Lector de Feeds
MGASA-2026-0395 - Updated java-21-openjdk & java-17-openjdk packages fix security vulnerabilities
Publication date: 12 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-46968 , CVE-2026-46917 , CVE-2026-47010 , CVE-2026-47021 , CVE-2026-47027 , CVE-2026-60147 , CVE-2026-47059 , CVE-2026-47063 , CVE-2026-60589 , CVE-2026-61308 , CVE-2026-70907 Description
Enhance TLS certificate handling. (CVE-2026-46968) Improve DTLS handshaking. (CVE-2026-46917) Enhance JPEG handling. (CVE-2026-47010) Enhance XBM image support. (CVE-2026-47021) Enhance Jar file processing. (CVE-2026-47027) Improve certification checking. (CVE-2026-60147) Enhance AWT ImagingLib. (CVE-2026-47059) Enhance Jar handling. (CVE-2026-47063) Improve Resource Resolving. (CVE-2026-60589) Enhance HTTP Connections. (CVE-2026-61308) Enhance TLS server. (CVE-2026-70907) References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-46968 , CVE-2026-46917 , CVE-2026-47010 , CVE-2026-47021 , CVE-2026-47027 , CVE-2026-60147 , CVE-2026-47059 , CVE-2026-47063 , CVE-2026-60589 , CVE-2026-61308 , CVE-2026-70907 Description
Enhance TLS certificate handling. (CVE-2026-46968) Improve DTLS handshaking. (CVE-2026-46917) Enhance JPEG handling. (CVE-2026-47010) Enhance XBM image support. (CVE-2026-47021) Enhance Jar file processing. (CVE-2026-47027) Improve certification checking. (CVE-2026-60147) Enhance AWT ImagingLib. (CVE-2026-47059) Enhance Jar handling. (CVE-2026-47063) Improve Resource Resolving. (CVE-2026-60589) Enhance HTTP Connections. (CVE-2026-61308) Enhance TLS server. (CVE-2026-70907) References
- https://bugs.mageia.org/show_bug.cgi?id=36125
- https://access.redhat.com/errata/RHSA-2026:42889
- https://access.redhat.com/errata/RHSA-2026:55782
- https://access.redhat.com/errata/RHSA-2026:42897
- https://access.redhat.com/errata/RHSA-2026:55788
- https://www.oracle.com/security-alerts/cpujul2026.html#AppendixJAVA
- https://www.oracle.com/security-alerts/cspuaug2026.html#AppendixJAVA
- https://www.cve.org/CVERecord?id=CVE-2026-46968
- https://www.cve.org/CVERecord?id=CVE-2026-46917
- https://www.cve.org/CVERecord?id=CVE-2026-47010
- https://www.cve.org/CVERecord?id=CVE-2026-47021
- https://www.cve.org/CVERecord?id=CVE-2026-47027
- https://www.cve.org/CVERecord?id=CVE-2026-60147
- https://www.cve.org/CVERecord?id=CVE-2026-47059
- https://www.cve.org/CVERecord?id=CVE-2026-47063
- https://www.cve.org/CVERecord?id=CVE-2026-60589
- https://www.cve.org/CVERecord?id=CVE-2026-61308
- https://www.cve.org/CVERecord?id=CVE-2026-70907
- java-21-openjdk-21.0.12.1.1-1.mga10
- java-17-openjdk-17.0.20.1.1-1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0394 - Updated perl-Imager packages fix a security vulnerability
Publication date: 12 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-19082 Description
Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-19082 Description
Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags References
- https://bugs.mageia.org/show_bug.cgi?id=36133
- https://www.openwall.com/lists/oss-security/2026/08/07/6
- https://github.com/tonycoz/imager/security/advisories/GHSA-hx46-55wp-hv6m
- https://metacpan.org/release/TONYC/Imager-1.034/changes
- https://www.cve.org/CVERecord?id=CVE-2026-19082
- perl-Imager-1.34.0-1.1.mga10
- perl-Imager-1.34.0-1.1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0393 - Updated perl-Catalyst-Plugin-Static-Simple packages fix a security vulnerability
Publication date: 12 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-15743 Description
Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-15743 Description
Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable References
- https://bugs.mageia.org/show_bug.cgi?id=36154
- https://www.openwall.com/lists/oss-security/2026/08/20/18
- https://www.cve.org/CVERecord?id=CVE-2026-15743
- perl-Catalyst-Plugin-Static-Simple-0.370.0-4.mga10
- perl-Catalyst-Plugin-Static-Simple-0.370.0-3.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0392 - Updated tor packages fix security vulnerabilities
Publication date: 11 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-87724 Description
Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state(CVE-2026-87724) Do not purge memory for OOM from within low-level code (TROVE-2026-043). A hostile cache could trick a client into falsely believing that certain relays' microdescriptors or router descriptors were unusable (TROVE-2026-034). Fix a use-after-free error (TROVE-2026-036). Limit the size of consensus diffs, in bytes and in lines, to prevent a class of memory-based denial-of-service attacks (TROVE-2026-042). Negotiate CGO cryptography with every hop that supports it (TROVE-2026-033). Validate DNS names for complience whenever providing or receiving them from evdns, to limit exposure to a class of application and library bugs (TROVE-2026-035). References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-87724 Description
Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state(CVE-2026-87724) Do not purge memory for OOM from within low-level code (TROVE-2026-043). A hostile cache could trick a client into falsely believing that certain relays' microdescriptors or router descriptors were unusable (TROVE-2026-034). Fix a use-after-free error (TROVE-2026-036). Limit the size of consensus diffs, in bytes and in lines, to prevent a class of memory-based denial-of-service attacks (TROVE-2026-042). Negotiate CGO cryptography with every hop that supports it (TROVE-2026-033). Validate DNS names for complience whenever providing or receiving them from evdns, to limit exposure to a class of application and library bugs (TROVE-2026-035). References
- https://bugs.mageia.org/show_bug.cgi?id=36284
- https://www.openwall.com/lists/oss-security/2026/09/08/20
- https://www.cve.org/CVERecord?id=CVE-2026-87724
- tor-0.4.9.12-1.mga10
- tor-0.4.9.12-1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0391 - Updated glibc package fixes security vulnerabilities
Publication date: 11 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-5435 , CVE-2026-6238 , CVE-2026-6368 , CVE-2026-6791 , CVE-2026-19499 , CVE-2026-77117 , CVE-2026-80489 Description
Potential buffer overflow in ns_sprintrrf TSIG handling path. (CVE-2026-5435) Buffer overread in ns_printrrf with corrupted RDATA field. (CVE-2026-6238) wordexp with WRDE_APPEND can return or use invalid memory. (CVE-2026-6368) Potential stack-based buffer clash during tilde expansion in wordexp. (CVE-2026-6791) Fix right-justification in strfmon. (CVE-2026-19499) SHIFT_JISX0213 decoding lacks pending character reset. (CVE-2026-77117) EUC_JISX0213 decoding lacks pending character reset. (CVE-2026-80489) References
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-5435 , CVE-2026-6238 , CVE-2026-6368 , CVE-2026-6791 , CVE-2026-19499 , CVE-2026-77117 , CVE-2026-80489 Description
Potential buffer overflow in ns_sprintrrf TSIG handling path. (CVE-2026-5435) Buffer overread in ns_printrrf with corrupted RDATA field. (CVE-2026-6238) wordexp with WRDE_APPEND can return or use invalid memory. (CVE-2026-6368) Potential stack-based buffer clash during tilde expansion in wordexp. (CVE-2026-6791) Fix right-justification in strfmon. (CVE-2026-19499) SHIFT_JISX0213 decoding lacks pending character reset. (CVE-2026-77117) EUC_JISX0213 decoding lacks pending character reset. (CVE-2026-80489) References
- https://bugs.mageia.org/show_bug.cgi?id=35262
- https://www.openwall.com/lists/oss-security/2026/04/28/16
- https://www.openwall.com/lists/oss-security/2026/08/11/3
- https://www.cve.org/CVERecord?id=CVE-2026-5435
- https://www.cve.org/CVERecord?id=CVE-2026-6238
- https://www.cve.org/CVERecord?id=CVE-2026-6368
- https://www.cve.org/CVERecord?id=CVE-2026-6791
- https://www.cve.org/CVERecord?id=CVE-2026-19499
- https://www.cve.org/CVERecord?id=CVE-2026-77117
- https://www.cve.org/CVERecord?id=CVE-2026-80489
- glibc-2.42-10.mga10
Categorías: Actualizaciones de Seguridad
MGAA-2026-0123 - Updated simgear, flightgear, flightgear-data packages fix bug
Publication date: 11 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
Updated simgear, flightgear and flightgear-data packages to new stable release version 2024.1.7 References
SRPMS 10/core
Type: bugfix
Affected Mageia releases : 10
Description
Updated simgear, flightgear and flightgear-data packages to new stable release version 2024.1.7 References
SRPMS 10/core
- simgear-2024.1.7-1.mga10
- flightgear-2024.1.7-1.mga10
- flightgear-data-2024.1.7-1.mga10
Categorías: Actualizaciones de Seguridad
MGASA-2026-0390 - Updated perl-DBI packages fix security vulnerabilities
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-73193 , CVE-2026-73194 Description
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-73193 , CVE-2026-73194 Description
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. References
- https://bugs.mageia.org/show_bug.cgi?id=36144
- https://www.openwall.com/lists/oss-security/2026/08/15/2
- https://github.com/perl5-dbi/dbi/security/advisories/GHSA-wj3v-c3hh-mhqr
- https://www.openwall.com/lists/oss-security/2026/08/15/3
- https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4
- https://www.cve.org/CVERecord?id=CVE-2026-73193
- https://www.cve.org/CVERecord?id=CVE-2026-73194
- perl-DBI-1.652.0-2.mga10
- perl-DBI-1.652.0-1.1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0389 - Updated ceph packages fix security vulnerabilities
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2025-30156 , CVE-2026-50152 , CVE-2026-54330 , CVE-2026-39944 Description
Updated ceph packages fix various security issues allowing authentication bypasses to gain admin privileges on the OSD, MDS, and MGR services. Notice that some of the fixes require kernel support for aes256k (introduced in kernel 7). This update will not break installs using the old (and insecure) AES keys; warnings will appear to migrate all keys (check out "ceph health detail" or "ceph status"). References
Type: security
Affected Mageia releases : 10
CVE: CVE-2025-30156 , CVE-2026-50152 , CVE-2026-54330 , CVE-2026-39944 Description
Updated ceph packages fix various security issues allowing authentication bypasses to gain admin privileges on the OSD, MDS, and MGR services. Notice that some of the fixes require kernel support for aes256k (introduced in kernel 7). This update will not break installs using the old (and insecure) AES keys; warnings will appear to migrate all keys (check out "ceph health detail" or "ceph status"). References
- https://bugs.mageia.org/show_bug.cgi?id=36147
- https://docs.ceph.com/en/latest/rados/configuration/auth-config-ref/index.html#upgrading-and-rotating-cephx-keys
- https://www.openwall.com/lists/oss-security/2026/08/19/4
- https://github.com/ceph/ceph/security/advisories/GHSA-rmjq-ffrm-j6vj
- https://docs.ceph.com/en/latest/security/CVE-2025-30156/
- https://web.mit.edu/tlyu/papers/krb4peril-ndss04.pdf
- https://github.com/ceph/ceph/security/advisories/GHSA-rg9p-5xcp-wm8h
- https://docs.ceph.com/en/latest/security/CVE-2026-50152/
- https://github.com/ceph/ceph/security/advisories/GHSA-rmjq-ffrm-j6vj
- https://docs.ceph.com/en/latest/security/CVE-2026-54330
- https://github.com/ceph/ceph/security/advisories/GHSA-j73r-qrgx-jvq2
- https://docs.ceph.com/en/latest/security/CVE-2026-39944
- https://www.cve.org/CVERecord?id=CVE-2025-30156
- https://www.cve.org/CVERecord?id=CVE-2026-50152
- https://www.cve.org/CVERecord?id=CVE-2026-54330
- https://www.cve.org/CVERecord?id=CVE-2026-39944
- ceph-20.2.4-1.mga10
Categorías: Actualizaciones de Seguridad
MGASA-2026-0388 - Updated thunderbird packages fix security vulnerabilities
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-84637 , CVE-2026-84639 , CVE-2026-84640 , CVE-2026-84641 , CVE-2026-84642 , CVE-2026-75874 , CVE-2026-16365 , CVE-2026-84118 , CVE-2026-84119 , CVE-2026-84120 , CVE-2026-84121 , CVE-2026-84122 , CVE-2026-84123 , CVE-2026-84124 , CVE-2026-84125 , CVE-2026-74952 , CVE-2026-84129 , CVE-2026-16371 , CVE-2026-84130 , CVE-2026-84131 , CVE-2026-84132 , CVE-2026-84133 , CVE-2026-84134 , CVE-2026-84136 , CVE-2026-84137 , CVE-2026-84139 , CVE-2026-84140 , CVE-2026-84141 , CVE-2026-84143 , CVE-2026-84144 , CVE-2026-84145 Description
Uninitialized memory in MIME parsing. (CVE-2026-84639) One byte overflow read in mail parser. (CVE-2026-84640) Information disclosure due to malicious IMAP server response. (CVE-2026-84641) Calendar invitation attachments could launch local executables. (CVE-2026-84637) Allowed UNC hostnames for attachments interpreted as a regular expression. (CVE-2026-84642) Sandbox escape in the Remote Settings Client component. (CVE-2026-75874) Privilege escalation in the DOM: Workers component. (CVE-2026-16365) Use-after-free in the JavaScript: GC component. (CVE-2026-84118) Sandbox escape due to use-after-free in the DOM: Navigation component. (CVE-2026-84119) Use-after-free in the Audio/Video component. (CVE-2026-84120) Sandbox escape due to use-after-free in the DOM: Security component. (CVE-2026-84121) Use-after-free in the Audio/Video component. (CVE-2026-84122) Privilege escalation due to use-after-free in the Graphics: WebGPU component. (CVE-2026-84123) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84124) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84125) Privilege escalation in the DOM: Navigation component. (CVE-2026-16371) Privilege escalation in the Application Update component. (CVE-2026-74952) Site isolation issue in the DOM: Navigation component. (CVE-2026-84129) Information disclosure in the Graphics: WebGPU component. (CVE-2026-84130) Privilege escalation due to invalid pointer in the Graphics component. (CVE-2026-84131) Information disclosure in the Networking: HTTP component. (CVE-2026-84132) Site isolation issue in the DOM: Push Subscriptions component. (CVE-2026-84133) Other issue in the Profile Backup component. (CVE-2026-84134) Other issue in the DOM: Navigation component. (CVE-2026-84136) Spoofing issue in the DOM: Core & HTML component. (CVE-2026-84137) Clickjacking issue in the DOM: Events component. (CVE-2026-84139) Site isolation issue in the DOM: Navigation component. (CVE-2026-84140) Integer overflow in the Graphics: ImageLib component. (CVE-2026-84141) Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15. (CVE-2026-84143) Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2. (CVE-2026-84144) Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15. (CVE-2026-84145) References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-84637 , CVE-2026-84639 , CVE-2026-84640 , CVE-2026-84641 , CVE-2026-84642 , CVE-2026-75874 , CVE-2026-16365 , CVE-2026-84118 , CVE-2026-84119 , CVE-2026-84120 , CVE-2026-84121 , CVE-2026-84122 , CVE-2026-84123 , CVE-2026-84124 , CVE-2026-84125 , CVE-2026-74952 , CVE-2026-84129 , CVE-2026-16371 , CVE-2026-84130 , CVE-2026-84131 , CVE-2026-84132 , CVE-2026-84133 , CVE-2026-84134 , CVE-2026-84136 , CVE-2026-84137 , CVE-2026-84139 , CVE-2026-84140 , CVE-2026-84141 , CVE-2026-84143 , CVE-2026-84144 , CVE-2026-84145 Description
Uninitialized memory in MIME parsing. (CVE-2026-84639) One byte overflow read in mail parser. (CVE-2026-84640) Information disclosure due to malicious IMAP server response. (CVE-2026-84641) Calendar invitation attachments could launch local executables. (CVE-2026-84637) Allowed UNC hostnames for attachments interpreted as a regular expression. (CVE-2026-84642) Sandbox escape in the Remote Settings Client component. (CVE-2026-75874) Privilege escalation in the DOM: Workers component. (CVE-2026-16365) Use-after-free in the JavaScript: GC component. (CVE-2026-84118) Sandbox escape due to use-after-free in the DOM: Navigation component. (CVE-2026-84119) Use-after-free in the Audio/Video component. (CVE-2026-84120) Sandbox escape due to use-after-free in the DOM: Security component. (CVE-2026-84121) Use-after-free in the Audio/Video component. (CVE-2026-84122) Privilege escalation due to use-after-free in the Graphics: WebGPU component. (CVE-2026-84123) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84124) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84125) Privilege escalation in the DOM: Navigation component. (CVE-2026-16371) Privilege escalation in the Application Update component. (CVE-2026-74952) Site isolation issue in the DOM: Navigation component. (CVE-2026-84129) Information disclosure in the Graphics: WebGPU component. (CVE-2026-84130) Privilege escalation due to invalid pointer in the Graphics component. (CVE-2026-84131) Information disclosure in the Networking: HTTP component. (CVE-2026-84132) Site isolation issue in the DOM: Push Subscriptions component. (CVE-2026-84133) Other issue in the Profile Backup component. (CVE-2026-84134) Other issue in the DOM: Navigation component. (CVE-2026-84136) Spoofing issue in the DOM: Core & HTML component. (CVE-2026-84137) Clickjacking issue in the DOM: Events component. (CVE-2026-84139) Site isolation issue in the DOM: Navigation component. (CVE-2026-84140) Integer overflow in the Graphics: ImageLib component. (CVE-2026-84141) Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15. (CVE-2026-84143) Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2. (CVE-2026-84144) Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15. (CVE-2026-84145) References
- https://bugs.mageia.org/show_bug.cgi?id=36245
- https://www.thunderbird.net/en-US/thunderbird/140.14.1esr/releasenotes/
- https://www.thunderbird.net/en-US/thunderbird/153.1.1esr/releasenotes/
- https://www.thunderbird.net/en-US/thunderbird/140.15.0esr/releasenotes/
- https://www.thunderbird.net/en-US/thunderbird/153.2.0esr/releasenotes/
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-88/
- https://www.cve.org/CVERecord?id=CVE-2026-84637
- https://www.cve.org/CVERecord?id=CVE-2026-84639
- https://www.cve.org/CVERecord?id=CVE-2026-84640
- https://www.cve.org/CVERecord?id=CVE-2026-84641
- https://www.cve.org/CVERecord?id=CVE-2026-84642
- https://www.cve.org/CVERecord?id=CVE-2026-75874
- https://www.cve.org/CVERecord?id=CVE-2026-16365
- https://www.cve.org/CVERecord?id=CVE-2026-84118
- https://www.cve.org/CVERecord?id=CVE-2026-84119
- https://www.cve.org/CVERecord?id=CVE-2026-84120
- https://www.cve.org/CVERecord?id=CVE-2026-84121
- https://www.cve.org/CVERecord?id=CVE-2026-84122
- https://www.cve.org/CVERecord?id=CVE-2026-84123
- https://www.cve.org/CVERecord?id=CVE-2026-84124
- https://www.cve.org/CVERecord?id=CVE-2026-84125
- https://www.cve.org/CVERecord?id=CVE-2026-74952
- https://www.cve.org/CVERecord?id=CVE-2026-84129
- https://www.cve.org/CVERecord?id=CVE-2026-16371
- https://www.cve.org/CVERecord?id=CVE-2026-84130
- https://www.cve.org/CVERecord?id=CVE-2026-84131
- https://www.cve.org/CVERecord?id=CVE-2026-84132
- https://www.cve.org/CVERecord?id=CVE-2026-84133
- https://www.cve.org/CVERecord?id=CVE-2026-84134
- https://www.cve.org/CVERecord?id=CVE-2026-84136
- https://www.cve.org/CVERecord?id=CVE-2026-84137
- https://www.cve.org/CVERecord?id=CVE-2026-84139
- https://www.cve.org/CVERecord?id=CVE-2026-84140
- https://www.cve.org/CVERecord?id=CVE-2026-84141
- https://www.cve.org/CVERecord?id=CVE-2026-84143
- https://www.cve.org/CVERecord?id=CVE-2026-84144
- https://www.cve.org/CVERecord?id=CVE-2026-84145
- thunderbird-153.2.0-1.mga10
- thunderbird-l10n-153.2.0-1.mga10
- thunderbird-140.15.0-1.mga9
- thunderbird-l10n-140.15.0-1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0387 - Updated firefox & nss packages fix security vulnerabilities
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-75874 , CVE-2026-16365 , CVE-2026-84118 , CVE-2026-84119 , CVE-2026-84120 , CVE-2026-84121 , CVE-2026-84122 , CVE-2026-84123 , CVE-2026-84124 , CVE-2026-84125 , CVE-2026-74952 , CVE-2026-84129 , CVE-2026-16371 , CVE-2026-84130 , CVE-2026-84131 , CVE-2026-84132 , CVE-2026-84133 , CVE-2026-84134 , CVE-2026-84136 , CVE-2026-84137 , CVE-2026-84139 , CVE-2026-84140 , CVE-2026-84141 , CVE-2026-84143 , CVE-2026-84144 , CVE-2026-84145 Description
Sandbox escape in the Remote Settings Client component. (CVE-2026-75874) Privilege escalation in the DOM: Workers component. (CVE-2026-16365) Use-after-free in the JavaScript: GC component. (CVE-2026-84118) Sandbox escape due to use-after-free in the DOM: Navigation component. (CVE-2026-84119) Use-after-free in the Audio/Video component. (CVE-2026-84120) Sandbox escape due to use-after-free in the DOM: Security component. (CVE-2026-84121) Use-after-free in the Audio/Video component. (CVE-2026-84122) Privilege escalation due to use-after-free in the Graphics: WebGPU component. (CVE-2026-84123) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84124) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84125) Privilege escalation in the DOM: Navigation component. (CVE-2026-16371) Privilege escalation in the Application Update component. (CVE-2026-74952) Site isolation issue in the DOM: Navigation component. (CVE-2026-84129) Information disclosure in the Graphics: WebGPU component. (CVE-2026-84130) Privilege escalation due to invalid pointer in the Graphics component. (CVE-2026-84131) Information disclosure in the Networking: HTTP component. (CVE-2026-84132) Site isolation issue in the DOM: Push Subscriptions component. (CVE-2026-84133) Other issue in the Profile Backup component. (CVE-2026-84134) Other issue in the DOM: Navigation component. (CVE-2026-84136) Spoofing issue in the DOM: Core & HTML component. (CVE-2026-84137) Clickjacking issue in the DOM: Events component. (CVE-2026-84139) Site isolation issue in the DOM: Navigation component. (CVE-2026-84140) Integer overflow in the Graphics: ImageLib component. (CVE-2026-84141) Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15. (CVE-2026-84143) Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2. (CVE-2026-84144) Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40. (CVE-2026-84145) References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-75874 , CVE-2026-16365 , CVE-2026-84118 , CVE-2026-84119 , CVE-2026-84120 , CVE-2026-84121 , CVE-2026-84122 , CVE-2026-84123 , CVE-2026-84124 , CVE-2026-84125 , CVE-2026-74952 , CVE-2026-84129 , CVE-2026-16371 , CVE-2026-84130 , CVE-2026-84131 , CVE-2026-84132 , CVE-2026-84133 , CVE-2026-84134 , CVE-2026-84136 , CVE-2026-84137 , CVE-2026-84139 , CVE-2026-84140 , CVE-2026-84141 , CVE-2026-84143 , CVE-2026-84144 , CVE-2026-84145 Description
Sandbox escape in the Remote Settings Client component. (CVE-2026-75874) Privilege escalation in the DOM: Workers component. (CVE-2026-16365) Use-after-free in the JavaScript: GC component. (CVE-2026-84118) Sandbox escape due to use-after-free in the DOM: Navigation component. (CVE-2026-84119) Use-after-free in the Audio/Video component. (CVE-2026-84120) Sandbox escape due to use-after-free in the DOM: Security component. (CVE-2026-84121) Use-after-free in the Audio/Video component. (CVE-2026-84122) Privilege escalation due to use-after-free in the Graphics: WebGPU component. (CVE-2026-84123) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84124) Use-after-free in the DOM: Core & HTML component. (CVE-2026-84125) Privilege escalation in the DOM: Navigation component. (CVE-2026-16371) Privilege escalation in the Application Update component. (CVE-2026-74952) Site isolation issue in the DOM: Navigation component. (CVE-2026-84129) Information disclosure in the Graphics: WebGPU component. (CVE-2026-84130) Privilege escalation due to invalid pointer in the Graphics component. (CVE-2026-84131) Information disclosure in the Networking: HTTP component. (CVE-2026-84132) Site isolation issue in the DOM: Push Subscriptions component. (CVE-2026-84133) Other issue in the Profile Backup component. (CVE-2026-84134) Other issue in the DOM: Navigation component. (CVE-2026-84136) Spoofing issue in the DOM: Core & HTML component. (CVE-2026-84137) Clickjacking issue in the DOM: Events component. (CVE-2026-84139) Site isolation issue in the DOM: Navigation component. (CVE-2026-84140) Integer overflow in the Graphics: ImageLib component. (CVE-2026-84141) Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15. (CVE-2026-84143) Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2. (CVE-2026-84144) Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40. (CVE-2026-84145) References
- https://bugs.mageia.org/show_bug.cgi?id=36235
- https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_128.html
- https://www.firefox.com/en-US/firefox/140.15.0/releasenotes/
- https://www.firefox.com/en-US/firefox/153.2.0/releasenotes/
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/
- https://www.cve.org/CVERecord?id=CVE-2026-75874
- https://www.cve.org/CVERecord?id=CVE-2026-16365
- https://www.cve.org/CVERecord?id=CVE-2026-84118
- https://www.cve.org/CVERecord?id=CVE-2026-84119
- https://www.cve.org/CVERecord?id=CVE-2026-84120
- https://www.cve.org/CVERecord?id=CVE-2026-84121
- https://www.cve.org/CVERecord?id=CVE-2026-84122
- https://www.cve.org/CVERecord?id=CVE-2026-84123
- https://www.cve.org/CVERecord?id=CVE-2026-84124
- https://www.cve.org/CVERecord?id=CVE-2026-84125
- https://www.cve.org/CVERecord?id=CVE-2026-74952
- https://www.cve.org/CVERecord?id=CVE-2026-84129
- https://www.cve.org/CVERecord?id=CVE-2026-16371
- https://www.cve.org/CVERecord?id=CVE-2026-84130
- https://www.cve.org/CVERecord?id=CVE-2026-84131
- https://www.cve.org/CVERecord?id=CVE-2026-84132
- https://www.cve.org/CVERecord?id=CVE-2026-84133
- https://www.cve.org/CVERecord?id=CVE-2026-84134
- https://www.cve.org/CVERecord?id=CVE-2026-84136
- https://www.cve.org/CVERecord?id=CVE-2026-84137
- https://www.cve.org/CVERecord?id=CVE-2026-84139
- https://www.cve.org/CVERecord?id=CVE-2026-84140
- https://www.cve.org/CVERecord?id=CVE-2026-84141
- https://www.cve.org/CVERecord?id=CVE-2026-84143
- https://www.cve.org/CVERecord?id=CVE-2026-84144
- https://www.cve.org/CVERecord?id=CVE-2026-84145
- firefox-l10n-153.2.0-1.mga10
- firefox-153.2.0-1.mga10
- nss-3.128.0-1.mga10
- firefox-l10n-140.15.0-1.mga9
- firefox-140.15.0-1.mga9
- nss-3.128.0-1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0386 - Updated wget packages fix a security vulnerability
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-16599 Description
Denial of Service in GNU wget. (CVE-2026-16599) References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-16599 Description
Denial of Service in GNU wget. (CVE-2026-16599) References
- https://bugs.mageia.org/show_bug.cgi?id=36252
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QHO3CCUMDDJMZO4R4WSN3NU5L4OBEURT/
- https://cert.pl/en/posts/2026/08/CVE-2026-16599/
- https://www.cve.org/CVERecord?id=CVE-2026-16599
- wget-1.25.0-2.3.mga10
- wget-1.21.4-1.5.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0385 - Updated dovecot package fixes security vulnerabilities
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-33263 , CVE-2026-33607 , CVE-2026-27852 , CVE-2026-33606 , CVE-2026-33604 , CVE-2026-40014 , CVE-2026-40013 , CVE-2026-33605 , CVE-2026-40018 , CVE-2026-40019 , CVE-2026-40015 , CVE-2026-40017 , CVE-2026-40203 , CVE-2026-42007 , CVE-2026-40204 , CVE-2026-40205 , CVE-2026-42008 , CVE-2026-42395 , CVE-2026-42393 , CVE-2026-52681 , CVE-2026-42392 , CVE-2026-73208 , CVE-2026-73209 , CVE-2026-42391 , CVE-2026-52687 Description
submission-login: Panic when mail_max_userip_connections is reached: Panic: epoll_ctl(del, 8) failed: Bad file descriptor. (CVE-2026-33263) Dovecot IMAP LIST match_sub() Exponential Backtracking — CPU Denial of Service. (CVE-2026-33607) DoS by sending mail with bad header. (CVE-2026-27852) dsync: Mail content can cause dsync protocol injection. (CVE-2026-33606) SMTP Smuggling via Missing Dot-Stuffing After Bare Carriage Return. (CVE-2026-33604) IMAP THREAD REFERENCES O(N²) CPU DoS via Crafted References Header
(index-thread-links.c). (CVE-2026-40014) pigeonhole: Stack Buffer Underflow in Pigeonhole ManageSieve CHECKSCRIPT/PUTSCRIPT. (CVE-2026-40013) managesieve-login: Pre-auth crash. (CVE-2026-33605) MySQL multi-byte escaping wrong. (CVE-2026-40018) v2.4.3 regression: managesieve-login pre-auth infinite loop. (CVE-2026-40019) imap-hibernate can be crashed. (CVE-2026-40015) IMAP THREAD O(M³) CPU DoS via CRC32 Hash Collision in strmap (mail-index-strmap.c / hash2.c). (CVE-2026-40017) IMAP Compression Can Reveal Whether a Small Synced Email Body Matches Sender-Chosen Text. (CVE-2026-40203) Sieve editheader RCE. (CVE-2026-42007) acl: lda_mailbox_autocreate can bypass acl restrictions. (CVE-2026-40204) OAuth2 passdb scope enforcement bypass via OR semantics in remote validation path. (CVE-2026-40205) XCLIENT FORWARD= bare token not namespaced, allows nopassword injection via trusted proxy. (CVE-2026-42008) Single NUL-Byte XCLIENT FORWARD Payload Crashes. (CVE-2026-42395) doveadm_password or api key length can still be leaked with timing comparisons. (CVE-2026-42393) Sieve resource usage tracking lost when active script changes. (CVE-2026-52681) imap-urlauth leaks memory into user-visible error messages. (CVE-2026-42392) auth: db-oauth2: aud claim used as fallback for missing scope claim. (CVE-2026-73208) imap-login crash: Self-recursion on zero-output decompress chunks. (CVE-2026-73209) imap: Pre-login memory/CPU growth with ID command. (CVE-2026-42391) IMAP: COMPRESS ZSTD can cause excessive memory usage. (CVE-2026-52687) References
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-33263 , CVE-2026-33607 , CVE-2026-27852 , CVE-2026-33606 , CVE-2026-33604 , CVE-2026-40014 , CVE-2026-40013 , CVE-2026-33605 , CVE-2026-40018 , CVE-2026-40019 , CVE-2026-40015 , CVE-2026-40017 , CVE-2026-40203 , CVE-2026-42007 , CVE-2026-40204 , CVE-2026-40205 , CVE-2026-42008 , CVE-2026-42395 , CVE-2026-42393 , CVE-2026-52681 , CVE-2026-42392 , CVE-2026-73208 , CVE-2026-73209 , CVE-2026-42391 , CVE-2026-52687 Description
submission-login: Panic when mail_max_userip_connections is reached: Panic: epoll_ctl(del, 8) failed: Bad file descriptor. (CVE-2026-33263) Dovecot IMAP LIST match_sub() Exponential Backtracking — CPU Denial of Service. (CVE-2026-33607) DoS by sending mail with bad header. (CVE-2026-27852) dsync: Mail content can cause dsync protocol injection. (CVE-2026-33606) SMTP Smuggling via Missing Dot-Stuffing After Bare Carriage Return. (CVE-2026-33604) IMAP THREAD REFERENCES O(N²) CPU DoS via Crafted References Header
(index-thread-links.c). (CVE-2026-40014) pigeonhole: Stack Buffer Underflow in Pigeonhole ManageSieve CHECKSCRIPT/PUTSCRIPT. (CVE-2026-40013) managesieve-login: Pre-auth crash. (CVE-2026-33605) MySQL multi-byte escaping wrong. (CVE-2026-40018) v2.4.3 regression: managesieve-login pre-auth infinite loop. (CVE-2026-40019) imap-hibernate can be crashed. (CVE-2026-40015) IMAP THREAD O(M³) CPU DoS via CRC32 Hash Collision in strmap (mail-index-strmap.c / hash2.c). (CVE-2026-40017) IMAP Compression Can Reveal Whether a Small Synced Email Body Matches Sender-Chosen Text. (CVE-2026-40203) Sieve editheader RCE. (CVE-2026-42007) acl: lda_mailbox_autocreate can bypass acl restrictions. (CVE-2026-40204) OAuth2 passdb scope enforcement bypass via OR semantics in remote validation path. (CVE-2026-40205) XCLIENT FORWARD= bare token not namespaced, allows nopassword injection via trusted proxy. (CVE-2026-42008) Single NUL-Byte XCLIENT FORWARD Payload Crashes. (CVE-2026-42395) doveadm_password or api key length can still be leaked with timing comparisons. (CVE-2026-42393) Sieve resource usage tracking lost when active script changes. (CVE-2026-52681) imap-urlauth leaks memory into user-visible error messages. (CVE-2026-42392) auth: db-oauth2: aud claim used as fallback for missing scope claim. (CVE-2026-73208) imap-login crash: Self-recursion on zero-output decompress chunks. (CVE-2026-73209) imap: Pre-login memory/CPU growth with ID command. (CVE-2026-42391) IMAP: COMPRESS ZSTD can cause excessive memory usage. (CVE-2026-52687) References
- https://bugs.mageia.org/show_bug.cgi?id=36219
- https://www.openwall.com/lists/oss-security/2026/08/28/1
- https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html
- https://www.cve.org/CVERecord?id=CVE-2026-33263
- https://www.cve.org/CVERecord?id=CVE-2026-33607
- https://www.cve.org/CVERecord?id=CVE-2026-27852
- https://www.cve.org/CVERecord?id=CVE-2026-33606
- https://www.cve.org/CVERecord?id=CVE-2026-33604
- https://www.cve.org/CVERecord?id=CVE-2026-40014
- https://www.cve.org/CVERecord?id=CVE-2026-40013
- https://www.cve.org/CVERecord?id=CVE-2026-33605
- https://www.cve.org/CVERecord?id=CVE-2026-40018
- https://www.cve.org/CVERecord?id=CVE-2026-40019
- https://www.cve.org/CVERecord?id=CVE-2026-40015
- https://www.cve.org/CVERecord?id=CVE-2026-40017
- https://www.cve.org/CVERecord?id=CVE-2026-40203
- https://www.cve.org/CVERecord?id=CVE-2026-42007
- https://www.cve.org/CVERecord?id=CVE-2026-40204
- https://www.cve.org/CVERecord?id=CVE-2026-40205
- https://www.cve.org/CVERecord?id=CVE-2026-42008
- https://www.cve.org/CVERecord?id=CVE-2026-42395
- https://www.cve.org/CVERecord?id=CVE-2026-42393
- https://www.cve.org/CVERecord?id=CVE-2026-52681
- https://www.cve.org/CVERecord?id=CVE-2026-42392
- https://www.cve.org/CVERecord?id=CVE-2026-73208
- https://www.cve.org/CVERecord?id=CVE-2026-73209
- https://www.cve.org/CVERecord?id=CVE-2026-42391
- https://www.cve.org/CVERecord?id=CVE-2026-52687
- dovecot-2.4.5-2.mga10
Categorías: Actualizaciones de Seguridad
MGASA-2026-0384 - Updated spice-vdagent packages fix security vulnerabilities
Publication date: 09 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-57965 , CVE-2026-57966 Description
Integer overflow in udscs_write() leading to heap buffer overflow. (CVE-2026-57965) Path traversal in file transfer via unsanitized filename. (CVE-2026-57966) References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-57965 , CVE-2026-57966 Description
Integer overflow in udscs_write() leading to heap buffer overflow. (CVE-2026-57965) Path traversal in file transfer via unsanitized filename. (CVE-2026-57966) References
- https://bugs.mageia.org/show_bug.cgi?id=36257
- https://ubuntu.com/security/notices/USN-8723-1
- https://lists.debian.org/debian-lts-announce/2026/07/msg00040.html
- https://www.cve.org/CVERecord?id=CVE-2026-57965
- https://www.cve.org/CVERecord?id=CVE-2026-57966
- spice-vdagent-0.23.0-1.1.mga10
- spice-vdagent-0.22.1-2.1.mga9
Categorías: Actualizaciones de Seguridad
MGAA-2026-0122 - Updated python-intervaltree package fixes bug
Publication date: 09 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
python3-intervaltree have a missing requirement on python3-sortedcontainers, this produce that the python IDE Spyder crash at start. This update fixes the reported issue. References
SRPMS 10/core
Type: bugfix
Affected Mageia releases : 10
Description
python3-intervaltree have a missing requirement on python3-sortedcontainers, this produce that the python IDE Spyder crash at start. This update fixes the reported issue. References
SRPMS 10/core
- python-intervaltree-3.2.0-1.1.mga10
Categorías: Actualizaciones de Seguridad
MGASA-2026-0383 - Updated freerdp packages fix security vulnerabilities
Publication date: 08 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-22851 , CVE-2026-22853 , CVE-2026-22858 , CVE-2026-25941 , CVE-2026-25942 , CVE-2026-25952 , CVE-2026-25953 , CVE-2026-25954 , CVE-2026-25955 , CVE-2026-25959 , CVE-2026-25997 , CVE-2026-26952 , CVE-2026-33977 , CVE-2026-33982 , CVE-2026-33983 , CVE-2026-33984 , CVE-2026-33985 , CVE-2026-33986 , CVE-2026-33987 , CVE-2026-33995 , CVE-2026-27015 , CVE-2026-27951 , CVE-2026-40033 , CVE-2026-44420 , CVE-2026-44421 , CVE-2026-44422 , CVE-2026-45700 , CVE-2026-55191 , CVE-2026-55192 , CVE-2026-55193 , CVE-2026-55194 , CVE-2026-55648 Description
Updated packages bring lot of security fixes. Please see the links for additional information. References
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-22851 , CVE-2026-22853 , CVE-2026-22858 , CVE-2026-25941 , CVE-2026-25942 , CVE-2026-25952 , CVE-2026-25953 , CVE-2026-25954 , CVE-2026-25955 , CVE-2026-25959 , CVE-2026-25997 , CVE-2026-26952 , CVE-2026-33977 , CVE-2026-33982 , CVE-2026-33983 , CVE-2026-33984 , CVE-2026-33985 , CVE-2026-33986 , CVE-2026-33987 , CVE-2026-33995 , CVE-2026-27015 , CVE-2026-27951 , CVE-2026-40033 , CVE-2026-44420 , CVE-2026-44421 , CVE-2026-44422 , CVE-2026-45700 , CVE-2026-55191 , CVE-2026-55192 , CVE-2026-55193 , CVE-2026-55194 , CVE-2026-55648 Description
Updated packages bring lot of security fixes. Please see the links for additional information. References
- https://bugs.mageia.org/show_bug.cgi?id=35315
- https://github.com/FreeRDP/FreeRDP/releases#release-3.26.0
- https://github.com/FreeRDP/FreeRDP/releases#release-3.27.0
- https://github.com/FreeRDP/FreeRDP/releases#release-3.27.1
- https://github.com/FreeRDP/FreeRDP/releases#release-3.28.0
- https://github.com/FreeRDP/FreeRDP/releases#release-3.29.0
- https://github.com/FreeRDP/FreeRDP/releases#release-3.30.0
- https://github.com/FreeRDP/FreeRDP/releases#release-3.31.0
- https://www.cve.org/CVERecord?id=CVE-2026-22851
- https://www.cve.org/CVERecord?id=CVE-2026-22853
- https://www.cve.org/CVERecord?id=CVE-2026-22858
- https://www.cve.org/CVERecord?id=CVE-2026-25941
- https://www.cve.org/CVERecord?id=CVE-2026-25942
- https://www.cve.org/CVERecord?id=CVE-2026-25952
- https://www.cve.org/CVERecord?id=CVE-2026-25953
- https://www.cve.org/CVERecord?id=CVE-2026-25954
- https://www.cve.org/CVERecord?id=CVE-2026-25955
- https://www.cve.org/CVERecord?id=CVE-2026-25959
- https://www.cve.org/CVERecord?id=CVE-2026-25997
- https://www.cve.org/CVERecord?id=CVE-2026-26952
- https://www.cve.org/CVERecord?id=CVE-2026-33977
- https://www.cve.org/CVERecord?id=CVE-2026-33982
- https://www.cve.org/CVERecord?id=CVE-2026-33983
- https://www.cve.org/CVERecord?id=CVE-2026-33984
- https://www.cve.org/CVERecord?id=CVE-2026-33985
- https://www.cve.org/CVERecord?id=CVE-2026-33986
- https://www.cve.org/CVERecord?id=CVE-2026-33987
- https://www.cve.org/CVERecord?id=CVE-2026-33995
- https://www.cve.org/CVERecord?id=CVE-2026-27015
- https://www.cve.org/CVERecord?id=CVE-2026-27951
- https://www.cve.org/CVERecord?id=CVE-2026-40033
- https://www.cve.org/CVERecord?id=CVE-2026-44420
- https://www.cve.org/CVERecord?id=CVE-2026-44421
- https://www.cve.org/CVERecord?id=CVE-2026-44422
- https://www.cve.org/CVERecord?id=CVE-2026-45700
- https://www.cve.org/CVERecord?id=CVE-2026-55191
- https://www.cve.org/CVERecord?id=CVE-2026-55192
- https://www.cve.org/CVERecord?id=CVE-2026-55193
- https://www.cve.org/CVERecord?id=CVE-2026-55194
- https://www.cve.org/CVERecord?id=CVE-2026-55648
- freerdp-3.31.0-1.mga10
Categorías: Actualizaciones de Seguridad
MGASA-2026-0382 - Updated tor packages fix security vulnerabilities
Publication date: 08 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-77584 , CVE-2026-77587 , CVE-2026-77638 , CVE-2026-77639 , CVE-2026-77640 , CVE-2026-77641 , CVE-2026-77642 Description
An out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type (CVE-2026-77642). A NULL write after free when sending a CONFLUX_SWITCH cell fails, resulting in a crash (CVE-2026-77641). An infinite loop when decompressing a truncated zlib/gzip stream with done=1 (CVE-2026-77640). A compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams (CVE-2026-77639). A race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach (CVE-2026-77638). A use-after-free that a malicious exit node could use to crash a client (CVE-2026-77587). Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams (CVE-2026-77584). References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-77584 , CVE-2026-77587 , CVE-2026-77638 , CVE-2026-77639 , CVE-2026-77640 , CVE-2026-77641 , CVE-2026-77642 Description
An out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type (CVE-2026-77642). A NULL write after free when sending a CONFLUX_SWITCH cell fails, resulting in a crash (CVE-2026-77641). An infinite loop when decompressing a truncated zlib/gzip stream with done=1 (CVE-2026-77640). A compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams (CVE-2026-77639). A race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach (CVE-2026-77638). A use-after-free that a malicious exit node could use to crash a client (CVE-2026-77587). Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams (CVE-2026-77584). References
- https://bugs.mageia.org/show_bug.cgi?id=36213
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/J3OOWWFCIOAR7SCIVWYWCHHV6G2BGSPN/
- https://lists.debian.org/debian-security-announce/2026/msg00283.html
- https://www.cve.org/CVERecord?id=CVE-2026-77584
- https://www.cve.org/CVERecord?id=CVE-2026-77587
- https://www.cve.org/CVERecord?id=CVE-2026-77638
- https://www.cve.org/CVERecord?id=CVE-2026-77639
- https://www.cve.org/CVERecord?id=CVE-2026-77640
- https://www.cve.org/CVERecord?id=CVE-2026-77641
- https://www.cve.org/CVERecord?id=CVE-2026-77642
- tor-0.4.9.11-1.mga10
- tor-0.4.9.11-1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0381 - Updated apache-mod_auth_openidc packages fix a security vulnerability
Publication date: 07 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-54789 Description
Out-of-bounds read and write in state cookie parsing. (CVE-2026-54789) References
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-54789 Description
Out-of-bounds read and write in state cookie parsing. (CVE-2026-54789) References
- https://bugs.mageia.org/show_bug.cgi?id=36209
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/DJLYJS22XN3IFTMN7F46SPHFLF7J6355/
- https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-vgr5-qcpp-x2pr
- https://www.cve.org/CVERecord?id=CVE-2026-54789
- apache-mod_auth_openidc-2.4.20.2-1.mga10
- apache-mod_auth_openidc-2.4.20.2-1.mga9
Categorías: Actualizaciones de Seguridad
MGASA-2026-0380 - Updated python-pyasn1 packages fix security vulnerabilities
Publication date: 07 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-59884 , CVE-2026-59885 , CVE-2026-59886 Description
The BER decoder (shared by the CER and DER codecs) parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a ~1 MB input consumes over a minute of CPU. On Python 3.11+, the oversized tag ID can also trigger an unhandled ValueError (integer string conversion limit) while the decoder formats error messages, violating the documented PyAsn1Error contract and potentially bypassing caller error handling. References
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-59884 , CVE-2026-59885 , CVE-2026-59886 Description
The BER decoder (shared by the CER and DER codecs) parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a ~1 MB input consumes over a minute of CPU. On Python 3.11+, the oversized tag ID can also trigger an unhandled ValueError (integer string conversion limit) while the decoder formats error messages, violating the documented PyAsn1Error contract and potentially bypassing caller error handling. References
- https://bugs.mageia.org/show_bug.cgi?id=36249
- https://ubuntu.com/security/notices/USN-8712-1
- https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j
- https://www.cve.org/CVERecord?id=CVE-2026-59884
- https://www.cve.org/CVERecord?id=CVE-2026-59885
- https://www.cve.org/CVERecord?id=CVE-2026-59886
- python-pyasn1-0.6.4-1.mga10
Categorías: Actualizaciones de Seguridad
MGASA-2026-0379 - Updated exiv2 package fixes security vulnerabilities
Publication date: 07 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-68546 , CVE-2026-68547 , CVE-2026-49275 Description
Heap out-of-bounds write in RemoteIo when reading from a malicious remote server (WebReady/Curl builds). (CVE-2026-68546) Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. (CVE-2026-68547) Out of bounds read in CrwMap::decodeBasic. (CVE-2026-49275) References
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-68546 , CVE-2026-68547 , CVE-2026-49275 Description
Heap out-of-bounds write in RemoteIo when reading from a malicious remote server (WebReady/Curl builds). (CVE-2026-68546) Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. (CVE-2026-68547) Out of bounds read in CrwMap::decodeBasic. (CVE-2026-49275) References
- https://bugs.mageia.org/show_bug.cgi?id=36221
- https://www.openwall.com/lists/oss-security/2026/08/30/1
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-3695-mjv8-3r52
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-jcgh-p9v3-pw6j
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-hxph-pv7w-8649
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-vg6c-9f6h-4x5q
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-9v3x-mhg4-wwv2
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-fgw8-p7pr-37cp
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-pwvq-9w4q-786w
- https://www.cve.org/CVERecord?id=CVE-2026-68546
- https://www.cve.org/CVERecord?id=CVE-2026-68547
- https://www.cve.org/CVERecord?id=CVE-2026-49275
- exiv2-0.28.9-1.mga10
Categorías: Actualizaciones de Seguridad
MGAA-2026-0121 - Updated radiotray-ng package fixes bug
Publication date: 07 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
Update the stream links for "KDFC", "CINEMIX", "Radio Paradise", and remove the offline "WNAR-AM Radio" station. References
SRPMS 10/core
Type: bugfix
Affected Mageia releases : 10
Description
Update the stream links for "KDFC", "CINEMIX", "Radio Paradise", and remove the offline "WNAR-AM Radio" station. References
SRPMS 10/core
- radiotray-ng-0.2.10-1.mga10
Categorías: Actualizaciones de Seguridad
