Lector de Feeds

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-88812 , CVE-2026-93515 , CVE-2026-93516 , CVE-2026-93517 , CVE-2026-93518 , CVE-2026-93519 , CVE-2026-93520 , CVE-2026-93521 , CVE-2026-93522 , CVE-2026-93523 , CVE-2026-93524 , CVE-2026-93536 Description
XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812) Present Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515) XInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516) GLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517) XKB ResizeKeyType Numeric Truncation. (CVE-2026-93518) XFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519) XKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520) RandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521) Glamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522) XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write. (CVE-2026-93523) XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read. (CVE-2026-93524) GestureBuildSprite Use-After-Free. (CVE-2026-93536) References

• https://bugs.mageia.org/show_bug.cgi?id=36467
• https://www.openwall.com/lists/oss-security/2026/10/07/23
• https://bugs.mageia.org/show_bug.cgi?id=36488
• https://www.cve.org/CVERecord?id=CVE-2026-88812
• https://www.cve.org/CVERecord?id=CVE-2026-93515
• https://www.cve.org/CVERecord?id=CVE-2026-93516
• https://www.cve.org/CVERecord?id=CVE-2026-93517
• https://www.cve.org/CVERecord?id=CVE-2026-93518
• https://www.cve.org/CVERecord?id=CVE-2026-93519
• https://www.cve.org/CVERecord?id=CVE-2026-93520
• https://www.cve.org/CVERecord?id=CVE-2026-93521
• https://www.cve.org/CVERecord?id=CVE-2026-93522
• https://www.cve.org/CVERecord?id=CVE-2026-93523
• https://www.cve.org/CVERecord?id=CVE-2026-93524
• https://www.cve.org/CVERecord?id=CVE-2026-93536

SRPMS 10/core

• x11-server-21.1.25-2.mga10
• x11-server-xwayland-24.1.14-1.mga10
• tigervnc-1.15.0-7.3.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94286 Description
Out-of-bounds read in libXtst's RECORD reply parser. (CVE-2026-94286) References

• https://bugs.mageia.org/show_bug.cgi?id=36451
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QZFYBLNVDL6SO35IRJEHPL6F5QAKZ6GB/
• https://www.cve.org/CVERecord?id=CVE-2026-94286

SRPMS 10/core

• libxtst-1.2.5-2.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94287 Description
Denial of service via unsigned underflow in libXpm's write path. (CVE-2026-94287) References

• https://bugs.mageia.org/show_bug.cgi?id=36450
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/K7VZ2AXP776DE3BBHUU44LSZH4BNWXRF/
• https://ubuntu.com/security/notices/USN-8862-1
• https://www.cve.org/CVERecord?id=CVE-2026-94287

SRPMS 10/core

• libxpm-3.5.19-1.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-93541 , CVE-2026-93542 , CVE-2026-93543 , CVE-2026-93544 , CVE-2026-93545 , CVE-2026-94281 , CVE-2026-94282 Description
Out-of-bounds read in libXi's XQueryDeviceState(). (CVE-2026-93541) Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes(). (CVE-2026-93542) Out-of-bounds read in libXi's XI2 class parser. (CVE-2026-93543) Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing. (CVE-2026-93544) Out-of-bounds read in libXi's XListInputDevices(). (CVE-2026-93545) Out-of-bounds read in libXi's XListInputDevices() class parsing. (CVE-2026-94281) Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion. (CVE-2026-94282) References

• https://bugs.mageia.org/show_bug.cgi?id=36449
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2JXZPB52ROWMGP2VLGNYLYMGSTZQNEIA/
• https://www.cve.org/CVERecord?id=CVE-2026-93541
• https://www.cve.org/CVERecord?id=CVE-2026-93542
• https://www.cve.org/CVERecord?id=CVE-2026-93543
• https://www.cve.org/CVERecord?id=CVE-2026-93544
• https://www.cve.org/CVERecord?id=CVE-2026-93545
• https://www.cve.org/CVERecord?id=CVE-2026-94281
• https://www.cve.org/CVERecord?id=CVE-2026-94282

SRPMS 10/core

• libxi-1.8.2-2.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-106564 , CVE-2026-106565 , CVE-2026-106566 , CVE-2026-106567 , CVE-2026-106568 , CVE-2026-106569 , CVE-2026-106570 Description
Please see the references. References

• https://bugs.mageia.org/show_bug.cgi?id=36412
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r
• https://www.cve.org/CVERecord?id=CVE-2026-106564
• https://www.cve.org/CVERecord?id=CVE-2026-106565
• https://www.cve.org/CVERecord?id=CVE-2026-106566
• https://www.cve.org/CVERecord?id=CVE-2026-106567
• https://www.cve.org/CVERecord?id=CVE-2026-106568
• https://www.cve.org/CVERecord?id=CVE-2026-106569
• https://www.cve.org/CVERecord?id=CVE-2026-106570

SRPMS 10/core

• imagemagick-7.1.2.32-1.mga10

10/tainted

• imagemagick-7.1.2.32-1.mga10.tainted

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-73515 Description
PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. (CVE-2026-73515) References

• https://bugs.mageia.org/show_bug.cgi?id=36406
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73KG56KPJQTU3M7K3HOTNQUAINTCIRDD/
• https://www.cve.org/CVERecord?id=CVE-2026-73515

SRPMS 10/core

• postgis-3.6.4-1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-110249 , CVE-2026-109704 , CVE-2026-109705 , CVE-2026-109706 , CVE-2026-109707 , CVE-2026-109708 , CVE-2026-109709 , CVE-2026-109710 , CVE-2026-109711 , CVE-2026-109712 , CVE-2026-109713 , CVE-2026-109715 , CVE-2026-109716 , CVE-2026-109717 , CVE-2026-109718 , CVE-2026-109719 , CVE-2026-109720 , CVE-2026-109721 , CVE-2026-109722 , CVE-2026-109723 , CVE-2026-109724 , CVE-2026-109725 , CVE-2026-109726 , CVE-2026-109727 , CVE-2026-109728 , CVE-2026-109729 , CVE-2026-109730 , CVE-2026-109731 , CVE-2026-109732 , CVE-2026-109733 , CVE-2026-109734 , CVE-2026-109736 , CVE-2026-109737 , CVE-2026-109738 , CVE-2026-109740 , CVE-2026-109741 , CVE-2026-109742 , CVE-2026-109743 , CVE-2026-109744 , CVE-2026-109745 , CVE-2026-109751 , CVE-2026-109752 , CVE-2026-109753 , CVE-2026-109754 , CVE-2026-109756 , CVE-2026-109757 , CVE-2026-109759 , CVE-2026-109760 , CVE-2026-109762 , CVE-2026-109763 , CVE-2026-109764 , CVE-2026-109765 , CVE-2026-109766 , CVE-2026-109767 , CVE-2026-109770 , CVE-2026-109775 , CVE-2026-109776 , CVE-2026-109777 , CVE-2026-109778 , CVE-2026-109781 , CVE-2026-109782 , CVE-2026-109783 Description
Denial-of-service in the Exchange email component. (CVE-2026-110249) Privilege escalation in the Application Update component. (CVE-2026-109704) Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. (CVE-2026-109705) Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706) Sandbox escape due to use-after-free in the Networking component. (CVE-2026-109707) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-109708) Information disclosure, privilege escalation in the Security: Process Sandboxing component. (CVE-2026-109709) Use-after-free in the Graphics: Text component. (CVE-2026-109710) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711) Sandbox escape due to uninitialized memory in the Graphics component. (CVE-2026-109712) Use-after-free in the Crash Reporting component. (CVE-2026-109713) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109715) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109716) Use-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-109717) Use-after-free in the XML component. (CVE-2026-109718) Race condition, use-after-free in the Graphics: CanvasWebGL component. (CVE-2026-109719) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-109720) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-109721) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109722) Integer overflow in the Layout: Text and Fonts component. (CVE-2026-109723) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109724) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109725) Use-after-free in the SVG component. (CVE-2026-109726) Use-after-free in the Audio/Video component. (CVE-2026-109727) Use-after-free in the DOM: Animation component. (CVE-2026-109728) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-109729) Integer overflow in the Graphics component. (CVE-2026-109730) Incorrect boundary conditions in the Graphics: Canvas2D component. (CVE-2026-109731) Use-after-free in the DOM: Streams component. (CVE-2026-109732) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109733) Mitigation bypass in the DOM: Security component. (CVE-2026-109734) Frame poisoning in the Layout component. (CVE-2026-109736) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109737) Use-after-free in the Audio/Video: Playback component. (CVE-2026-109738) Use-after-free in the Storage: Bucket File System component. (CVE-2026-109741) Information disclosure in the PDF Viewer component. (CVE-2026-109742) Privilege escalation in the Panning and Zooming component. (CVE-2026-109743) Other issue in the DOM: File component. (CVE-2026-109744) Sandbox escape due to uninitialized memory in the DOM: Web Serial component. (CVE-2026-109745) Mitigation bypass in the File Handling component. (CVE-2026-109782) Information disclosure in the Networking component. (CVE-2026-109751) Use-after-free in the DOM: Workers component. (CVE-2026-109752) Incorrect boundary conditions in the Layout component. (CVE-2026-109753) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-109754) Privilege escalation in the DOM: Navigation component. (CVE-2026-109756) Sandbox escape due to race condition in the Networking component. (CVE-2026-109757) Site isolation issue in the Networking component. (CVE-2026-109759) Mitigation bypass in the Networking: HTTP component. (CVE-2026-109760) Incorrect boundary conditions in the SVG component. (CVE-2026-109762) Mitigation bypass in the File Handling component. (CVE-2026-109763) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109764) Race condition, use-after-free in the Graphics: Text component. (CVE-2026-109765) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109766) Information disclosure in the Networking component. (CVE-2026-109767) Mitigation bypass in the File Handling component. (CVE-2026-109783) Spoofing issue in the DOM: Web Serial component. (CVE-2026-109770) Denial-of-service in the WebRTC component. (CVE-2026-109775) Race condition in the XPCOM component. (CVE-2026-109776) Information disclosure in the Storage: IndexedDB component. (CVE-2026-109777) Privilege escalation in the WebExtensions component. (CVE-2026-109778) Denial-of-service in the Printing: Output component. (CVE-2026-109781) References

• https://bugs.mageia.org/show_bug.cgi?id=36509
• https://www.thunderbird.net/en-US/thunderbird/153.5.0esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/
• https://www.cve.org/CVERecord?id=CVE-2026-110249
• https://www.cve.org/CVERecord?id=CVE-2026-109704
• https://www.cve.org/CVERecord?id=CVE-2026-109705
• https://www.cve.org/CVERecord?id=CVE-2026-109706
• https://www.cve.org/CVERecord?id=CVE-2026-109707
• https://www.cve.org/CVERecord?id=CVE-2026-109708
• https://www.cve.org/CVERecord?id=CVE-2026-109709
• https://www.cve.org/CVERecord?id=CVE-2026-109710
• https://www.cve.org/CVERecord?id=CVE-2026-109711
• https://www.cve.org/CVERecord?id=CVE-2026-109712
• https://www.cve.org/CVERecord?id=CVE-2026-109713
• https://www.cve.org/CVERecord?id=CVE-2026-109715
• https://www.cve.org/CVERecord?id=CVE-2026-109716
• https://www.cve.org/CVERecord?id=CVE-2026-109717
• https://www.cve.org/CVERecord?id=CVE-2026-109718
• https://www.cve.org/CVERecord?id=CVE-2026-109719
• https://www.cve.org/CVERecord?id=CVE-2026-109720
• https://www.cve.org/CVERecord?id=CVE-2026-109721
• https://www.cve.org/CVERecord?id=CVE-2026-109722
• https://www.cve.org/CVERecord?id=CVE-2026-109723
• https://www.cve.org/CVERecord?id=CVE-2026-109724
• https://www.cve.org/CVERecord?id=CVE-2026-109725
• https://www.cve.org/CVERecord?id=CVE-2026-109726
• https://www.cve.org/CVERecord?id=CVE-2026-109727
• https://www.cve.org/CVERecord?id=CVE-2026-109728
• https://www.cve.org/CVERecord?id=CVE-2026-109729
• https://www.cve.org/CVERecord?id=CVE-2026-109730
• https://www.cve.org/CVERecord?id=CVE-2026-109731
• https://www.cve.org/CVERecord?id=CVE-2026-109732
• https://www.cve.org/CVERecord?id=CVE-2026-109733
• https://www.cve.org/CVERecord?id=CVE-2026-109734
• https://www.cve.org/CVERecord?id=CVE-2026-109736
• https://www.cve.org/CVERecord?id=CVE-2026-109737
• https://www.cve.org/CVERecord?id=CVE-2026-109738
• https://www.cve.org/CVERecord?id=CVE-2026-109740
• https://www.cve.org/CVERecord?id=CVE-2026-109741
• https://www.cve.org/CVERecord?id=CVE-2026-109742
• https://www.cve.org/CVERecord?id=CVE-2026-109743
• https://www.cve.org/CVERecord?id=CVE-2026-109744
• https://www.cve.org/CVERecord?id=CVE-2026-109745
• https://www.cve.org/CVERecord?id=CVE-2026-109751
• https://www.cve.org/CVERecord?id=CVE-2026-109752
• https://www.cve.org/CVERecord?id=CVE-2026-109753
• https://www.cve.org/CVERecord?id=CVE-2026-109754
• https://www.cve.org/CVERecord?id=CVE-2026-109756
• https://www.cve.org/CVERecord?id=CVE-2026-109757
• https://www.cve.org/CVERecord?id=CVE-2026-109759
• https://www.cve.org/CVERecord?id=CVE-2026-109760
• https://www.cve.org/CVERecord?id=CVE-2026-109762
• https://www.cve.org/CVERecord?id=CVE-2026-109763
• https://www.cve.org/CVERecord?id=CVE-2026-109764
• https://www.cve.org/CVERecord?id=CVE-2026-109765
• https://www.cve.org/CVERecord?id=CVE-2026-109766
• https://www.cve.org/CVERecord?id=CVE-2026-109767
• https://www.cve.org/CVERecord?id=CVE-2026-109770
• https://www.cve.org/CVERecord?id=CVE-2026-109775
• https://www.cve.org/CVERecord?id=CVE-2026-109776
• https://www.cve.org/CVERecord?id=CVE-2026-109777
• https://www.cve.org/CVERecord?id=CVE-2026-109778
• https://www.cve.org/CVERecord?id=CVE-2026-109781
• https://www.cve.org/CVERecord?id=CVE-2026-109782
• https://www.cve.org/CVERecord?id=CVE-2026-109783

SRPMS 10/core

• thunderbird-l10n-153.5.0-1.mga10
• thunderbird-153.5.0-1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-109704 , CVE-2026-109705 , CVE-2026-109706 , CVE-2026-109707 , CVE-2026-109708 , CVE-2026-109709 , CVE-2026-109710 , CVE-2026-109711 , CVE-2026-109712 , CVE-2026-109713 , CVE-2026-109715 , CVE-2026-109716 , CVE-2026-109717 , CVE-2026-109718 , CVE-2026-109719 , CVE-2026-109720 , CVE-2026-109721 , CVE-2026-109722 , CVE-2026-109723 , CVE-2026-109724 , CVE-2026-109725 , CVE-2026-109726 , CVE-2026-109727 , CVE-2026-109728 , CVE-2026-109729 , CVE-2026-109730 , CVE-2026-109731 , CVE-2026-109732 , CVE-2026-109733 , CVE-2026-109734 , CVE-2026-109736 , CVE-2026-109737 , CVE-2026-109738 , CVE-2026-109741 , CVE-2026-109742 , CVE-2026-109743 , CVE-2026-109744 , CVE-2026-109745 , CVE-2026-109751 , CVE-2026-109752 , CVE-2026-109753 , CVE-2026-109754 , CVE-2026-109756 , CVE-2026-109757 , CVE-2026-109759 , CVE-2026-109760 , CVE-2026-109762 , CVE-2026-109763 , CVE-2026-109764 , CVE-2026-109765 , CVE-2026-109766 , CVE-2026-109767 , CVE-2026-109770 , CVE-2026-109775 , CVE-2026-109776 , CVE-2026-109777 , CVE-2026-109778 , CVE-2026-109781 , CVE-2026-109782 , CVE-2026-109783 Description
Privilege escalation in the Application Update component. (CVE-2026-109704) Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. (CVE-2026-109705) Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706) Sandbox escape due to use-after-free in the Networking component. (CVE-2026-109707) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-109708) Information disclosure, privilege escalation in the Security: Process Sandboxing component. (CVE-2026-109709) Use-after-free in the Graphics: Text component. (CVE-2026-109710) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711) Sandbox escape due to uninitialized memory in the Graphics component. (CVE-2026-109712) Use-after-free in the Crash Reporting component. (CVE-2026-109713) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109715) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109716) Use-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-109717) Use-after-free in the XML component. (CVE-2026-109718) Race condition, use-after-free in the Graphics: CanvasWebGL component. (CVE-2026-109719) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-109720) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-109721) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109722) Integer overflow in the Layout: Text and Fonts component. (CVE-2026-109723) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109724) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109725) Use-after-free in the SVG component. (CVE-2026-109726) Use-after-free in the Audio/Video component. (CVE-2026-109727) Use-after-free in the DOM: Animation component. (CVE-2026-109728) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-109729) Integer overflow in the Graphics component. (CVE-2026-109730) Incorrect boundary conditions in the Graphics: Canvas2D component. (CVE-2026-109731) Use-after-free in the DOM: Streams component. (CVE-2026-109732) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109733) Mitigation bypass in the DOM: Security component. (CVE-2026-109734) Frame poisoning in the Layout component. (CVE-2026-109736) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109737) Use-after-free in the Audio/Video: Playback component. (CVE-2026-109738) Use-after-free in the Storage: Bucket File System component. (CVE-2026-109741) Information disclosure in the PDF Viewer component. (CVE-2026-109742) Privilege escalation in the Panning and Zooming component. (CVE-2026-109743) Other issue in the DOM: File component. (CVE-2026-109744) Sandbox escape due to uninitialized memory in the DOM: Web Serial component. (CVE-2026-109745) Mitigation bypass in the File Handling component. (CVE-2026-109782) Information disclosure in the Networking component. (CVE-2026-109751) Use-after-free in the DOM: Workers component. (CVE-2026-109752) Incorrect boundary conditions in the Layout component. (CVE-2026-109753) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-109754) Privilege escalation in the DOM: Navigation component. (CVE-2026-109756) Sandbox escape due to race condition in the Networking component. (CVE-2026-109757) Site isolation issue in the Networking component. (CVE-2026-109759) Mitigation bypass in the Networking: HTTP component. (CVE-2026-109760) Incorrect boundary conditions in the SVG component. (CVE-2026-109762) Mitigation bypass in the File Handling component. (CVE-2026-109763) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109764) Race condition, use-after-free in the Graphics: Text component. (CVE-2026-109765) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109766) Information disclosure in the Networking component. (CVE-2026-109767) Mitigation bypass in the File Handling component. (CVE-2026-109783) Spoofing issue in the DOM: Web Serial component. (CVE-2026-109770) Denial-of-service in the WebRTC component. (CVE-2026-109775) Race condition in the XPCOM component. (CVE-2026-109776) Information disclosure in the Storage: IndexedDB component. (CVE-2026-109777) Privilege escalation in the WebExtensions component. (CVE-2026-109778) Denial-of-service in the Printing: Output component. (CVE-2026-109781) References

• https://bugs.mageia.org/show_bug.cgi?id=36500
• https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html
• https://www.firefox.com/en-US/firefox/153.5.0/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
• https://www.cve.org/CVERecord?id=CVE-2026-109704
• https://www.cve.org/CVERecord?id=CVE-2026-109705
• https://www.cve.org/CVERecord?id=CVE-2026-109706
• https://www.cve.org/CVERecord?id=CVE-2026-109707
• https://www.cve.org/CVERecord?id=CVE-2026-109708
• https://www.cve.org/CVERecord?id=CVE-2026-109709
• https://www.cve.org/CVERecord?id=CVE-2026-109710
• https://www.cve.org/CVERecord?id=CVE-2026-109711
• https://www.cve.org/CVERecord?id=CVE-2026-109712
• https://www.cve.org/CVERecord?id=CVE-2026-109713
• https://www.cve.org/CVERecord?id=CVE-2026-109715
• https://www.cve.org/CVERecord?id=CVE-2026-109716
• https://www.cve.org/CVERecord?id=CVE-2026-109717
• https://www.cve.org/CVERecord?id=CVE-2026-109718
• https://www.cve.org/CVERecord?id=CVE-2026-109719
• https://www.cve.org/CVERecord?id=CVE-2026-109720
• https://www.cve.org/CVERecord?id=CVE-2026-109721
• https://www.cve.org/CVERecord?id=CVE-2026-109722
• https://www.cve.org/CVERecord?id=CVE-2026-109723
• https://www.cve.org/CVERecord?id=CVE-2026-109724
• https://www.cve.org/CVERecord?id=CVE-2026-109725
• https://www.cve.org/CVERecord?id=CVE-2026-109726
• https://www.cve.org/CVERecord?id=CVE-2026-109727
• https://www.cve.org/CVERecord?id=CVE-2026-109728
• https://www.cve.org/CVERecord?id=CVE-2026-109729
• https://www.cve.org/CVERecord?id=CVE-2026-109730
• https://www.cve.org/CVERecord?id=CVE-2026-109731
• https://www.cve.org/CVERecord?id=CVE-2026-109732
• https://www.cve.org/CVERecord?id=CVE-2026-109733
• https://www.cve.org/CVERecord?id=CVE-2026-109734
• https://www.cve.org/CVERecord?id=CVE-2026-109736
• https://www.cve.org/CVERecord?id=CVE-2026-109737
• https://www.cve.org/CVERecord?id=CVE-2026-109738
• https://www.cve.org/CVERecord?id=CVE-2026-109741
• https://www.cve.org/CVERecord?id=CVE-2026-109742
• https://www.cve.org/CVERecord?id=CVE-2026-109743
• https://www.cve.org/CVERecord?id=CVE-2026-109744
• https://www.cve.org/CVERecord?id=CVE-2026-109745
• https://www.cve.org/CVERecord?id=CVE-2026-109751
• https://www.cve.org/CVERecord?id=CVE-2026-109752
• https://www.cve.org/CVERecord?id=CVE-2026-109753
• https://www.cve.org/CVERecord?id=CVE-2026-109754
• https://www.cve.org/CVERecord?id=CVE-2026-109756
• https://www.cve.org/CVERecord?id=CVE-2026-109757
• https://www.cve.org/CVERecord?id=CVE-2026-109759
• https://www.cve.org/CVERecord?id=CVE-2026-109760
• https://www.cve.org/CVERecord?id=CVE-2026-109762
• https://www.cve.org/CVERecord?id=CVE-2026-109763
• https://www.cve.org/CVERecord?id=CVE-2026-109764
• https://www.cve.org/CVERecord?id=CVE-2026-109765
• https://www.cve.org/CVERecord?id=CVE-2026-109766
• https://www.cve.org/CVERecord?id=CVE-2026-109767
• https://www.cve.org/CVERecord?id=CVE-2026-109770
• https://www.cve.org/CVERecord?id=CVE-2026-109775
• https://www.cve.org/CVERecord?id=CVE-2026-109776
• https://www.cve.org/CVERecord?id=CVE-2026-109777
• https://www.cve.org/CVERecord?id=CVE-2026-109778
• https://www.cve.org/CVERecord?id=CVE-2026-109781
• https://www.cve.org/CVERecord?id=CVE-2026-109782
• https://www.cve.org/CVERecord?id=CVE-2026-109783

SRPMS 10/core

• firefox-153.5.0-1.mga10
• nss-3.131.0-1.mga10
• firefox-l10n-153.5.0-1.mga10

Publication date: 20 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
Fix baudrate setting on Linux when compiled against glibc >= 2.42 and update lrzsz to latest 0.13.1 release References

• https://bugs.mageia.org/show_bug.cgi?id=36523
• https://salsa.debian.org/minicom-team/minicom/-/releases

SRPMS 10/core

• minicom-2.11.1-1.mga10
• lrzsz-0.13.1-1.mga10

Publication date: 19 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
This update fixes a failure to obtain an IP address, particularly when connecting via WiFi to a cellular hotspot. References

• https://bugs.mageia.org/show_bug.cgi?id=36444

SRPMS 10/core

• dhcpcd-10.5.2-1.mga10

Publication date: 19 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-55655 , CVE-2026-59995 , CVE-2026-59996 , CVE-2026-59997 , CVE-2026-59998 , CVE-2026-59999 , CVE-2026-60000 , CVE-2026-60001 , CVE-2026-60002 , CVE-2026-73281 , CVE-2026-73282 , CVE-2026-73283 , CVE-2026-106552 , CVE-2026-106553 , CVE-2026-106555 , CVE-2026-106582 , CVE-2026-106583 , CVE-2026-106584 , CVE-2026-106585 , CVE-2026-106586 , CVE-2026-106587 Description
Local mitm of x11 forwarding via abstract unix socket pre-binding in Red Hat Enterprise Linux openssh client versions. (CVE-2026-55655) sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server. (CVE-2026-59995) scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. (CVE-2026-59996) internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection. (CVE-2026-59997) sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory. (CVE-2026-59998) In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. (CVE-2026-59999) sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication. (CVE-2026-60000) sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. (CVE-2026-60001) ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.). (CVE-2026-60002) In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension. (CVE-2026-73281) In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. (CVE-2026-73282) In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. (CVE-2026-73283) In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. (CVE-2026-106552) In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. (CVE-2026-106553) In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. (CVE-2026-106555) In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. (CVE-2026-106582) In ssh in OpenSSH before 10.6, a $ or character can occur in a command-line username, leading to injection. (CVE-2026-106583) In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations. (CVE-2026-106584) In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. (CVE-2026-106585) In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. (CVE-2026-106586) In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. (CVE-2026-106587) References

• https://bugs.mageia.org/show_bug.cgi?id=35876
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FAMKD5T6664L7TA7EBJFLZB2RX3AQYZ/
• https://ubuntu.com/security/notices/USN-8533-1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2ZK2T3OFPOIBFAZQAJISQ7EML4PHYVB/
• https://www.openwall.com/lists/oss-security/2026/08/12/1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRB2YTKIEJGFGAKEXYAPCDQSKUFBEI7B/
• https://ubuntu.com/security/notices/USN-8721-1
• https://ubuntu.com/security/notices/USN-8928-1
• https://www.cve.org/CVERecord?id=CVE-2026-55655
• https://www.cve.org/CVERecord?id=CVE-2026-59995
• https://www.cve.org/CVERecord?id=CVE-2026-59996
• https://www.cve.org/CVERecord?id=CVE-2026-59997
• https://www.cve.org/CVERecord?id=CVE-2026-59998
• https://www.cve.org/CVERecord?id=CVE-2026-59999
• https://www.cve.org/CVERecord?id=CVE-2026-60000
• https://www.cve.org/CVERecord?id=CVE-2026-60001
• https://www.cve.org/CVERecord?id=CVE-2026-60002
• https://www.cve.org/CVERecord?id=CVE-2026-73281
• https://www.cve.org/CVERecord?id=CVE-2026-73282
• https://www.cve.org/CVERecord?id=CVE-2026-73283
• https://www.cve.org/CVERecord?id=CVE-2026-106552
• https://www.cve.org/CVERecord?id=CVE-2026-106553
• https://www.cve.org/CVERecord?id=CVE-2026-106555
• https://www.cve.org/CVERecord?id=CVE-2026-106582
• https://www.cve.org/CVERecord?id=CVE-2026-106583
• https://www.cve.org/CVERecord?id=CVE-2026-106584
• https://www.cve.org/CVERecord?id=CVE-2026-106585
• https://www.cve.org/CVERecord?id=CVE-2026-106586
• https://www.cve.org/CVERecord?id=CVE-2026-106587

SRPMS 10/core

• openssh-10.0p1-4.1.mga10

Publication date: 19 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-46675 Description
Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression. (CVE-2026-46675) References

• https://bugs.mageia.org/show_bug.cgi?id=36403
• https://www.openwall.com/lists/oss-security/2026/09/29/4
• https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j
• https://lists.debian.org/debian-security-announce/2026/msg00450.html
• https://www.cve.org/CVERecord?id=CVE-2026-46675

SRPMS 10/core

• libpng-1.6.53-6.1.mga10

Publication date: 19 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86320 Description
Host code execution via `git am` hook execution in patch source extraction (`use-git-am`). (CVE-2026-86320) References

• https://bugs.mageia.org/show_bug.cgi?id=36407
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BJF2ORPRVKVTXPAFIDS6U5SNJHW6VTMX/
• https://github.com/flatpak/flatpak-builder/security/advisories/GHSA-j5p8-jgjc-f3xv
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJHPETQUQKC4Z7Z3LWM37VPXNFDJHFGB/
• https://www.cve.org/CVERecord?id=CVE-2026-86320

SRPMS 10/core

• flatpak-builder-1.4.12-1.mga10