Lector de Feeds

Publication date: 21 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-86145 Description
Out-of-bounds write in pcre2_dfa_match() with recursive patterns under a low heap limit (CVE-2026-86145). References

• https://bugs.mageia.org/show_bug.cgi?id=36263
• https://www.openwall.com/lists/oss-security/2026/09/04/7
• https://www.openwall.com/lists/oss-security/2026/09/05/3
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf
• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9
• https://www.cve.org/CVERecord?id=CVE-2026-86145

SRPMS 10/core

• pcre2-10.48-1.mga10

9/core

• pcre2-10.48-1.mga9

Publication date: 21 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
The conda version we had was not ready for Python 3.13. This update allows it to be compatible, with updates of msgpack and pluggy too. References

• https://bugs.mageia.org/show_bug.cgi?id=36305
• https://github.com/conda/conda/issues/14439

SRPMS 10/core

• conda-26.5.3-1.mga10
• python-msgpack-1.2.2-1.mga10
• python-pluggy-1.6.0-1.mga10