MGASA-2026-0561
- Source
- https://advisories.mageia.org/MGASA-2026-0561.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0561.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0561
- Upstream
CVE (2)
- Published
- 2026-10-27T20:02:56Z
- Modified
- 2026-10-27T20:15:06Z
- Summary
- Updated weechat package fixes security vulnerabilities
- Details
-
Decompression Bomb in Relay WebSocket (DoS). (CVE-2026-53524) Non-Constant-Time Password Hash Comparison in Relay Authentication. (CVE-2026-53525)
- References
-
- https://advisories.mageia.org/MGASA-2026-0561.html
- https://bugs.mageia.org/show_bug.cgi?id=36178
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VFSQ7FTIVCLLWHLTI3PZWITYB7QEHYLO/
- https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3
- https://weechat.org/doc/weechat/security/WSA-2026-1/
- https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc
- https://weechat.org/doc/weechat/security/WSA-2026-2/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / weechat
Package
- Name
- weechat
- Purl
- pkg:rpm/mageia/weechat?arch=source&distro=mageia-10