Mageia Security

Publication date: 22 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-82474 , CVE-2026-96512 Description
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. (CVE-2026-82474) tz environment variable allows bypass of notbefore/notafter time-based authorization. (CVE-2026-96512) References

• https://bugs.mageia.org/show_bug.cgi?id=36362
• https://ubuntu.com/security/notices/USN-8803-1
• https://www.openwall.com/lists/oss-security/2026/09/24/4
• https://access.redhat.com/security/cve/CVE-2026-96512
• https://bugzilla.redhat.com/show_bug.cgi?id=2539327
• https://www.cve.org/CVERecord?id=CVE-2026-82474
• https://www.cve.org/CVERecord?id=CVE-2026-96512

SRPMS 10/core

• sudo-1.9.17p1-2.1.mga10

Publication date: 22 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-109618 , CVE-2026-109619 Description
Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible. References

• https://bugs.mageia.org/show_bug.cgi?id=36558
• https://www.php.net/archive/2026.php#2026-10-21-5
• https://www.cve.org/CVERecord?id=CVE-2026-109618
• https://www.cve.org/CVERecord?id=CVE-2026-109619

SRPMS 10/core

• php8.4-8.4.27-1.1.mga10
• php8.5-8.5.12-1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-88812 , CVE-2026-93515 , CVE-2026-93516 , CVE-2026-93517 , CVE-2026-93518 , CVE-2026-93519 , CVE-2026-93520 , CVE-2026-93521 , CVE-2026-93522 , CVE-2026-93523 , CVE-2026-93524 , CVE-2026-93536 Description
XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812) Present Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515) XInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516) GLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517) XKB ResizeKeyType Numeric Truncation. (CVE-2026-93518) XFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519) XKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520) RandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521) Glamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522) XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write. (CVE-2026-93523) XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read. (CVE-2026-93524) GestureBuildSprite Use-After-Free. (CVE-2026-93536) References

• https://bugs.mageia.org/show_bug.cgi?id=36467
• https://www.openwall.com/lists/oss-security/2026/10/07/23
• https://bugs.mageia.org/show_bug.cgi?id=36488
• https://www.cve.org/CVERecord?id=CVE-2026-88812
• https://www.cve.org/CVERecord?id=CVE-2026-93515
• https://www.cve.org/CVERecord?id=CVE-2026-93516
• https://www.cve.org/CVERecord?id=CVE-2026-93517
• https://www.cve.org/CVERecord?id=CVE-2026-93518
• https://www.cve.org/CVERecord?id=CVE-2026-93519
• https://www.cve.org/CVERecord?id=CVE-2026-93520
• https://www.cve.org/CVERecord?id=CVE-2026-93521
• https://www.cve.org/CVERecord?id=CVE-2026-93522
• https://www.cve.org/CVERecord?id=CVE-2026-93523
• https://www.cve.org/CVERecord?id=CVE-2026-93524
• https://www.cve.org/CVERecord?id=CVE-2026-93536

SRPMS 10/core

• x11-server-21.1.25-2.mga10
• x11-server-xwayland-24.1.14-1.mga10
• tigervnc-1.15.0-7.3.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94286 Description
Out-of-bounds read in libXtst's RECORD reply parser. (CVE-2026-94286) References

• https://bugs.mageia.org/show_bug.cgi?id=36451
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QZFYBLNVDL6SO35IRJEHPL6F5QAKZ6GB/
• https://www.cve.org/CVERecord?id=CVE-2026-94286

SRPMS 10/core

• libxtst-1.2.5-2.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-94287 Description
Denial of service via unsigned underflow in libXpm's write path. (CVE-2026-94287) References

• https://bugs.mageia.org/show_bug.cgi?id=36450
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/K7VZ2AXP776DE3BBHUU44LSZH4BNWXRF/
• https://ubuntu.com/security/notices/USN-8862-1
• https://www.cve.org/CVERecord?id=CVE-2026-94287

SRPMS 10/core

• libxpm-3.5.19-1.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-93541 , CVE-2026-93542 , CVE-2026-93543 , CVE-2026-93544 , CVE-2026-93545 , CVE-2026-94281 , CVE-2026-94282 Description
Out-of-bounds read in libXi's XQueryDeviceState(). (CVE-2026-93541) Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes(). (CVE-2026-93542) Out-of-bounds read in libXi's XI2 class parser. (CVE-2026-93543) Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing. (CVE-2026-93544) Out-of-bounds read in libXi's XListInputDevices(). (CVE-2026-93545) Out-of-bounds read in libXi's XListInputDevices() class parsing. (CVE-2026-94281) Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion. (CVE-2026-94282) References

• https://bugs.mageia.org/show_bug.cgi?id=36449
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2JXZPB52ROWMGP2VLGNYLYMGSTZQNEIA/
• https://www.cve.org/CVERecord?id=CVE-2026-93541
• https://www.cve.org/CVERecord?id=CVE-2026-93542
• https://www.cve.org/CVERecord?id=CVE-2026-93543
• https://www.cve.org/CVERecord?id=CVE-2026-93544
• https://www.cve.org/CVERecord?id=CVE-2026-93545
• https://www.cve.org/CVERecord?id=CVE-2026-94281
• https://www.cve.org/CVERecord?id=CVE-2026-94282

SRPMS 10/core

• libxi-1.8.2-2.1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-106564 , CVE-2026-106565 , CVE-2026-106566 , CVE-2026-106567 , CVE-2026-106568 , CVE-2026-106569 , CVE-2026-106570 Description
Please see the references. References

• https://bugs.mageia.org/show_bug.cgi?id=36412
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r
• https://www.cve.org/CVERecord?id=CVE-2026-106564
• https://www.cve.org/CVERecord?id=CVE-2026-106565
• https://www.cve.org/CVERecord?id=CVE-2026-106566
• https://www.cve.org/CVERecord?id=CVE-2026-106567
• https://www.cve.org/CVERecord?id=CVE-2026-106568
• https://www.cve.org/CVERecord?id=CVE-2026-106569
• https://www.cve.org/CVERecord?id=CVE-2026-106570

SRPMS 10/core

• imagemagick-7.1.2.32-1.mga10

10/tainted

• imagemagick-7.1.2.32-1.mga10.tainted

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-73515 Description
PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. (CVE-2026-73515) References

• https://bugs.mageia.org/show_bug.cgi?id=36406
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73KG56KPJQTU3M7K3HOTNQUAINTCIRDD/
• https://www.cve.org/CVERecord?id=CVE-2026-73515

SRPMS 10/core

• postgis-3.6.4-1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-110249 , CVE-2026-109704 , CVE-2026-109705 , CVE-2026-109706 , CVE-2026-109707 , CVE-2026-109708 , CVE-2026-109709 , CVE-2026-109710 , CVE-2026-109711 , CVE-2026-109712 , CVE-2026-109713 , CVE-2026-109715 , CVE-2026-109716 , CVE-2026-109717 , CVE-2026-109718 , CVE-2026-109719 , CVE-2026-109720 , CVE-2026-109721 , CVE-2026-109722 , CVE-2026-109723 , CVE-2026-109724 , CVE-2026-109725 , CVE-2026-109726 , CVE-2026-109727 , CVE-2026-109728 , CVE-2026-109729 , CVE-2026-109730 , CVE-2026-109731 , CVE-2026-109732 , CVE-2026-109733 , CVE-2026-109734 , CVE-2026-109736 , CVE-2026-109737 , CVE-2026-109738 , CVE-2026-109740 , CVE-2026-109741 , CVE-2026-109742 , CVE-2026-109743 , CVE-2026-109744 , CVE-2026-109745 , CVE-2026-109751 , CVE-2026-109752 , CVE-2026-109753 , CVE-2026-109754 , CVE-2026-109756 , CVE-2026-109757 , CVE-2026-109759 , CVE-2026-109760 , CVE-2026-109762 , CVE-2026-109763 , CVE-2026-109764 , CVE-2026-109765 , CVE-2026-109766 , CVE-2026-109767 , CVE-2026-109770 , CVE-2026-109775 , CVE-2026-109776 , CVE-2026-109777 , CVE-2026-109778 , CVE-2026-109781 , CVE-2026-109782 , CVE-2026-109783 Description
Denial-of-service in the Exchange email component. (CVE-2026-110249) Privilege escalation in the Application Update component. (CVE-2026-109704) Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. (CVE-2026-109705) Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706) Sandbox escape due to use-after-free in the Networking component. (CVE-2026-109707) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-109708) Information disclosure, privilege escalation in the Security: Process Sandboxing component. (CVE-2026-109709) Use-after-free in the Graphics: Text component. (CVE-2026-109710) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711) Sandbox escape due to uninitialized memory in the Graphics component. (CVE-2026-109712) Use-after-free in the Crash Reporting component. (CVE-2026-109713) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109715) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109716) Use-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-109717) Use-after-free in the XML component. (CVE-2026-109718) Race condition, use-after-free in the Graphics: CanvasWebGL component. (CVE-2026-109719) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-109720) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-109721) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109722) Integer overflow in the Layout: Text and Fonts component. (CVE-2026-109723) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109724) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109725) Use-after-free in the SVG component. (CVE-2026-109726) Use-after-free in the Audio/Video component. (CVE-2026-109727) Use-after-free in the DOM: Animation component. (CVE-2026-109728) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-109729) Integer overflow in the Graphics component. (CVE-2026-109730) Incorrect boundary conditions in the Graphics: Canvas2D component. (CVE-2026-109731) Use-after-free in the DOM: Streams component. (CVE-2026-109732) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109733) Mitigation bypass in the DOM: Security component. (CVE-2026-109734) Frame poisoning in the Layout component. (CVE-2026-109736) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109737) Use-after-free in the Audio/Video: Playback component. (CVE-2026-109738) Use-after-free in the Storage: Bucket File System component. (CVE-2026-109741) Information disclosure in the PDF Viewer component. (CVE-2026-109742) Privilege escalation in the Panning and Zooming component. (CVE-2026-109743) Other issue in the DOM: File component. (CVE-2026-109744) Sandbox escape due to uninitialized memory in the DOM: Web Serial component. (CVE-2026-109745) Mitigation bypass in the File Handling component. (CVE-2026-109782) Information disclosure in the Networking component. (CVE-2026-109751) Use-after-free in the DOM: Workers component. (CVE-2026-109752) Incorrect boundary conditions in the Layout component. (CVE-2026-109753) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-109754) Privilege escalation in the DOM: Navigation component. (CVE-2026-109756) Sandbox escape due to race condition in the Networking component. (CVE-2026-109757) Site isolation issue in the Networking component. (CVE-2026-109759) Mitigation bypass in the Networking: HTTP component. (CVE-2026-109760) Incorrect boundary conditions in the SVG component. (CVE-2026-109762) Mitigation bypass in the File Handling component. (CVE-2026-109763) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109764) Race condition, use-after-free in the Graphics: Text component. (CVE-2026-109765) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109766) Information disclosure in the Networking component. (CVE-2026-109767) Mitigation bypass in the File Handling component. (CVE-2026-109783) Spoofing issue in the DOM: Web Serial component. (CVE-2026-109770) Denial-of-service in the WebRTC component. (CVE-2026-109775) Race condition in the XPCOM component. (CVE-2026-109776) Information disclosure in the Storage: IndexedDB component. (CVE-2026-109777) Privilege escalation in the WebExtensions component. (CVE-2026-109778) Denial-of-service in the Printing: Output component. (CVE-2026-109781) References

• https://bugs.mageia.org/show_bug.cgi?id=36509
• https://www.thunderbird.net/en-US/thunderbird/153.5.0esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/
• https://www.cve.org/CVERecord?id=CVE-2026-110249
• https://www.cve.org/CVERecord?id=CVE-2026-109704
• https://www.cve.org/CVERecord?id=CVE-2026-109705
• https://www.cve.org/CVERecord?id=CVE-2026-109706
• https://www.cve.org/CVERecord?id=CVE-2026-109707
• https://www.cve.org/CVERecord?id=CVE-2026-109708
• https://www.cve.org/CVERecord?id=CVE-2026-109709
• https://www.cve.org/CVERecord?id=CVE-2026-109710
• https://www.cve.org/CVERecord?id=CVE-2026-109711
• https://www.cve.org/CVERecord?id=CVE-2026-109712
• https://www.cve.org/CVERecord?id=CVE-2026-109713
• https://www.cve.org/CVERecord?id=CVE-2026-109715
• https://www.cve.org/CVERecord?id=CVE-2026-109716
• https://www.cve.org/CVERecord?id=CVE-2026-109717
• https://www.cve.org/CVERecord?id=CVE-2026-109718
• https://www.cve.org/CVERecord?id=CVE-2026-109719
• https://www.cve.org/CVERecord?id=CVE-2026-109720
• https://www.cve.org/CVERecord?id=CVE-2026-109721
• https://www.cve.org/CVERecord?id=CVE-2026-109722
• https://www.cve.org/CVERecord?id=CVE-2026-109723
• https://www.cve.org/CVERecord?id=CVE-2026-109724
• https://www.cve.org/CVERecord?id=CVE-2026-109725
• https://www.cve.org/CVERecord?id=CVE-2026-109726
• https://www.cve.org/CVERecord?id=CVE-2026-109727
• https://www.cve.org/CVERecord?id=CVE-2026-109728
• https://www.cve.org/CVERecord?id=CVE-2026-109729
• https://www.cve.org/CVERecord?id=CVE-2026-109730
• https://www.cve.org/CVERecord?id=CVE-2026-109731
• https://www.cve.org/CVERecord?id=CVE-2026-109732
• https://www.cve.org/CVERecord?id=CVE-2026-109733
• https://www.cve.org/CVERecord?id=CVE-2026-109734
• https://www.cve.org/CVERecord?id=CVE-2026-109736
• https://www.cve.org/CVERecord?id=CVE-2026-109737
• https://www.cve.org/CVERecord?id=CVE-2026-109738
• https://www.cve.org/CVERecord?id=CVE-2026-109740
• https://www.cve.org/CVERecord?id=CVE-2026-109741
• https://www.cve.org/CVERecord?id=CVE-2026-109742
• https://www.cve.org/CVERecord?id=CVE-2026-109743
• https://www.cve.org/CVERecord?id=CVE-2026-109744
• https://www.cve.org/CVERecord?id=CVE-2026-109745
• https://www.cve.org/CVERecord?id=CVE-2026-109751
• https://www.cve.org/CVERecord?id=CVE-2026-109752
• https://www.cve.org/CVERecord?id=CVE-2026-109753
• https://www.cve.org/CVERecord?id=CVE-2026-109754
• https://www.cve.org/CVERecord?id=CVE-2026-109756
• https://www.cve.org/CVERecord?id=CVE-2026-109757
• https://www.cve.org/CVERecord?id=CVE-2026-109759
• https://www.cve.org/CVERecord?id=CVE-2026-109760
• https://www.cve.org/CVERecord?id=CVE-2026-109762
• https://www.cve.org/CVERecord?id=CVE-2026-109763
• https://www.cve.org/CVERecord?id=CVE-2026-109764
• https://www.cve.org/CVERecord?id=CVE-2026-109765
• https://www.cve.org/CVERecord?id=CVE-2026-109766
• https://www.cve.org/CVERecord?id=CVE-2026-109767
• https://www.cve.org/CVERecord?id=CVE-2026-109770
• https://www.cve.org/CVERecord?id=CVE-2026-109775
• https://www.cve.org/CVERecord?id=CVE-2026-109776
• https://www.cve.org/CVERecord?id=CVE-2026-109777
• https://www.cve.org/CVERecord?id=CVE-2026-109778
• https://www.cve.org/CVERecord?id=CVE-2026-109781
• https://www.cve.org/CVERecord?id=CVE-2026-109782
• https://www.cve.org/CVERecord?id=CVE-2026-109783

SRPMS 10/core

• thunderbird-l10n-153.5.0-1.mga10
• thunderbird-153.5.0-1.mga10

Publication date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-109704 , CVE-2026-109705 , CVE-2026-109706 , CVE-2026-109707 , CVE-2026-109708 , CVE-2026-109709 , CVE-2026-109710 , CVE-2026-109711 , CVE-2026-109712 , CVE-2026-109713 , CVE-2026-109715 , CVE-2026-109716 , CVE-2026-109717 , CVE-2026-109718 , CVE-2026-109719 , CVE-2026-109720 , CVE-2026-109721 , CVE-2026-109722 , CVE-2026-109723 , CVE-2026-109724 , CVE-2026-109725 , CVE-2026-109726 , CVE-2026-109727 , CVE-2026-109728 , CVE-2026-109729 , CVE-2026-109730 , CVE-2026-109731 , CVE-2026-109732 , CVE-2026-109733 , CVE-2026-109734 , CVE-2026-109736 , CVE-2026-109737 , CVE-2026-109738 , CVE-2026-109741 , CVE-2026-109742 , CVE-2026-109743 , CVE-2026-109744 , CVE-2026-109745 , CVE-2026-109751 , CVE-2026-109752 , CVE-2026-109753 , CVE-2026-109754 , CVE-2026-109756 , CVE-2026-109757 , CVE-2026-109759 , CVE-2026-109760 , CVE-2026-109762 , CVE-2026-109763 , CVE-2026-109764 , CVE-2026-109765 , CVE-2026-109766 , CVE-2026-109767 , CVE-2026-109770 , CVE-2026-109775 , CVE-2026-109776 , CVE-2026-109777 , CVE-2026-109778 , CVE-2026-109781 , CVE-2026-109782 , CVE-2026-109783 Description
Privilege escalation in the Application Update component. (CVE-2026-109704) Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. (CVE-2026-109705) Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706) Sandbox escape due to use-after-free in the Networking component. (CVE-2026-109707) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-109708) Information disclosure, privilege escalation in the Security: Process Sandboxing component. (CVE-2026-109709) Use-after-free in the Graphics: Text component. (CVE-2026-109710) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711) Sandbox escape due to uninitialized memory in the Graphics component. (CVE-2026-109712) Use-after-free in the Crash Reporting component. (CVE-2026-109713) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109715) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109716) Use-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-109717) Use-after-free in the XML component. (CVE-2026-109718) Race condition, use-after-free in the Graphics: CanvasWebGL component. (CVE-2026-109719) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-109720) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-109721) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109722) Integer overflow in the Layout: Text and Fonts component. (CVE-2026-109723) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109724) Use-after-free in the DOM: Core & HTML component. (CVE-2026-109725) Use-after-free in the SVG component. (CVE-2026-109726) Use-after-free in the Audio/Video component. (CVE-2026-109727) Use-after-free in the DOM: Animation component. (CVE-2026-109728) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-109729) Integer overflow in the Graphics component. (CVE-2026-109730) Incorrect boundary conditions in the Graphics: Canvas2D component. (CVE-2026-109731) Use-after-free in the DOM: Streams component. (CVE-2026-109732) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109733) Mitigation bypass in the DOM: Security component. (CVE-2026-109734) Frame poisoning in the Layout component. (CVE-2026-109736) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109737) Use-after-free in the Audio/Video: Playback component. (CVE-2026-109738) Use-after-free in the Storage: Bucket File System component. (CVE-2026-109741) Information disclosure in the PDF Viewer component. (CVE-2026-109742) Privilege escalation in the Panning and Zooming component. (CVE-2026-109743) Other issue in the DOM: File component. (CVE-2026-109744) Sandbox escape due to uninitialized memory in the DOM: Web Serial component. (CVE-2026-109745) Mitigation bypass in the File Handling component. (CVE-2026-109782) Information disclosure in the Networking component. (CVE-2026-109751) Use-after-free in the DOM: Workers component. (CVE-2026-109752) Incorrect boundary conditions in the Layout component. (CVE-2026-109753) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-109754) Privilege escalation in the DOM: Navigation component. (CVE-2026-109756) Sandbox escape due to race condition in the Networking component. (CVE-2026-109757) Site isolation issue in the Networking component. (CVE-2026-109759) Mitigation bypass in the Networking: HTTP component. (CVE-2026-109760) Incorrect boundary conditions in the SVG component. (CVE-2026-109762) Mitigation bypass in the File Handling component. (CVE-2026-109763) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109764) Race condition, use-after-free in the Graphics: Text component. (CVE-2026-109765) Mitigation bypass in the Enterprise Policies component. (CVE-2026-109766) Information disclosure in the Networking component. (CVE-2026-109767) Mitigation bypass in the File Handling component. (CVE-2026-109783) Spoofing issue in the DOM: Web Serial component. (CVE-2026-109770) Denial-of-service in the WebRTC component. (CVE-2026-109775) Race condition in the XPCOM component. (CVE-2026-109776) Information disclosure in the Storage: IndexedDB component. (CVE-2026-109777) Privilege escalation in the WebExtensions component. (CVE-2026-109778) Denial-of-service in the Printing: Output component. (CVE-2026-109781) References

• https://bugs.mageia.org/show_bug.cgi?id=36500
• https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html
• https://www.firefox.com/en-US/firefox/153.5.0/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
• https://www.cve.org/CVERecord?id=CVE-2026-109704
• https://www.cve.org/CVERecord?id=CVE-2026-109705
• https://www.cve.org/CVERecord?id=CVE-2026-109706
• https://www.cve.org/CVERecord?id=CVE-2026-109707
• https://www.cve.org/CVERecord?id=CVE-2026-109708
• https://www.cve.org/CVERecord?id=CVE-2026-109709
• https://www.cve.org/CVERecord?id=CVE-2026-109710
• https://www.cve.org/CVERecord?id=CVE-2026-109711
• https://www.cve.org/CVERecord?id=CVE-2026-109712
• https://www.cve.org/CVERecord?id=CVE-2026-109713
• https://www.cve.org/CVERecord?id=CVE-2026-109715
• https://www.cve.org/CVERecord?id=CVE-2026-109716
• https://www.cve.org/CVERecord?id=CVE-2026-109717
• https://www.cve.org/CVERecord?id=CVE-2026-109718
• https://www.cve.org/CVERecord?id=CVE-2026-109719
• https://www.cve.org/CVERecord?id=CVE-2026-109720
• https://www.cve.org/CVERecord?id=CVE-2026-109721
• https://www.cve.org/CVERecord?id=CVE-2026-109722
• https://www.cve.org/CVERecord?id=CVE-2026-109723
• https://www.cve.org/CVERecord?id=CVE-2026-109724
• https://www.cve.org/CVERecord?id=CVE-2026-109725
• https://www.cve.org/CVERecord?id=CVE-2026-109726
• https://www.cve.org/CVERecord?id=CVE-2026-109727
• https://www.cve.org/CVERecord?id=CVE-2026-109728
• https://www.cve.org/CVERecord?id=CVE-2026-109729
• https://www.cve.org/CVERecord?id=CVE-2026-109730
• https://www.cve.org/CVERecord?id=CVE-2026-109731
• https://www.cve.org/CVERecord?id=CVE-2026-109732
• https://www.cve.org/CVERecord?id=CVE-2026-109733
• https://www.cve.org/CVERecord?id=CVE-2026-109734
• https://www.cve.org/CVERecord?id=CVE-2026-109736
• https://www.cve.org/CVERecord?id=CVE-2026-109737
• https://www.cve.org/CVERecord?id=CVE-2026-109738
• https://www.cve.org/CVERecord?id=CVE-2026-109741
• https://www.cve.org/CVERecord?id=CVE-2026-109742
• https://www.cve.org/CVERecord?id=CVE-2026-109743
• https://www.cve.org/CVERecord?id=CVE-2026-109744
• https://www.cve.org/CVERecord?id=CVE-2026-109745
• https://www.cve.org/CVERecord?id=CVE-2026-109751
• https://www.cve.org/CVERecord?id=CVE-2026-109752
• https://www.cve.org/CVERecord?id=CVE-2026-109753
• https://www.cve.org/CVERecord?id=CVE-2026-109754
• https://www.cve.org/CVERecord?id=CVE-2026-109756
• https://www.cve.org/CVERecord?id=CVE-2026-109757
• https://www.cve.org/CVERecord?id=CVE-2026-109759
• https://www.cve.org/CVERecord?id=CVE-2026-109760
• https://www.cve.org/CVERecord?id=CVE-2026-109762
• https://www.cve.org/CVERecord?id=CVE-2026-109763
• https://www.cve.org/CVERecord?id=CVE-2026-109764
• https://www.cve.org/CVERecord?id=CVE-2026-109765
• https://www.cve.org/CVERecord?id=CVE-2026-109766
• https://www.cve.org/CVERecord?id=CVE-2026-109767
• https://www.cve.org/CVERecord?id=CVE-2026-109770
• https://www.cve.org/CVERecord?id=CVE-2026-109775
• https://www.cve.org/CVERecord?id=CVE-2026-109776
• https://www.cve.org/CVERecord?id=CVE-2026-109777
• https://www.cve.org/CVERecord?id=CVE-2026-109778
• https://www.cve.org/CVERecord?id=CVE-2026-109781
• https://www.cve.org/CVERecord?id=CVE-2026-109782
• https://www.cve.org/CVERecord?id=CVE-2026-109783

SRPMS 10/core

• firefox-153.5.0-1.mga10
• nss-3.131.0-1.mga10
• firefox-l10n-153.5.0-1.mga10

Publication date: 20 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
Fix baudrate setting on Linux when compiled against glibc >= 2.42 and update lrzsz to latest 0.13.1 release References

• https://bugs.mageia.org/show_bug.cgi?id=36523
• https://salsa.debian.org/minicom-team/minicom/-/releases

SRPMS 10/core

• minicom-2.11.1-1.mga10
• lrzsz-0.13.1-1.mga10

Publication date: 19 Oct 2026
Type: bugfix
Affected Mageia releases : 10
Description
This update fixes a failure to obtain an IP address, particularly when connecting via WiFi to a cellular hotspot. References

• https://bugs.mageia.org/show_bug.cgi?id=36444

SRPMS 10/core

• dhcpcd-10.5.2-1.mga10

Publication date: 19 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-55655 , CVE-2026-59995 , CVE-2026-59996 , CVE-2026-59997 , CVE-2026-59998 , CVE-2026-59999 , CVE-2026-60000 , CVE-2026-60001 , CVE-2026-60002 , CVE-2026-73281 , CVE-2026-73282 , CVE-2026-73283 , CVE-2026-106552 , CVE-2026-106553 , CVE-2026-106555 , CVE-2026-106582 , CVE-2026-106583 , CVE-2026-106584 , CVE-2026-106585 , CVE-2026-106586 , CVE-2026-106587 Description
Local mitm of x11 forwarding via abstract unix socket pre-binding in Red Hat Enterprise Linux openssh client versions. (CVE-2026-55655) sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server. (CVE-2026-59995) scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. (CVE-2026-59996) internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection. (CVE-2026-59997) sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory. (CVE-2026-59998) In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. (CVE-2026-59999) sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication. (CVE-2026-60000) sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. (CVE-2026-60001) ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.). (CVE-2026-60002) In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension. (CVE-2026-73281) In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. (CVE-2026-73282) In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. (CVE-2026-73283) In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. (CVE-2026-106552) In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. (CVE-2026-106553) In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. (CVE-2026-106555) In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. (CVE-2026-106582) In ssh in OpenSSH before 10.6, a $ or character can occur in a command-line username, leading to injection. (CVE-2026-106583) In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations. (CVE-2026-106584) In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. (CVE-2026-106585) In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. (CVE-2026-106586) In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. (CVE-2026-106587) References

• https://bugs.mageia.org/show_bug.cgi?id=35876
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FAMKD5T6664L7TA7EBJFLZB2RX3AQYZ/
• https://ubuntu.com/security/notices/USN-8533-1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2ZK2T3OFPOIBFAZQAJISQ7EML4PHYVB/
• https://www.openwall.com/lists/oss-security/2026/08/12/1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRB2YTKIEJGFGAKEXYAPCDQSKUFBEI7B/
• https://ubuntu.com/security/notices/USN-8721-1
• https://ubuntu.com/security/notices/USN-8928-1
• https://www.cve.org/CVERecord?id=CVE-2026-55655
• https://www.cve.org/CVERecord?id=CVE-2026-59995
• https://www.cve.org/CVERecord?id=CVE-2026-59996
• https://www.cve.org/CVERecord?id=CVE-2026-59997
• https://www.cve.org/CVERecord?id=CVE-2026-59998
• https://www.cve.org/CVERecord?id=CVE-2026-59999
• https://www.cve.org/CVERecord?id=CVE-2026-60000
• https://www.cve.org/CVERecord?id=CVE-2026-60001
• https://www.cve.org/CVERecord?id=CVE-2026-60002
• https://www.cve.org/CVERecord?id=CVE-2026-73281
• https://www.cve.org/CVERecord?id=CVE-2026-73282
• https://www.cve.org/CVERecord?id=CVE-2026-73283
• https://www.cve.org/CVERecord?id=CVE-2026-106552
• https://www.cve.org/CVERecord?id=CVE-2026-106553
• https://www.cve.org/CVERecord?id=CVE-2026-106555
• https://www.cve.org/CVERecord?id=CVE-2026-106582
• https://www.cve.org/CVERecord?id=CVE-2026-106583
• https://www.cve.org/CVERecord?id=CVE-2026-106584
• https://www.cve.org/CVERecord?id=CVE-2026-106585
• https://www.cve.org/CVERecord?id=CVE-2026-106586
• https://www.cve.org/CVERecord?id=CVE-2026-106587

SRPMS 10/core

• openssh-10.0p1-4.1.mga10

Publication date: 19 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-46675 Description
Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression. (CVE-2026-46675) References

• https://bugs.mageia.org/show_bug.cgi?id=36403
• https://www.openwall.com/lists/oss-security/2026/09/29/4
• https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j
• https://lists.debian.org/debian-security-announce/2026/msg00450.html
• https://www.cve.org/CVERecord?id=CVE-2026-46675

SRPMS 10/core

• libpng-1.6.53-6.1.mga10

Publication date: 19 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86320 Description
Host code execution via `git am` hook execution in patch source extraction (`use-git-am`). (CVE-2026-86320) References

• https://bugs.mageia.org/show_bug.cgi?id=36407
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BJF2ORPRVKVTXPAFIDS6U5SNJHW6VTMX/
• https://github.com/flatpak/flatpak-builder/security/advisories/GHSA-j5p8-jgjc-f3xv
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJHPETQUQKC4Z7Z3LWM37VPXNFDJHFGB/
• https://www.cve.org/CVERecord?id=CVE-2026-86320

SRPMS 10/core

• flatpak-builder-1.4.12-1.mga10

Publication date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-93687 Description
It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards (CVE-2026-93687). References

• https://bugs.mageia.org/show_bug.cgi?id=36464
• https://github.com/micromatch/braces/issues/70
• https://www.cve.org/CVERecord?id=CVE-2026-93687
• https://www.cve.org/CVERecord?id=CVE-2026-93687

SRPMS 10/core

• nodejs-braces-3.0.3-1.mga10

Publication date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-107570 Description
When an email is processed as a template, an out-of-bounds write vulnerability in the convert_file_from_to () function can be triggered by a specially crafted Content-Type header (CVE-2026-107570). References

• https://bugs.mageia.org/show_bug.cgi?id=36502
• https://www.openwall.com/lists/oss-security/2026/10/09/21
• https://www.cve.org/CVERecord?id=CVE-2026-107570

SRPMS 10/core

• mutt-2.4.3-1.mga10

Publication date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2025-70103 Description
Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. (CVE-2025-70103) References

• https://bugs.mageia.org/show_bug.cgi?id=35656
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TDJLG2FVXLDZ2YCBFB5L3YEGWD2YVZ47/
• https://www.cve.org/CVERecord?id=CVE-2025-70103

SRPMS 10/core

• mozjs140-140.17.0-1.mga10

Publication date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-13608 , CVE-2026-18924 , CVE-2026-19931 , CVE-2026-80229 , CVE-2026-80230 , CVE-2026-80231 , CVE-2026-80255 , CVE-2026-80256 , CVE-2026-82208 , CVE-2026-82209 , CVE-2026-86409 , CVE-2026-86410 , CVE-2026-86411 , CVE-2026-86412 , CVE-2026-86413 , CVE-2026-86414 , CVE-2026-86415 , CVE-2026-87861 , CVE-2026-87862 , CVE-2026-87863 , CVE-2026-87864 , CVE-2026-92386 , CVE-2026-92387 , CVE-2026-92388 , CVE-2026-92389 , CVE-2026-92390 , CVE-2026-92391 , CVE-2026-92392 , CVE-2026-94265 , CVE-2026-94266 , CVE-2026-107929 Description
curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set cookie erases cookie jar CVE-2026-86413: Negotiate credentials sent to redirected origin CVE-2026-86414: leaking host credentials to HTTP proxy CVE-2026-86415: auto client cert connection reuse mixup CVE-2026-87861: cross-origin reuse of a Negotiate connection CVE-2026-87862: HSTS cache import drops longer-lived child CVE-2026-87863: HSTS response erases persisted entries CVE-2026-92386: server-set cookie aborts cookie jar load CVE-2026-92387: never-ending loop via server response omission CVE-2026-92388: FTP wildcard write callback mixup CVE-2026-92389: TFTP direction confusion CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints CVE-2026-92391: curl_mime_free stack overflow by recursion CVE-2026-92392: HTTP/2 upload Use-After-Free CVE-2026-94265: Authorization: Negotiate sent to foreign origin CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL CVE-2026-107929: local interface connection reuse mixup There were also some CVE IDs released at the same time that were fixed earlier, in 8.22.0, but just announced now: CVE-2026-86409: stale SigV4 headers sent unintended CVE-2026-86411: FTP connection reuse inherits client-certificate CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection Here are the CVEs fixed in 8.22.0, which wasn't released in mga10 and so are only getting fixed now: CVE-2026-13608: OpenLDAP SASL authentication bypass CVE-2026-18924: HTTP/2 server push UAF CVE-2026-19931: Negotiate ambient user conn reuse CVE-2026-80229: OpenSSL provider use-after-free CVE-2026-80230: OpenSSL pinning bypass CVE-2026-80255: secure cookie attribute bypass with tab CVE-2026-82209: domain-scoped PSL domain cookie References

• https://bugs.mageia.org/show_bug.cgi?id=36250
• https://curl.se/docs/security.html
• https://www.cve.org/CVERecord?id=CVE-2026-13608
• https://www.cve.org/CVERecord?id=CVE-2026-18924
• https://www.cve.org/CVERecord?id=CVE-2026-19931
• https://www.cve.org/CVERecord?id=CVE-2026-80229
• https://www.cve.org/CVERecord?id=CVE-2026-80230
• https://www.cve.org/CVERecord?id=CVE-2026-80231
• https://www.cve.org/CVERecord?id=CVE-2026-80255
• https://www.cve.org/CVERecord?id=CVE-2026-80256
• https://www.cve.org/CVERecord?id=CVE-2026-82208
• https://www.cve.org/CVERecord?id=CVE-2026-82209
• https://www.cve.org/CVERecord?id=CVE-2026-86409
• https://www.cve.org/CVERecord?id=CVE-2026-86410
• https://www.cve.org/CVERecord?id=CVE-2026-86411
• https://www.cve.org/CVERecord?id=CVE-2026-86412
• https://www.cve.org/CVERecord?id=CVE-2026-86413
• https://www.cve.org/CVERecord?id=CVE-2026-86414
• https://www.cve.org/CVERecord?id=CVE-2026-86415
• https://www.cve.org/CVERecord?id=CVE-2026-87861
• https://www.cve.org/CVERecord?id=CVE-2026-87862
• https://www.cve.org/CVERecord?id=CVE-2026-87863
• https://www.cve.org/CVERecord?id=CVE-2026-87864
• https://www.cve.org/CVERecord?id=CVE-2026-92386
• https://www.cve.org/CVERecord?id=CVE-2026-92387
• https://www.cve.org/CVERecord?id=CVE-2026-92388
• https://www.cve.org/CVERecord?id=CVE-2026-92389
• https://www.cve.org/CVERecord?id=CVE-2026-92390
• https://www.cve.org/CVERecord?id=CVE-2026-92391
• https://www.cve.org/CVERecord?id=CVE-2026-92392
• https://www.cve.org/CVERecord?id=CVE-2026-94265
• https://www.cve.org/CVERecord?id=CVE-2026-94266
• https://www.cve.org/CVERecord?id=CVE-2026-107929

SRPMS 10/core

• curl-8.23.0-1.mga10

Publication date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-63266 , CVE-2026-63267 , CVE-2026-63268 , CVE-2026-63269 , CVE-2026-63270 , CVE-2026-63272 , CVE-2026-63273 , CVE-2026-63274 , CVE-2026-63275 , CVE-2026-63276 , CVE-2026-63277 , CVE-2026-63278 , CVE-2026-63279 Description
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. (CVE-2026-63266) LFI and GET SSRF via calcext:data-mappings and csv provider. (CVE-2026-63267) LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. (CVE-2026-63268) LFI and GET SSRF via GStreamer and HLS playlists. (CVE-2026-63269) Environment/ini-file leaks. (CVE-2026-63270) Heap buffer overflow in WMF text record import. (CVE-2026-63272) Heap buffer overflow in PDF import encryption handling. (CVE-2026-63273) Heap buffer overflow in PDF import stream handling. (CVE-2026-63274) Stack buffer overflow in CFF font hint handling. (CVE-2026-63275) Stack buffer overflow in CFF to Type 1 font conversion. (CVE-2026-63276) RCE via calcext:data-mappings, sql provider and jdbc connector. (CVE-2026-63277) Package URLs can be used to exfiltrate arbitrary INI file values and environment variables. (CVE-2026-63278) Out of bounds read in PICT image import. (CVE-2026-63279) References

• https://bugs.mageia.org/show_bug.cgi?id=36383
• https://lists.debian.org/debian-security-announce/2026/msg00424.html
• https://www.libreoffice.org/security/#cve-2026-63272
• https://www.libreoffice.org/security/#cve-2026-63273
• https://www.libreoffice.org/security/#cve-2026-63274
• https://www.libreoffice.org/security/#cve-2026-63275
• https://www.libreoffice.org/security/#cve-2026-63276
• https://www.libreoffice.org/security/#cve-2026-63277
• https://www.libreoffice.org/security/#cve-2026-63278
• https://www.libreoffice.org/security/#cve-2026-63279
• https://lists.debian.org/debian-security-announce/2026/msg00457.html
• https://www.libreoffice.org/security/#cve-2026-63266
• https://www.libreoffice.org/security/#cve-2026-63267
• https://www.libreoffice.org/security/#cve-2026-63268
• https://www.libreoffice.org/security/#cve-2026-63269
• https://www.libreoffice.org/security/#cve-2026-63270
• https://ubuntu.com/security/notices/USN-8868-1
• https://www.cve.org/CVERecord?id=CVE-2026-63266
• https://www.cve.org/CVERecord?id=CVE-2026-63267
• https://www.cve.org/CVERecord?id=CVE-2026-63268
• https://www.cve.org/CVERecord?id=CVE-2026-63269
• https://www.cve.org/CVERecord?id=CVE-2026-63270
• https://www.cve.org/CVERecord?id=CVE-2026-63272
• https://www.cve.org/CVERecord?id=CVE-2026-63273
• https://www.cve.org/CVERecord?id=CVE-2026-63274
• https://www.cve.org/CVERecord?id=CVE-2026-63275
• https://www.cve.org/CVERecord?id=CVE-2026-63276
• https://www.cve.org/CVERecord?id=CVE-2026-63277
• https://www.cve.org/CVERecord?id=CVE-2026-63278
• https://www.cve.org/CVERecord?id=CVE-2026-63279

SRPMS 10/core

• libreoffice-26.2.6.3-1.mga10