputDevices() class parsing. (CVE-2026-94281) Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion. (CVE-2026-94282) References

• https://bugs.mageia.org/show_bug.cgi?id=36449
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2JXZPB52ROWMGP2VLGNYLYMGSTZQNEIA/
• https://www.cve.org/CVERecord?id=CVE-2026-93541
• https://www.cve.org/CVERecord?id=CVE-2026-93542
• https://www.cve.org/CVERecord?id=CVE-2026-93543
• https://www.cve.org/CVERecord?id=CVE-2026-93544
• https://www.cve.org/CVERecord?id=CVE-2026-93545
• https://www.cve.org/CVERecord?id=CVE-2026-94281
• https://www.cve.org/CVERecord?id=CVE-2026-94282

SRPMS 10/core

• libxi-1.8.2-2.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-106564 , CVE-2026-106565 , CVE-2026-106566 , CVE-2026-106567 , CVE-2026-106568 , CVE-2026-106569 , CVE-2026-106570 Description
Please see the references. References

• https://bugs.mageia.org/show_bug.cgi?id=36412
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r
• https://www.cve.org/CVERecord?id=CVE-2026-106564
• https://www.cve.org/CVERecord?id=CVE-2026-106565
• https://www.cve.org/CVERecord?id=CVE-2026-106566
• https://www.cve.org/CVERecord?id=CVE-2026-106567
• https://www.cve.org/CVERecord?id=CVE-2026-106568
• https://www.cve.org/CVERecord?id=CVE-2026-106569
• https://www.cve.org/CVERecord?id=CVE-2026-106570

SRPMS 10/core

• imagemagick-7.1.2.32-1.mga10

10/tainted

• imagemagick-7.1.2.32-1.mga10.tainted

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-73515 Description
PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. (CVE-2026-73515) References

• https://bugs.mageia.org/show_bug.cgi?id=36406
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73KG56KPJQTU3M7K3HOTNQUAINTCIRDD/
• https://www.cve.org/CVERecord?id=CVE-2026-73515

SRPMS 10/core

• postgis-3.6.4-1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-110249 , CVE-2026-109704 , CVE-2026-109705 , CVE-2026-109706 , CVE-2026-109707 , CVE-2026-109708 , CVE-2026-109709 , CVE-2026-109710 , CVE-2026-109711 , CVE-2026-109712 , CVE-2026-109713 , CVE-2026-109715 , CVE-2026-109716 , CVE-2026-109717 , CVE-2026-109718 , CVE-2026-109719 , CVE-2026-109720 , CVE-2026-109721 , CVE-2026-109722 , CVE-2026-109723 , CVE-2026-109724 , CVE-2026-109725 , CVE-2026-109726 , CVE-2026-109727 , CVE-2026-109728 , CVE-2026-109729 , CVE-2026-109730 , CVE-2026-109731 , CVE-2026-109732 , CVE-2026-109733 , CVE-2026-109734 , CVE-2026-109736 , CVE-2026-109737 , CVE-2026-109738 , CVE-2026-109740 , CVE-2026-109741 , CVE-2026-109742 , CVE-2026-109743 , CVE-2026-109744 , CVE-2026-109745 , CVE-2026-109751 , CVE-2026-109752 , CVE-2026-109753 , CVE-2026-109754 , CVE-2026-109756 , CVE-2026-109757 , CVE-2026-109759 , CVE-2026-109760 , CVE-2026-109762 , CVE-2026-109763 , CVE-2026-109764 , CVE-2026-109765 , CVE-2026-109766 , CVE-2026-109767 , CVE-2026-109770 , CVE-2026-109775 , CVE-2026-109776 , CVE-2026-109777 , CVE-2026-109778 , CVE-2026-109781 , CVE-2026-109782 , CVE-2026-109783 Description
Denial-of-service in the Exchange email component. (CVE-2026-110249) Privilege escalation in the Application Update component. (CVE-2026-109704) Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. (CVE-2026-109705) Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706) Sandbox escape due to use-after-free in the Networking component. (CVE-2026-109707) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-109708) Information disclosure, privilege escalation in the Security: Process Sandboxing component. (CVE-2026-109709) Use-after-free in the Graphics: Text component. (CVE-2026-109710) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711) Sandbox escape due to uninitialized memory in the Graphics component. (CVE-2026-109712) Use-after-free in the Crash Reporting component. (CVE-2026-109713) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109715) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109716) Use-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-109717) Use-after-free in the XML component. (CVE-2026-109718) Race condition, use-after-free in the Graphics: CanvasWebGL component. (CVE-2026-109719) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-109720) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-109721) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109722) Integer overflow in the Layout: Text and Fonts component. (CVE-2026-109723) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109724) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109725) Use-after-free in the SVG component. (CVE-2026-109726) Use-after-free in the Audio/Video component. (CVE-2026-109727) Use-after-free in the DOM: Animation component. (CVE-2026-109728) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-109729) Integer overflow in the Graphics component. (CVE-2026-109730) Incorrect boundary conditions in the Graphics: Canvas2D component. (CVE-2026-109731) Use-after-free in the DOM: Streams component. (CVE-2026-109732) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109733) Mitigation bypass in the DOM: Security component. (CVE-2026-109734) Frame poisoning in the Layout component. (CVE-2026-109736) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109737) Use-after-free in the Audio/Video: Playback component. (CVE-2026-109738) Use-after-free in the Storage: Bucket File System component. (CVE-2026-109741) Information disclosure in the PDF Viewer component. (CVE-2026-109742) Privilege escalation in the Panning and Zooming component. (CVE-2026-109743) Other issue in the DOM: File component. (CVE-2026-109744) Sandbox escape due to uninitialized memory in the DOM: Web Serial component. (CVE-2026-109745) Mitigation bypass in the File Handling component. (CVE-2026-109782) Information disclosure in the Networking component. (CVE-2026-109751) Use-after-free in the DOM: Workers component. (CVE-2026-109752) Incorrect boundary conditions in the Layout component. (CVE-2026-109753) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-109754) Privilege escalation in the DOM: Navigation component. (CVE-2026-109756) Sandbox escape due to race condition in the Networking component. (CVE-2026-109757) Site isolation issue in the Networking component. (CVE-2026-109759) Mitigation bypass in the Networking: HTTP component. (CVE-2026-109760) Incorrect boundary conditions in the SVG component. (CVE-2026-109762) Mitigation bypass in the File Handling component. (CVE-2026-109763) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109764) Race condition, use-after-free in the Graphics: Text component. (CVE-2026-109765) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109766) Information disclosure in the Networking component. (CVE-2026-109767) Mitigation bypass in the File Handling component. (CVE-2026-109783) Spoofing issue in the DOM: Web Serial component. (CVE-2026-109770) Denial-of-service in the WebRTC component. (CVE-2026-109775) Race condition in the XPCOM component. (CVE-2026-109776) Information disclosure in the Storage: IndexedDB component. (CVE-2026-109777) Privilege escalation in the WebExtensions component. (CVE-2026-109778) Denial-of-service in the Printing: Output component. (CVE-2026-109781) References

• https://bugs.mageia.org/show_bug.cgi?id=36509
• https://www.thunderbird.net/en-US/thunderbird/153.5.0esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/
• https://www.cve.org/CVERecord?id=CVE-2026-110249
• https://www.cve.org/CVERecord?id=CVE-2026-109704
• https://www.cve.org/CVERecord?id=CVE-2026-109705
• https://www.cve.org/CVERecord?id=CVE-2026-109706
• https://www.cve.org/CVERecord?id=CVE-2026-109707
• https://www.cve.org/CVERecord?id=CVE-2026-109708
• https://www.cve.org/CVERecord?id=CVE-2026-109709
• https://www.cve.org/CVERecord?id=CVE-2026-109710
• https://www.cve.org/CVERecord?id=CVE-2026-109711
• https://www.cve.org/CVERecord?id=CVE-2026-109712
• https://www.cve.org/CVERecord?id=CVE-2026-109713
• https://www.cve.org/CVERecord?id=CVE-2026-109715
• https://www.cve.org/CVERecord?id=CVE-2026-109716
• https://www.cve.org/CVERecord?id=CVE-2026-109717
• https://www.cve.org/CVERecord?id=CVE-2026-109718
• https://www.cve.org/CVERecord?id=CVE-2026-109719
• https://www.cve.org/CVERecord?id=CVE-2026-109720
• https://www.cve.org/CVERecord?id=CVE-2026-109721
• https://www.cve.org/CVERecord?id=CVE-2026-109722
• https://www.cve.org/CVERecord?id=CVE-2026-109723
• https://www.cve.org/CVERecord?id=CVE-2026-109724
• https://www.cve.org/CVERecord?id=CVE-2026-109725
• https://www.cve.org/CVERecord?id=CVE-2026-109726
• https://www.cve.org/CVERecord?id=CVE-2026-109727
• https://www.cve.org/CVERecord?id=CVE-2026-109728
• https://www.cve.org/CVERecord?id=CVE-2026-109729
• https://www.cve.org/CVERecord?id=CVE-2026-109730
• https://www.cve.org/CVERecord?id=CVE-2026-109731
• https://www.cve.org/CVERecord?id=CVE-2026-109732
• https://www.cve.org/CVERecord?id=CVE-2026-109733
• https://www.cve.org/CVERecord?id=CVE-2026-109734
• https://www.cve.org/CVERecord?id=CVE-2026-109736
• https://www.cve.org/CVERecord?id=CVE-2026-109737
• https://www.cve.org/CVERecord?id=CVE-2026-109738
• https://www.cve.org/CVERecord?id=CVE-2026-109740
• https://www.cve.org/CVERecord?id=CVE-2026-109741
• https://www.cve.org/CVERecord?id=CVE-2026-109742
• https://www.cve.org/CVERecord?id=CVE-2026-109743
• https://www.cve.org/CVERecord?id=CVE-2026-109744
• https://www.cve.org/CVERecord?id=CVE-2026-109745
• https://www.cve.org/CVERecord?id=CVE-2026-109751
• https://www.cve.org/CVERecord?id=CVE-2026-109752
• https://www.cve.org/CVERecord?id=CVE-2026-109753
• https://www.cve.org/CVERecord?id=CVE-2026-109754
• https://www.cve.org/CVERecord?id=CVE-2026-109756
• https://www.cve.org/CVERecord?id=CVE-2026-109757
• https://www.cve.org/CVERecord?id=CVE-2026-109759
• https://www.cve.org/CVERecord?id=CVE-2026-109760
• https://www.cve.org/CVERecord?id=CVE-2026-109762
• https://www.cve.org/CVERecord?id=CVE-2026-109763
• https://www.cve.org/CVERecord?id=CVE-2026-109764
• https://www.cve.org/CVERecord?id=CVE-2026-109765
• https://www.cve.org/CVERecord?id=CVE-2026-109766
• https://www.cve.org/CVERecord?id=CVE-2026-109767
• https://www.cve.org/CVERecord?id=CVE-2026-109770
• https://www.cve.org/CVERecord?id=CVE-2026-109775
• https://www.cve.org/CVERecord?id=CVE-2026-109776
• https://www.cve.org/CVERecord?id=CVE-2026-109777
• https://www.cve.org/CVERecord?id=CVE-2026-109778
• https://www.cve.org/CVERecord?id=CVE-2026-109781
• https://www.cve.org/CVERecord?id=CVE-2026-109782
• https://www.cve.org/CVERecord?id=CVE-2026-109783

SRPMS 10/core

• thunderbird-l10n-153.5.0-1.mga10
• thunderbird-153.5.0-1.mga10