Mageia Security

Publication date: 20 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
perl-Chart is updated to version 2.403.9. perl-Graphics-Toolkit-Color is a new runtime requirement for perl-Chart. References

• https://bugs.mageia.org/show_bug.cgi?id=36292

SRPMS 10/core

• perl-Chart-2.403.9-1.mga10
• perl-Graphics-Toolkit-Color-2.220.0-1.mga10

Publication date: 20 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
GUI aplications packaged by mageia are not listed in gnome-software. This updates adds libdnf5-plugin-appstream as optional requirement to allow gnome-software see the GUI applications packaged by mageia and allow to user skip the additional package if they want. References

• https://bugs.mageia.org/show_bug.cgi?id=35733

SRPMS 10/core

• gnome-software-49.3-2.1.mga10

Publication date: 20 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
When formatting a partition which was already mounted, Isodumper failed. Now, it starts to unmount the partitions on the target device Devices list is also cleaned of optical devices. References

• https://bugs.mageia.org/show_bug.cgi?id=35652

SRPMS 10/core

• isodumper-1.93-1.mga10

Publication date: 19 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-18297 Description
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. (CVE-2026-18297) References

• https://bugs.mageia.org/show_bug.cgi?id=36288
• https://lists.debian.org/debian-security-announce/2026/msg00400.html
• https://gstreamer.freedesktop.org/security/sa-2026-0053.html
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12044
• https://www.cve.org/CVERecord?id=CVE-2026-18297

SRPMS 10/core

• gstreamer1.0-plugins-base-1.26.11-1.1.mga10

9/core

• gstreamer1.0-plugins-base-1.22.11-1.4.mga9

Publication date: 19 Sep 2026
Type: bugfix
Affected Mageia releases : 10
Description
audacity is updated to version 3.7.9 which has improvements and bugs fixed by the audacity team. References

• https://bugs.mageia.org/show_bug.cgi?id=36271
• https://github.com/audacity/audacity/releases#release-Audacity-3.7.9
• https://github.com/audacity/audacity/releases#release-Audacity-3.7.8

SRPMS 10/core

• audacity-3.7.9-1.mga10

Publication date: 18 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2025-7345 , CVE-2026-16768 , CVE-2026-81893 Description
Heap‑buffer‑overflow in gdk‑pixbuf. (CVE-2025-7345) Out-of-bounds read in ico parser. (CVE-2026-16768) Invalid write in jpeg icc profile parser on error recovery. (CVE-2026-81893) References

• https://bugs.mageia.org/show_bug.cgi?id=36238
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7DP4KY4CEXMYSH2LTCRQAN4JZKGOIKAV/
• https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/302
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXN4IRXYCTUM4SHIHKYCZ4F65WY26VVT/
• https://lists.debian.org/debian-lts-announce/2025/10/msg00024.html
• https://www.cve.org/CVERecord?id=CVE-2025-7345
• https://www.cve.org/CVERecord?id=CVE-2026-16768
• https://www.cve.org/CVERecord?id=CVE-2026-81893

SRPMS 10/core

• gdk-pixbuf2.0-2.44.4-2.1.mga10

9/core

• gdk-pixbuf2.0-2.42.10-2.4.mga9

Publication date: 18 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-0799 , CVE-2026-31911 , CVE-2026-31912 , CVE-2026-6244 , CVE-2026-6554 , CVE-2026-18313 , CVE-2026-18238 Description
OOBR and OOBW in libpcap before 1.10.7. (CVE-2026-0799) abort() in libpcap before 1.10.7 on an invalid BPF opcode. (CVE-2026-31911) OOBR in libpcap before 1.10.7. (CVE-2026-31912) Division by zero in libpcap before 1.10.7. (CVE-2026-6244) Infinte loop in libpcap before 1.10.7. (CVE-2026-6554) rpcapd memory leak in libpcap before 1.10.7. (CVE-2026-18313) OOBR in rpcap client in libpcap before 1.10.7. (CVE-2026-18238) References

• https://bugs.mageia.org/show_bug.cgi?id=36286
• https://www.openwall.com/lists/oss-security/2026/09/09/2
• https://www.cve.org/CVERecord?id=CVE-2026-0799
• https://www.cve.org/CVERecord?id=CVE-2026-31911
• https://www.cve.org/CVERecord?id=CVE-2026-31912
• https://www.cve.org/CVERecord?id=CVE-2026-6244
• https://www.cve.org/CVERecord?id=CVE-2026-6554
• https://www.cve.org/CVERecord?id=CVE-2026-18313
• https://www.cve.org/CVERecord?id=CVE-2026-18238

SRPMS 10/core

• libpcap-1.10.7-1.mga10

9/core

• libpcap-1.10.7-1.mga9

Publication date: 18 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2025-55154 Description
Integer overflows in MNG magnification. (CVE-2025-55154) References

• https://bugs.mageia.org/show_bug.cgi?id=36290
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/UOLRN3FZUDRWOSHYEWPEZNVV7735CFHF/
• https://www.cve.org/CVERecord?id=CVE-2025-55154

SRPMS 10/tainted

• graphicsmagick-1.3.46-5.2.mga10.tainted

9/tainted

• graphicsmagick-1.3.40-1.8.mga9.tainted

Publication date: 17 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86420 , CVE-2026-86421 , CVE-2026-86423 , CVE-2026-86424 , CVE-2026-86425 Description
Heap-use-after-free in Layer method of PerlMagick could result in a crash Path Policy TOCTOU symlink race bypass in the video decoder Heap-use-after-free in the GetList method of PerlMagick could result in a crash Memory Leak in MSL decoder Denial of service when exhausting the process memory budget Policy Bypass in UHDR encoder Division by Zero in FLIF encoder Null Pointer Dereference in PNM coder when hitting a memory limit Policy Bypass in PCD, CUBE and HALD decoder when using a specific command line option. Use after free in ImagesToBlob method References

• https://bugs.mageia.org/show_bug.cgi?id=36167
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67
• https://www.cve.org/CVERecord?id=CVE-2026-86420
• https://www.cve.org/CVERecord?id=CVE-2026-86421
• https://www.cve.org/CVERecord?id=CVE-2026-86423
• https://www.cve.org/CVERecord?id=CVE-2026-86424
• https://www.cve.org/CVERecord?id=CVE-2026-86425

SRPMS 10/core

• imagemagick-7.1.2.31-1.mga10

10/tainted

• imagemagick-7.1.2.31-1.mga10.tainted

Publication date: 17 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-48817 , CVE-2026-54282 , CVE-2026-54283 Description
Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`. (CVE-2026-48817) Unvalidated request path concatenated into authority poisons request.url.hostname. (CVE-2026-54282) References

• https://bugs.mageia.org/show_bug.cgi?id=36224
• https://lists.debian.org/debian-security-announce/2026/msg00389.html
• https://www.cve.org/CVERecord?id=CVE-2026-48817
• https://www.cve.org/CVERecord?id=CVE-2026-54282
• https://www.cve.org/CVERecord?id=CVE-2026-54283

SRPMS 10/core

• python-starlette-0.46.0-3.2.mga10

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-9672 Description
A vulnerability was discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed GIF file is processed. References

• https://bugs.mageia.org/show_bug.cgi?id=36162
• https://lists.debian.org/debian-security-announce/2026/msg00320.html?pow_referer=https%3A%2F%2Fbugs.mageia.org%2F
• https://www.cve.org/CVERecord?id=CVE-2026-9672

SRPMS 10/core

• libgd-2.3.3-11.1.mga10

9/core

• libgd-2.3.3-6.1.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-10294 Description
PackageKit API pk-transaction.c g_file_test improper authorization. (CVE-2026-10294) References

• https://bugs.mageia.org/show_bug.cgi?id=36166
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/M6KYMZZSTVVP7SBKMB54MNOK7HGHQQN4/
• https://github.com/PackageKit/PackageKit/issues/969
• https://www.cve.org/CVERecord?id=CVE-2026-10294

SRPMS 10/core

• packagekit-1.3.5-1.1.mga10

9/core

• packagekit-1.2.6-2.2.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-56208 , CVE-2026-56209 , CVE-2026-56210 , CVE-2026-56211 Description
Heap buffer overflow in av1 encoder first-pass stats buffer via lap mode. (CVE-2026-56208) Arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack. (CVE-2026-56209) Heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id. (CVE-2026-56210) Remote code execution via svc layer context handling with attacker-controlled frames. (CVE-2026-56211) References

• https://bugs.mageia.org/show_bug.cgi?id=36170
• https://lists.debian.org/debian-security-announce/2026/msg00322.html
• https://www.cve.org/CVERecord?id=CVE-2026-56208
• https://www.cve.org/CVERecord?id=CVE-2026-56209
• https://www.cve.org/CVERecord?id=CVE-2026-56210
• https://www.cve.org/CVERecord?id=CVE-2026-56211

SRPMS 10/core

• aom-3.13.1-1.1.mga10

9/core

• aom-3.6.0-1.2.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-71554 Description
Duplicate Host header facilitate request smuggling. (CVE-2026-71554) References

• https://bugs.mageia.org/show_bug.cgi?id=36188
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IDTJHCXCD2JELR2ZHWETBBYC3OYTW7QH/
• https://github.com/python-hyper/h2/security/advisories/GHSA-6hr6-w5qg-qmwg
• https://www.cve.org/CVERecord?id=CVE-2026-71554

SRPMS 10/core

• python-h2-4.3.0-1.1.mga10

9/core

• python-h2-4.1.0-2.1.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-76235 Description
Cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html. (CVE-2026-76235) References

• https://bugs.mageia.org/show_bug.cgi?id=36207
• https://lists.debian.org/debian-security-announce/2026/msg00385.html
• https://bugzilla.redhat.com/show_bug.cgi?id=2519497
• https://github.com/cockpit-project/cockpit/pull/23633
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KV2ED2IAJAGOAIPNS3HQS7G4KHJANP3C/
• https://www.cve.org/CVERecord?id=CVE-2026-76235

SRPMS 10/core

• cockpit-356.2-1.1.mga10

9/core

• cockpit-356.2-1.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-64611 , CVE-2026-64612 Description
cpu exhaustion via infinite loop in cfieee1284normalizemakemodel(). (CVE-2026-64611) cups image filter process abort via malformed png. (CVE-2026-64612) References

• https://bugs.mageia.org/show_bug.cgi?id=36182
• https://www.cve.org/CVERecord?id=CVE-2026-64611
• https://www.cve.org/CVERecord?id=CVE-2026-64612

SRPMS 10/core

• libcupsfilters-2.1.1-5.1.mga10

9/core

• cups-filters-1.28.16-6.4.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2018-13410 Description
zip test option (-T) command injection. Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. (CVE-2018-13410) References

• https://bugs.mageia.org/show_bug.cgi?id=36143
• https://www.openwall.com/lists/oss-security/2026/08/14/1
• https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
• https://lists.debian.org/debian-security-announce/2026/msg00350.html
• https://www.cve.org/CVERecord?id=CVE-2018-13410

SRPMS 10/core

• zip-3.0-17.1.mga10

9/core

• zip-3.0-14.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
Description
Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed. References

• https://bugs.mageia.org/show_bug.cgi?id=36184
• https://lists.debian.org/debian-security-announce/2026/msg00351.html

SRPMS 10/core

• unzip-6.0-8.1.mga10

9/core

• unzip-6.0-4.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-19873 Description
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. (CVE-2026-19873) References

• https://bugs.mageia.org/show_bug.cgi?id=36232
• https://www.openwall.com/lists/oss-security/2026/08/31/7
• https://github.com/FormFu/HTML-FormFu/issues/71
• https://www.cve.org/CVERecord?id=CVE-2026-19873

SRPMS 10/core

• perl-HTML-FormFu-2.60.0-5.1.mga10

9/core

• perl-HTML-FormFu-2.60.0-4.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-42250 Description
Off-by-One Leading to Out-of-Bounds Write in bzip2. (CVE-2026-42250 References

• https://bugs.mageia.org/show_bug.cgi?id=36240
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/5BZUFTRN4TGNACBM45SR6YO5FURLM3CM/
• https://inbox.sourceware.org/bzip2-devel/20260528145407.293768-1-mark@klomp.org/
• https://www.cve.org/CVERecord?id=CVE-2026-42250

SRPMS 10/core

• bzip2-1.0.8-7.1.mga10

9/core

• bzip2-1.0.8-5.1.mga9