Updated bind package fixes security vulnerabilities

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.55 fixes vulnerabilities. For information about the vulnerabilities see the links...

Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

Updated rootcerts & nss packages fix a security vulnerability

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. CVE-2026-113470...

Updated bluez package fixes security vulnerabilities

Out-of-bounds read in avrcp parsemediaelement and parsemediafolder. CVE-2026-75032 Unprivileged-local and adjacent-LE-peer leads to arbitrary code execution as root. CVE-2026-80185 Stack Overflow in name2utf8 causes DoS and potential code execution. CVE-2026-80186 AVRCP ListPlayerAttributes Doubl...

Updated roundcubemail package fixes security vulnerabilities

Fix IMAP command injection via CRLF in uid parameter of mail/headers and mail/viewsource action, reported by Wahab “NeoX” K. Fix bug where an alias login wasn’t qualified by IMAP host, reported by Milan Hoppe. Add a size limit to the CSS proxy content processing, reported by Milan Hoppe. Fix SSRF...

Updated golang package fixes a security vulnerability

crypto/x509: mitigation for security concerns with a specific Certificate Authority. CVE-2026-111943...

Updated jq package fixes security vulnerabilities

Embedded NUL truncates top-level jq programs loaded with -f. CVE-2026-41256 Signed-int overflow in stackreallocate jq VM stack. CVE-2026-41257 Wild stack write via signed-integer overflow in decNumber D2U macro. CVE-2026-43894 Embedded NUL in jq import paths causes local redaction-policy bypass a...

Updated perl-Mozilla-CA package fixes a security vulnerability

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. CVE-2026-113812...

Updated msgpack package fixes a security vulnerability

Integer Overflow in msgpackunpackerexpandbuffer Causes a False-Success Undersized Reservation. CVE-2026-72854...

Updated open-isns package fixes a security vulnerability

Double-free in the iSNS attribute decoder in open-iscsi. CVE-2026-55995...

Updated sudo package fixes security vulnerabilities

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. CVE-2026-82474 tz environment variable allows bypass of notbefore/notafter time-based authorization. CVE-2026-96512...

Updated php8.4 & php8.5 packages fix security vulnerabilities

Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible...

Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

Updated firefox, nss, firefox-l10n packages fix security vulnerabilities

Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...

Updated imagemagick package fixes security vulnerabilities

Please see the references...

Updated postgis package fixes a security vulnerability

PostGIS 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. CVE-2026-73515...

Updated libxpm package fixes a security vulnerability

Denial of service via unsigned underflow in libXpm's write path. CVE-2026-94287...

Updated libxtst package fixes a security vulnerability

Out-of-bounds read in libXtst's RECORD reply parser. CVE-2026-94286...

Updated libxi package fixes security vulnerabilities

Out-of-bounds read in libXi's XQueryDeviceState. CVE-2026-93541 Out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses. CVE-2026-93542 Out-of-bounds read in libXi's XI2 class parser. CVE-2026-93543 Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing...

Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...

Updated flatpak-builder package fixes a security vulnerability

Host code execution via git am hook execution in patch source extraction use-git-am. CVE-2026-86320...

Updated libpng package fixes a security vulnerability

Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression. CVE-2026-46675...

Updated openssh packages fix security vulnerabilities

Local mitm of x11 forwarding via abstract unix socket pre-binding in Red Hat Enterprise Linux openssh client versions. CVE-2026-55655 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server...

Updated perl-XS-Parse-Keyword package fixes a security vulnerability

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. CVE-2026-85644...

Updated mozjs140 package fixes a security vulnerability

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. CVE-2025-70103...

Updated mutt package fixes a security vulnerability

When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header CVE-2026-107570...

Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

Updated perl-Net-Whois-Raw package fixes a security vulnerability

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. CVE-2026-19954...

Updated python-django package fixes security vulnerabilities

Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...

Updated parted package fixes security vulnerabilities

A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application...

Updated libreoffice package fixes security vulnerabilities

Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...

Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Updated gpsd package fixes a security vulnerability

gpsprof Code Injection via SKY.satellites used Field. CVE-2026-60122...

Updated libx11 package fixes security vulnerabilities

libX11 XkbGetMap Reply Heap-based Buffer Overflow. CVE-2026-88806 Out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser. CVE-2026-94283 Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser. CVE-2026-94284 Out-of-bounds read...

Updated roundcubemail package fixes security vulnerabilities

Fix CSS declaration smuggling via un-encoded ampersand emission, reported by Zach Hanley of Horizon3.ai Fix CSS property injection via body background attribute, reported by zenithhostingevan Fix email header injection via bare CR in the subject field, reported by CVE-Hunter-Leo Fix email header...

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel...

Updated freeciv package fixes security vulnerabilities

Freeciv before 3.2.6 Heap Buffer Overflow via worklistload. CVE-2026-90556 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame. CVE-2026-90557...

Updated gnumeric package fixes a security vulnerability

Heap use-after-free when opening a malformed workbook. CVE-2026-97222...

Updated mingw-gdk-pixbuf package fixes security vulnerabilities

out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...

Updated patool package fixes a security vulnerability

Patool 4.0.5 Path Traversal via safeextract Function. CVE-2026-29509...

Updated apache package fixes security vulnerabilities

Limited RCE for some internal redirects to non-CGI files in CGI directories. CVE-2026-42356 moddav shared lock overflow. CVE-2026-42528 modheartmonitor denial of service. CVE-2026-46729 modsession: Session cookie not removed during internal redirect. CVE-2026-47360 modauthdigest reauthentication...

Updated perl-Imager package fixes security vulnerabilities

Buffer read underflows on 32-bit sizet systems decoding EXIF data. CVE-2026-73638 Palette off-by-one discloses uninitialized heap memory. CVE-2026-93018 TGA reader: signed colourmaplength causes process-killing allocator abort. CVE-2026-93019 Unvalidated rawdatachannels can cause incorrect memory...

Updated openvpn package fixes security vulnerabilities

Improve on checksessionbufnotused, catch possible double-free in the lame duck case. CVE-2026-84471 Reliability layer: avoid unbounded reliable TLS timeout, and ignore acks for packets that cannot be outstanding. CVE-2026-84732...

Updated nginx package fixes a security vulnerability

NGINX ngxhttpv3module vulnerability. CVE-2026-90439...

Updated golang packages fix security vulnerabilities

net/http: HTTP/2 server crash due to HPACK encoder race net/http: HTTP/2 server memory exhaustion due to Trailer headers crypto/tls: reject malformed ECH outer extension references cmd/go: checksum bypass for golang.org/fips140 cmd/go: checksum database bypass for golang.org/toolchain...

Updated cjose packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap buffer overflow in AES Key Wrap decryption A128KW/A192KW/A256KW. CVE-2026-53938 All-zero Content Encryption Key used for AES-CBC-HMAC JWE encryption. CVE-2026-53939...

Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-95386 Heap-based Buffer Overflow in Wireshark. CVE-2026-95387 Heap-based Buffer Overflow in Wireshark. CVE-2026-95388 Heap-based Buffer Overflow in Wireshark. CVE-2026-95389 NULL Pointer Dereference in Wireshark...

Updated vlc package fixes security vulnerabilities

VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability. CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability. CVE-2026-73324...

Updated ugrep package fixes a security vulnerability

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...