Actualizaciones de Seguridad

Publication date: 18 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-0799 , CVE-2026-31911 , CVE-2026-31912 , CVE-2026-6244 , CVE-2026-6554 , CVE-2026-18313 , CVE-2026-18238 Description
OOBR and OOBW in libpcap before 1.10.7. (CVE-2026-0799) abort() in libpcap before 1.10.7 on an invalid BPF opcode. (CVE-2026-31911) OOBR in libpcap before 1.10.7. (CVE-2026-31912) Division by zero in libpcap before 1.10.7. (CVE-2026-6244) Infinte loop in libpcap before 1.10.7. (CVE-2026-6554) rpcapd memory leak in libpcap before 1.10.7. (CVE-2026-18313) OOBR in rpcap client in libpcap before 1.10.7. (CVE-2026-18238) References

• https://bugs.mageia.org/show_bug.cgi?id=36286
• https://www.openwall.com/lists/oss-security/2026/09/09/2
• https://www.cve.org/CVERecord?id=CVE-2026-0799
• https://www.cve.org/CVERecord?id=CVE-2026-31911
• https://www.cve.org/CVERecord?id=CVE-2026-31912
• https://www.cve.org/CVERecord?id=CVE-2026-6244
• https://www.cve.org/CVERecord?id=CVE-2026-6554
• https://www.cve.org/CVERecord?id=CVE-2026-18313
• https://www.cve.org/CVERecord?id=CVE-2026-18238

SRPMS 10/core

• libpcap-1.10.7-1.mga10

9/core

• libpcap-1.10.7-1.mga9

Publication date: 18 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2025-55154 Description
Integer overflows in MNG magnification. (CVE-2025-55154) References

• https://bugs.mageia.org/show_bug.cgi?id=36290
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/UOLRN3FZUDRWOSHYEWPEZNVV7735CFHF/
• https://www.cve.org/CVERecord?id=CVE-2025-55154

SRPMS 10/tainted

• graphicsmagick-1.3.46-5.2.mga10.tainted

9/tainted

• graphicsmagick-1.3.40-1.8.mga9.tainted

Publication date: 17 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86420 , CVE-2026-86421 , CVE-2026-86423 , CVE-2026-86424 , CVE-2026-86425 Description
Heap-use-after-free in Layer method of PerlMagick could result in a crash Path Policy TOCTOU symlink race bypass in the video decoder Heap-use-after-free in the GetList method of PerlMagick could result in a crash Memory Leak in MSL decoder Denial of service when exhausting the process memory budget Policy Bypass in UHDR encoder Division by Zero in FLIF encoder Null Pointer Dereference in PNM coder when hitting a memory limit Policy Bypass in PCD, CUBE and HALD decoder when using a specific command line option. Use after free in ImagesToBlob method References

• https://bugs.mageia.org/show_bug.cgi?id=36167
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67
• https://www.cve.org/CVERecord?id=CVE-2026-86420
• https://www.cve.org/CVERecord?id=CVE-2026-86421
• https://www.cve.org/CVERecord?id=CVE-2026-86423
• https://www.cve.org/CVERecord?id=CVE-2026-86424
• https://www.cve.org/CVERecord?id=CVE-2026-86425

SRPMS 10/core

• imagemagick-7.1.2.31-1.mga10

10/tainted

• imagemagick-7.1.2.31-1.mga10.tainted

Publication date: 17 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-48817 , CVE-2026-54282 , CVE-2026-54283 Description
Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`. (CVE-2026-48817) Unvalidated request path concatenated into authority poisons request.url.hostname. (CVE-2026-54282) References

• https://bugs.mageia.org/show_bug.cgi?id=36224
• https://lists.debian.org/debian-security-announce/2026/msg00389.html
• https://www.cve.org/CVERecord?id=CVE-2026-48817
• https://www.cve.org/CVERecord?id=CVE-2026-54282
• https://www.cve.org/CVERecord?id=CVE-2026-54283

SRPMS 10/core

• python-starlette-0.46.0-3.2.mga10

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-9672 Description
A vulnerability was discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed GIF file is processed. References

• https://bugs.mageia.org/show_bug.cgi?id=36162
• https://lists.debian.org/debian-security-announce/2026/msg00320.html?pow_referer=https%3A%2F%2Fbugs.mageia.org%2F
• https://www.cve.org/CVERecord?id=CVE-2026-9672

SRPMS 10/core

• libgd-2.3.3-11.1.mga10

9/core

• libgd-2.3.3-6.1.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-10294 Description
PackageKit API pk-transaction.c g_file_test improper authorization. (CVE-2026-10294) References

• https://bugs.mageia.org/show_bug.cgi?id=36166
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/M6KYMZZSTVVP7SBKMB54MNOK7HGHQQN4/
• https://github.com/PackageKit/PackageKit/issues/969
• https://www.cve.org/CVERecord?id=CVE-2026-10294

SRPMS 10/core

• packagekit-1.3.5-1.1.mga10

9/core

• packagekit-1.2.6-2.2.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-56208 , CVE-2026-56209 , CVE-2026-56210 , CVE-2026-56211 Description
Heap buffer overflow in av1 encoder first-pass stats buffer via lap mode. (CVE-2026-56208) Arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack. (CVE-2026-56209) Heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id. (CVE-2026-56210) Remote code execution via svc layer context handling with attacker-controlled frames. (CVE-2026-56211) References

• https://bugs.mageia.org/show_bug.cgi?id=36170
• https://lists.debian.org/debian-security-announce/2026/msg00322.html
• https://www.cve.org/CVERecord?id=CVE-2026-56208
• https://www.cve.org/CVERecord?id=CVE-2026-56209
• https://www.cve.org/CVERecord?id=CVE-2026-56210
• https://www.cve.org/CVERecord?id=CVE-2026-56211

SRPMS 10/core

• aom-3.13.1-1.1.mga10

9/core

• aom-3.6.0-1.2.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-71554 Description
Duplicate Host header facilitate request smuggling. (CVE-2026-71554) References

• https://bugs.mageia.org/show_bug.cgi?id=36188
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IDTJHCXCD2JELR2ZHWETBBYC3OYTW7QH/
• https://github.com/python-hyper/h2/security/advisories/GHSA-6hr6-w5qg-qmwg
• https://www.cve.org/CVERecord?id=CVE-2026-71554

SRPMS 10/core

• python-h2-4.3.0-1.1.mga10

9/core

• python-h2-4.1.0-2.1.mga9

Publication date: 16 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-76235 Description
Cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html. (CVE-2026-76235) References

• https://bugs.mageia.org/show_bug.cgi?id=36207
• https://lists.debian.org/debian-security-announce/2026/msg00385.html
• https://bugzilla.redhat.com/show_bug.cgi?id=2519497
• https://github.com/cockpit-project/cockpit/pull/23633
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KV2ED2IAJAGOAIPNS3HQS7G4KHJANP3C/
• https://www.cve.org/CVERecord?id=CVE-2026-76235

SRPMS 10/core

• cockpit-356.2-1.1.mga10

9/core

• cockpit-356.2-1.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-64611 , CVE-2026-64612 Description
cpu exhaustion via infinite loop in cfieee1284normalizemakemodel(). (CVE-2026-64611) cups image filter process abort via malformed png. (CVE-2026-64612) References

• https://bugs.mageia.org/show_bug.cgi?id=36182
• https://www.cve.org/CVERecord?id=CVE-2026-64611
• https://www.cve.org/CVERecord?id=CVE-2026-64612

SRPMS 10/core

• libcupsfilters-2.1.1-5.1.mga10

9/core

• cups-filters-1.28.16-6.4.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2018-13410 Description
zip test option (-T) command injection. Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. (CVE-2018-13410) References

• https://bugs.mageia.org/show_bug.cgi?id=36143
• https://www.openwall.com/lists/oss-security/2026/08/14/1
• https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
• https://lists.debian.org/debian-security-announce/2026/msg00350.html
• https://www.cve.org/CVERecord?id=CVE-2018-13410

SRPMS 10/core

• zip-3.0-17.1.mga10

9/core

• zip-3.0-14.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
Description
Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed. References

• https://bugs.mageia.org/show_bug.cgi?id=36184
• https://lists.debian.org/debian-security-announce/2026/msg00351.html

SRPMS 10/core

• unzip-6.0-8.1.mga10

9/core

• unzip-6.0-4.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-19873 Description
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. (CVE-2026-19873) References

• https://bugs.mageia.org/show_bug.cgi?id=36232
• https://www.openwall.com/lists/oss-security/2026/08/31/7
• https://github.com/FormFu/HTML-FormFu/issues/71
• https://www.cve.org/CVERecord?id=CVE-2026-19873

SRPMS 10/core

• perl-HTML-FormFu-2.60.0-5.1.mga10

9/core

• perl-HTML-FormFu-2.60.0-4.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-42250 Description
Off-by-One Leading to Out-of-Bounds Write in bzip2. (CVE-2026-42250 References

• https://bugs.mageia.org/show_bug.cgi?id=36240
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/5BZUFTRN4TGNACBM45SR6YO5FURLM3CM/
• https://inbox.sourceware.org/bzip2-devel/20260528145407.293768-1-mark@klomp.org/
• https://www.cve.org/CVERecord?id=CVE-2026-42250

SRPMS 10/core

• bzip2-1.0.8-7.1.mga10

9/core

• bzip2-1.0.8-5.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-66032 , CVE-2026-66033 , CVE-2026-66035 Description
Double-Free Heap Corruption via sftp_open(). (CVE-2026-66032) Integer Underflow DoS via AES-GCM Cipher Negotiation. (CVE-2026-66033) Heap Buffer Overflow via ETM Cipher Negotiation. (CVE-2026-66035) References

• https://bugs.mageia.org/show_bug.cgi?id=36256
• https://ubuntu.com/security/notices/USN-8722-1
• https://www.cve.org/CVERecord?id=CVE-2026-66032
• https://www.cve.org/CVERecord?id=CVE-2026-66033
• https://www.cve.org/CVERecord?id=CVE-2026-66035

SRPMS 10/core

• libssh2-1.11.1-2.2.mga10

9/core

• libssh2-1.11.0-1.2.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2025-45582 , CVE-2026-18508 , CVE-2026-18477 Description
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. (CVE-2025-45582) Tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape. (CVE-2026-18477) Tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite. (CVE-2026-18508) References

• https://bugs.mageia.org/show_bug.cgi?id=36289
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ASLMG5TUYWS2IEKBCOWN5KZ2K55V366N/
• https://www.cve.org/CVERecord?id=CVE-2025-45582
• https://www.cve.org/CVERecord?id=CVE-2026-18508
• https://www.cve.org/CVERecord?id=CVE-2026-18477

SRPMS 10/core

• tar-1.35-4.1.mga10

9/core

• tar-1.35-4.1.mga9

Publication date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-86219 Description
Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. (CVE-2026-86219) References

• https://bugs.mageia.org/show_bug.cgi?id=36264
• https://www.openwall.com/lists/oss-security/2026/09/06/1
• https://metacpan.org/release/EHUELS/Authen-SASL-2.2000/source/lib/Authen/SASL/Perl/DIGEST_MD5.pm#L203-222
• https://metacpan.org/release/EHUELS/Authen-SASL-2.2000/source/lib/Authen/SASL/Perl/DIGEST_MD5.pm#L410-414
• https://datatracker.ietf.org/doc/html/rfc2831#section-2.1.2
• https://metacpan.org/release/EHUELS/Authen-SASL-2.2100/changes
• https://www.cve.org/CVERecord?id=CVE-2026-86219

SRPMS 10/core

• perl-Authen-SASL-2.190.0-1.1.mga10

9/core

• perl-Authen-SASL-2.160.0-13.2.mga9

Publication date: 13 Sep 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-13204 Description
It was discovered that Bind incorrectly handled DNSSEC validation when a domain was covered by both NSEC and NSEC3 records with only one type having an RRSIG. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service (CVE-2026-13204). References

• https://bugs.mageia.org/show_bug.cgi?id=36241
• https://ubuntu.com/security/notices/USN-8696-1
• https://kb.isc.org/docs/cve-2026-13204
• https://www.cve.org/CVERecord?id=CVE-2026-13204
• https://www.cve.org/CVERecord?id=CVE-2026-13204

SRPMS 9/core

• bind-9.18.50-1.1.mga9

Publication date: 13 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-58049 , CVE-2026-64830 , CVE-2026-64832 , CVE-2026-64833 , CVE-2026-64834 , CVE-2026-64835 , CVE-2026-65703 , CVE-2026-65704 , CVE-2026-65705 , CVE-2026-65706 , CVE-2026-66036 , CVE-2026-66037 , CVE-2026-66038 , CVE-2026-66039 , CVE-2026-66041 , CVE-2026-70628 , CVE-2026-70629 , CVE-2026-70630 , CVE-2026-70631 , CVE-2026-70632 , CVE-2026-75141 , CVE-2026-75142 , CVE-2026-75143 , CVE-2026-75144 , CVE-2026-75146 Description
Out-of-Bounds Write in RASC Decoder decode_dlta(). (CVE-2026-58049) Heap Buffer Overflow via VobSub Subtitle Demuxer. (CVE-2026-64830) Double-Free in NVDEC Hardware Decoder via nvdec.c. (CVE-2026-64832) Out-of-Bounds Read via S/PDIF Muxer spdifenc.c. (CVE-2026-64833) Infinite Loop DoS via RTP/ASF Demuxer. (CVE-2026-64834) Out-of-Bounds Memory Access in ADX Audio Decoder. (CVE-2026-64835) Out-of-Bounds Write in TDSC Video Decoder. (CVE-2026-65703) Out-of-Bounds Write via TY Demuxer and Shorten Decoder. (CVE-2026-65704) vf_floodfill Out-of-Bounds Write via filter_frame(). (CVE-2026-65705) vf_swaprect Out-of-Bounds Write via NV12 Frame Processing. (CVE-2026-65706) Heap Out-of-Bounds Write in vf_hqdn3d Filter. (CVE-2026-66036) IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu(). (CVE-2026-66037) LCL/ZLIB Video Decoder Information Disclosure via lcldec.c. (CVE-2026-66038) MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File. (CVE-2026-66039) Heap Out-of-Bounds Write via vf_quirc Filter. (CVE-2026-66041) DVB Subtitle Parser Heap Buffer Overflow via WTV File. (CVE-2026-70628) Uninitialized Heap Memory Read in RSCC Decoder. (CVE-2026-70629) Uninitialized Heap Memory Read in Screenpresso Decoder. (CVE-2026-70630) Uninitialized Heap Memory Read in TIFF Decoder. (CVE-2026-70631) Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing. (CVE-2026-70632) Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing. (CVE-2026-75141) Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c. (CVE-2026-75142) Heap Buffer Overflow via RIST Protocol Reader. (CVE-2026-75143) Heap Buffer Overflow in VC-2/Dirac RTP Packetizer. (CVE-2026-75144) Out-of-Bounds Read in DASH Demuxer via dashdec.c. (CVE-2026-75146) References

• https://bugs.mageia.org/show_bug.cgi?id=36272
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/36MFOOZUWA23VQEN5YTRKBQNH32RPWZB/
• https://www.cve.org/CVERecord?id=CVE-2026-58049
• https://www.cve.org/CVERecord?id=CVE-2026-64830
• https://www.cve.org/CVERecord?id=CVE-2026-64832
• https://www.cve.org/CVERecord?id=CVE-2026-64833
• https://www.cve.org/CVERecord?id=CVE-2026-64834
• https://www.cve.org/CVERecord?id=CVE-2026-64835
• https://www.cve.org/CVERecord?id=CVE-2026-65703
• https://www.cve.org/CVERecord?id=CVE-2026-65704
• https://www.cve.org/CVERecord?id=CVE-2026-65705
• https://www.cve.org/CVERecord?id=CVE-2026-65706
• https://www.cve.org/CVERecord?id=CVE-2026-66036
• https://www.cve.org/CVERecord?id=CVE-2026-66037
• https://www.cve.org/CVERecord?id=CVE-2026-66038
• https://www.cve.org/CVERecord?id=CVE-2026-66039
• https://www.cve.org/CVERecord?id=CVE-2026-66041
• https://www.cve.org/CVERecord?id=CVE-2026-70628
• https://www.cve.org/CVERecord?id=CVE-2026-70629
• https://www.cve.org/CVERecord?id=CVE-2026-70630
• https://www.cve.org/CVERecord?id=CVE-2026-70631
• https://www.cve.org/CVERecord?id=CVE-2026-70632
• https://www.cve.org/CVERecord?id=CVE-2026-75141
• https://www.cve.org/CVERecord?id=CVE-2026-75142
• https://www.cve.org/CVERecord?id=CVE-2026-75143
• https://www.cve.org/CVERecord?id=CVE-2026-75144
• https://www.cve.org/CVERecord?id=CVE-2026-75146

SRPMS 10/core

• ffmpeg-7.1.5-1.1.mga10

10/tainted

• ffmpeg-7.1.5-1.1.mga10.tainted

Publication date: 12 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-59986 , CVE-2026-61547 Description
amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read). (CVE-2026-59986) Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY. (CVE-2026-61547) References

• https://bugs.mageia.org/show_bug.cgi?id=36189
• https://lists.debian.org/debian-security-announce/2026/msg00358.html
• https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-jgjf-7fwf-f3c7
• https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-hfjv-vcp3-39wh
• https://ubuntu.com/security/notices/USN-8724-1
• https://www.cve.org/CVERecord?id=CVE-2026-59986
• https://www.cve.org/CVERecord?id=CVE-2026-61547

SRPMS 10/core

• librabbitmq-0.15.0-2.2.mga10

9/core

• librabbitmq-0.11.0-1.2.mga9