Lector de Feeds

Publication date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-91752 , CVE-2026-100310 Description
GNU libextractor before 1.15 Stack Overflow via OLE2. (CVE-2026-91752) GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX. (CVE-2026-100310) References

• https://bugs.mageia.org/show_bug.cgi?id=36327
• https://www.openwall.com/lists/oss-security/2026/09/16/16
• https://www.vulncheck.com/advisories/gnu-libextractor-before-1.15-stack-overflow-via-ole2
• https://www.openwall.com/lists/oss-security/2026/09/25/25
• https://www.vulncheck.com/advisories/gnu-libextractor-before-1.16-privilege-escalation-via-libextractor-prefix
• https://www.cve.org/CVERecord?id=CVE-2026-91752
• https://www.cve.org/CVERecord?id=CVE-2026-100310

SRPMS 10/core

• libextractor-1.16-1.mga10

Publication date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-55453 , CVE-2026-55467 , CVE-2026-55480 , CVE-2026-61702 , CVE-2026-87875 , CVE-2026-87876 , CVE-2026-105326 Description
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip. (CVE-2026-55453) CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix). (CVE-2026-55467) copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW. (CVE-2026-55480) root-side banner file disclosure. (CVE-2026-61702) Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length bound — reachable from SNMP supply-description parsing (backend/snmp-supplies.c). (CVE-2026-87875) CVE-2026-27447 follow-up: remaining case-insensitive username matching in scheduler side paths. (CVE-2026-87876) Argument injection in mailto notifier allows unauthenticated remote code execution. (CVE-2026-105326) References

• https://bugs.mageia.org/show_bug.cgi?id=36331
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KX5YFUOJ5JKV64QGD4WMERKGBI43OV3M/
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq
• https://www.openwall.com/lists/oss-security/2026/10/05/6
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-7j85-5r23-xhvh
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-fw7q-ww8w-phx8
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-gj33-wxpv-6fgg
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-r4wf-366f-f6g3
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22
• https://www.cve.org/CVERecord?id=CVE-2026-55453
• https://www.cve.org/CVERecord?id=CVE-2026-55467
• https://www.cve.org/CVERecord?id=CVE-2026-55480
• https://www.cve.org/CVERecord?id=CVE-2026-61702
• https://www.cve.org/CVERecord?id=CVE-2026-87875
• https://www.cve.org/CVERecord?id=CVE-2026-87876
• https://www.cve.org/CVERecord?id=CVE-2026-105326

SRPMS 10/core

• cups-2.4.20-1.mga10

Publication date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
Description
Heap buffer overflow in ntfs_acl_owner() Heap buffer overflow in ntfs_same_sid() Denial-of-service in ntfs_inode_attach_all_extents() Heap buffer overflow in ntfs_check_restart_area() Heap buffer overflow in ntfs_ea_check_wsldev() Heap buffer overflow in ntfs_external_attr_find() Heap data corruption in ntfs_mapping_pairs_decompress_i() Heap out of bounds read/write in ntfs_ie_add_vcn() References

• https://bugs.mageia.org/show_bug.cgi?id=36366
• https://www.openwall.com/lists/oss-security/2026/09/23/4

SRPMS 10/core

• ntfs-3g-2026.2.25-1.2.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-84782 , CVE-2026-35189 , CVE-2026-35191 , CVE-2026-42772 , CVE-2026-54872 , CVE-2026-54873 , CVE-2026-54875 , CVE-2026-72897 , CVE-2026-75804 , CVE-2026-75805 , CVE-2026-75806 , CVE-2026-77696 , CVE-2026-84784 Description
DTLS Retransmits Handshake Messages From a Stale Buffer Offset. (CVE-2026-84782) Excessive Memory Allocation in Relative CRLDP Processing. (CVE-2026-35189) QUIC Unvalidated Amplification Credit may be Over Accounted. (CVE-2026-35191) Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC. (CVE-2026-42772) Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves. (CVE-2026-54872) QUIC STREAM Fragment Metadata DoS. (CVE-2026-54873) Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V. (CVE-2026-54875) Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake. (CVE-2026-72897) QUIC Connection-Level Flow Control is Not Enforced for Streams. (CVE-2026-75804) NULL Pointer Dereference in CMP Client Revocation Response Handling. (CVE-2026-75805) Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS. (CVE-2026-75806) Timing Side-Channel in SM2 Signature Generation. (CVE-2026-77696) QUIC: Unbounded RETIRE_CONNECTION_ID Backlog. (CVE-2026-84784) References

• https://bugs.mageia.org/show_bug.cgi?id=36358
• https://www.openwall.com/lists/oss-security/2026/09/22/7
• https://www.openwall.com/lists/oss-security/2026/09/29/28
• https://lists.debian.org/debian-security-announce/2026/msg00444.html
• https://ubuntu.com/security/notices/USN-8847-1
• https://ubuntu.com/security/notices/USN-8861-1
• https://www.cve.org/CVERecord?id=CVE-2026-84782
• https://www.cve.org/CVERecord?id=CVE-2026-35189
• https://www.cve.org/CVERecord?id=CVE-2026-35191
• https://www.cve.org/CVERecord?id=CVE-2026-42772
• https://www.cve.org/CVERecord?id=CVE-2026-54872
• https://www.cve.org/CVERecord?id=CVE-2026-54873
• https://www.cve.org/CVERecord?id=CVE-2026-54875
• https://www.cve.org/CVERecord?id=CVE-2026-72897
• https://www.cve.org/CVERecord?id=CVE-2026-75804
• https://www.cve.org/CVERecord?id=CVE-2026-75805
• https://www.cve.org/CVERecord?id=CVE-2026-75806
• https://www.cve.org/CVERecord?id=CVE-2026-77696
• https://www.cve.org/CVERecord?id=CVE-2026-84784

SRPMS 10/core

• openssl-3.5.9-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94422 Description
Message filtering bypass via reply serial. (CVE-2026-94422) References

• https://bugs.mageia.org/show_bug.cgi?id=36369
• https://www.openwall.com/lists/oss-security/2026/09/23/5
• https://github.com/flatpak/xdg-dbus-proxy/security/advisories/GHSA-2cgv-pwcq-wvpq
• https://lists.debian.org/debian-security-announce/2026/msg00422.html
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NKG63P7KLUREATNV6YUAI7RWYLCWSR6R/
• https://www.cve.org/CVERecord?id=CVE-2026-94422

SRPMS 10/core

• xdg-dbus-proxy-0.1.9-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-73581 , CVE-2026-75973 , CVE-2026-76183 , CVE-2026-77756 , CVE-2026-77762 , CVE-2026-77791 , CVE-2026-78383 , CVE-2026-78437 , CVE-2026-79677 , CVE-2026-86248 , CVE-2026-86350 , CVE-2026-87022 Description
OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. (CVE-2026-73581) Cross-context authentication mix-up with Jakarta Authentication configured. (CVE-2026-75973) Bypass of security constraints for WebSocket endpoints. (CVE-2026-76183) Transfer-Encoding honored for HTTP/1.0 requests. (CVE-2026-77756) Stale HPACK emitter injects trailers into recycled pooled Request. (CVE-2026-77762) DoS via busy wait during WebSocket close. (CVE-2026-77791) AJP DoS via missing request body. (CVE-2026-78383) HTTP/2 DoS via malformed request. (CVE-2026-78437) WebSocket DoS due to lost asynchronous write timeout. (CVE-2026-79677) Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled. (CVE-2026-86248) Regression in fix for CVE-2026-41293 can trigger request header mix-up. (CVE-2026-86350) WebSocket message smuggling with per-message-deflate. (CVE-2026-87022) References

• https://bugs.mageia.org/show_bug.cgi?id=36370
• https://www.openwall.com/lists/oss-security/2026/09/23/19
• https://www.openwall.com/lists/oss-security/2026/09/23/20
• https://www.openwall.com/lists/oss-security/2026/09/23/21
• https://www.openwall.com/lists/oss-security/2026/09/23/22
• https://www.openwall.com/lists/oss-security/2026/09/23/23
• https://www.openwall.com/lists/oss-security/2026/09/23/24
• https://www.openwall.com/lists/oss-security/2026/09/23/25
• https://www.openwall.com/lists/oss-security/2026/09/23/26
• https://www.openwall.com/lists/oss-security/2026/09/23/27
• https://www.openwall.com/lists/oss-security/2026/09/23/28
• https://www.openwall.com/lists/oss-security/2026/09/23/29
• https://www.openwall.com/lists/oss-security/2026/09/23/30
• https://www.cve.org/CVERecord?id=CVE-2026-73581
• https://www.cve.org/CVERecord?id=CVE-2026-75973
• https://www.cve.org/CVERecord?id=CVE-2026-76183
• https://www.cve.org/CVERecord?id=CVE-2026-77756
• https://www.cve.org/CVERecord?id=CVE-2026-77762
• https://www.cve.org/CVERecord?id=CVE-2026-77791
• https://www.cve.org/CVERecord?id=CVE-2026-78383
• https://www.cve.org/CVERecord?id=CVE-2026-78437
• https://www.cve.org/CVERecord?id=CVE-2026-79677
• https://www.cve.org/CVERecord?id=CVE-2026-86248
• https://www.cve.org/CVERecord?id=CVE-2026-86350
• https://www.cve.org/CVERecord?id=CVE-2026-87022

SRPMS 10/core

• tomcat-9.0.122-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86145 , CVE-2026-103111 Description
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API). (CVE-2026-86145) PCRE2: out-of-bounds write in JIT matching with large stack allocations. (CVE-2026-103111) References

• https://bugs.mageia.org/show_bug.cgi?id=36377
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4WZRH5FLU3A6ZQIPE6WRM7UV7K6S6UHP/
• https://www.openwall.com/lists/oss-security/2026/09/29/2
• https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
• https://lists.debian.org/debian-security-announce/2026/msg00443.html
• https://www.cve.org/CVERecord?id=CVE-2026-86145
• https://www.cve.org/CVERecord?id=CVE-2026-103111

SRPMS 10/core

• mingw-pcre2-10.49-1.mga10
• pcre2-10.49-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-97023 , CVE-2026-97024 , CVE-2026-97025 , CVE-2026-97026 , CVE-2026-97027 , CVE-2026-97029 Description
Arbitrary file deletion in root context via path traversal in deploy directory export/bin. (CVE-2026-97023) Arbitrary write in root context via path traversal in deploy directory files/etc. (CVE-2026-97024) World-readable oci authentication token in system-helper cache path. (CVE-2026-97025) World-writable temporary child repositories in system-helper cache path. (CVE-2026-97026) Denial of service via unsanitized keys in exported desktop entry / d-bus service files. (CVE-2026-97027) Sandboxed app can signal unsandboxed processes in the same process group. (CVE-2026-97029) References

• https://bugs.mageia.org/show_bug.cgi?id=36401
• https://www.openwall.com/lists/oss-security/2026/09/28/6
• https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf
• https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54
• https://github.com/flatpak/flatpak/security/advisories/GHSA-7rvf-rqr3-43j4
• https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8
• https://github.com/flatpak/flatpak/security/advisories/GHSA-v64f-hrwr-j4vh
• https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2
• https://lists.debian.org/debian-security-announce/2026/msg00437.html
• https://www.cve.org/CVERecord?id=CVE-2026-97023
• https://www.cve.org/CVERecord?id=CVE-2026-97024
• https://www.cve.org/CVERecord?id=CVE-2026-97025
• https://www.cve.org/CVERecord?id=CVE-2026-97026
• https://www.cve.org/CVERecord?id=CVE-2026-97027
• https://www.cve.org/CVERecord?id=CVE-2026-97029

SRPMS 10/core

• flatpak-1.16.6-1.2.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86243 , CVE-2026-86246 , CVE-2026-86247 Description
DoS via TLS handshake. (CVE-2026-86243) Insecure OpenSSL options enabled. (CVE-2026-86246) Client certificate requirements can be down-graded. (CVE-2026-86247) References

• https://bugs.mageia.org/show_bug.cgi?id=36469
• https://www.openwall.com/lists/oss-security/2026/09/23/31
• https://lists.apache.org/thread/8p4jf02w54m22x0cwpq2x53w3ov8o557
• https://www.openwall.com/lists/oss-security/2026/09/23/32
• https://lists.apache.org/thread/dgyvfwb24nbk45ptvlhdyhdhl5o7k5ol
• https://www.openwall.com/lists/oss-security/2026/09/23/33
• https://lists.apache.org/thread/obsson6zhvfg0wsp2bx602l61ltj87r1
• https://www.cve.org/CVERecord?id=CVE-2026-86243
• https://www.cve.org/CVERecord?id=CVE-2026-86246
• https://www.cve.org/CVERecord?id=CVE-2026-86247

SRPMS 10/core

• tomcat-native-1.3.9-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-54634 Description
Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw() in tests/rigctl_parse.c, which writes a NUL byte at buf[buf_len + 1] outside its 200-byte stack buffer, and rig_send_raw() in src/rig.c, which copies reply_len - 1 bytes instead of the actual nbytes received. A remote client can send the CR terminator with a short payload to trigger both flaws in one command under the default no-password configuration. The out-of-bounds write can crash the daemon or corrupt adjacent stack memory, while the oversized copy can return up to 198 bytes of uninitialized stack data to the client. This issue is fixed in version 4.7.2. References

• https://bugs.mageia.org/show_bug.cgi?id=35756
• https://www.cve.org/CVERecord?id=CVE-2026-54634

SRPMS 10/core

• hamlib-4.7.2-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-32239 , CVE-2026-32240 Description
A negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead (CVE-2026-32239). When using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer (CVE-2026-32240). References

• https://bugs.mageia.org/show_bug.cgi?id=36190
• https://ubuntu.com/security/notices/USN-8650-1
• https://github.com/capnproto/capnproto/security/advisories/GHSA-qjx3-pp3m-9jpm
• https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm
• https://www.cve.org/CVERecord?id=CVE-2026-32239
• https://www.cve.org/CVERecord?id=CVE-2026-32240

SRPMS 10/core

• capnproto-1.5.0-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-78136 Description
CHIRP — Arbitrary Code Execution via eval() in Kenwood ITM Driver References

• https://bugs.mageia.org/show_bug.cgi?id=36278
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJ6SIERICON7N75T5BO4GAWZ2WSJTQK4/
• https://github.com/cduram/CHIRP-CodeExecution_via_Malicious_ImageFile
• https://github.com/kk7ds/chirp/commit/39178dbfc4fece083ab9ed20286d6ae3a91a718e
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ON7ELO5JWTMNPI6AGJ5VGCQ54D2YEMA5/
• https://www.cve.org/CVERecord?id=CVE-2026-78136

SRPMS 10/core

• chirp-20260925-1.mga10

Publication date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-50811 Description
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates. (CVE-2026-50811) References

• https://bugs.mageia.org/show_bug.cgi?id=35931
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZFL5DU5VYR7IO6AIBJXA3PU262H5MJCS/
• https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1436
• https://ubuntu.com/security/notices/USN-8562-1
• https://www.cve.org/CVERecord?id=CVE-2026-50811

SRPMS 10/tainted

• freetype2-2.14.2-1.1.mga10.tainted

Publication date: 09 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
The updated package brings the support for ARM64 architecture on Linux and MacOS. Moreover, it includes support for 3mf, several bugfixes and improvements. References

• https://bugs.mageia.org/show_bug.cgi?id=36447
• https://www.meshlab.net/#news

SRPMS 10/core

• meshlab-2025.07-1.mga10

Publication date: 08 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-59679 , CVE-2026-44950 Description
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2. (CVE-2026-44950) fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2. (CVE-2026-59679) References

• https://bugs.mageia.org/show_bug.cgi?id=36174
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NP3ZEUVKBUAKXYPBOSJNJAGWTMNRTSSG/
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PTGMTNHE2PKU34GA4TVT54ZYUWSQDO6P/
• https://www.cve.org/CVERecord?id=CVE-2026-59679
• https://www.cve.org/CVERecord?id=CVE-2026-44950

SRPMS 10/core

• libxfont2-2.0.9-1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
nfsdclnts requires python3-pyyaml to work. This update add the missing requirement to nfs-utils References

• https://bugs.mageia.org/show_bug.cgi?id=36335

SRPMS 10/core

• nfs-utils-2.8.3-2.1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
marnav is updated to version 0.14.1. References

• https://bugs.mageia.org/show_bug.cgi?id=36399
• https://github.com/mariokonrad/marnav/releases/tag/v0.14.1

SRPMS 10/core

• marnav-0.14.1-1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
This version 5.14.2 of OpenCPN is a maintenance release of the previous version 5.14.0 as usually such a maintenance release is provided some time after the main release has been published. It brings some corrections and improvements needed after user reports. References

• https://bugs.mageia.org/show_bug.cgi?id=36433
• https://opencpn.org/

SRPMS 10/core

• opencpn-5.14.2-1.mga10

Publication date: 08 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
This new version 1.2.35 now allows the use of jack with pipewire in addition to the use with pulseaudio (the previous version 1.2.34 allowed only the use of jack with pulseaudio). References

• https://bugs.mageia.org/show_bug.cgi?id=36434
• https://lsp-plug.in/

SRPMS 10/core

• lsp-plugins-1.2.35-1.mga10

Publication date: 07 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
vokoscreenNG requires the openh264 & gif gstreamer components. We now provide openh264 packages from the noopenh264 sources, packages generated from rust-gst-plugin-gif and update gstreamer1.0-plugins-bad to generate the missing components. Note: gstreamer1.0-openh264 should be installed by hand if you do not have tainted repositories enabled before the update. References

• https://bugs.mageia.org/show_bug.cgi?id=36097
• https://forums.mageia.org/en/viewtopic.php?t=15995

SRPMS 10/core

• rust-gst-plugin-gif-0.14.5-1.1.mga10
• vokoscreenNG-4.8.3-1.1.mga10
• gstreamer1.0-plugins-bad-1.26.11-3.1.mga10

10/tainted

• noopenh264-2.6.0-1.mga10.tainted
• gstreamer1.0-plugins-bad-1.26.11-3.1.mga10.tainted