Updated weechat package fixes security vulnerabilities
Publication date: 27 Oct 2026Modification date: 27 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-53524 , CVE-2026-53525
Description
Decompression Bomb in Relay WebSocket (DoS). (CVE-2026-53524)
Non-Constant-Time Password Hash Comparison in Relay Authentication.
(CVE-2026-53525)
References
- https://bugs.mageia.org/show_bug.cgi?id=36178
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VFSQ7FTIVCLLWHLTI3PZWITYB7QEHYLO/
- https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3
- https://weechat.org/doc/weechat/security/WSA-2026-1/
- https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc
- https://weechat.org/doc/weechat/security/WSA-2026-2/
- https://www.cve.org/CVERecord?id=CVE-2026-53524
- https://www.cve.org/CVERecord?id=CVE-2026-53525
SRPMS
10/core
- weechat-4.10.0-1.mga10