Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9 glibc Critical Heap Corruption and Memory Leak MGASA-2026-0022

mageia
Calendar Grey January 27, 2026
Dist Mageia Esm H88
Updated glibc packages for Mageia address critical vulnerabilities. Fix heap corruption and memory leak issues now.
MGASA-2026-0022 - Updated glibc packages fix security vulnerabilities

Summary

Description: Integer overflow in memalign leads to heap corruption. (CVE-2026-0861) getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler. (CVE-2026-0915) wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory. (CVE-2025-15281)

References

- https://bugs.mageia.org/show_bug.cgi?id=35036

- https://www.openwall.com/lists/oss-security/2026/01/16/5

- https://www.openwall.com/lists/oss-security/2026/01/16/6

- https://www.openwall.com/lists/oss-security/2026/01/20/3

- https://www.cve.org/CVERecord?id=CVE-2026-0861

- https://www.cve.org/CVERecord?id=CVE-2026-0915

- https://www.cve.org/CVERecord?id=CVE-2025-15281

Topics%20covered

Topics Covered

security advisory critical heap corruption DoS memory leak Mageia

Resolution

SRPMS

- 9/core/glibc-2.36-59.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 27 Jan 2026
URL: https://advisories.mageia.org/MGASA-2026-0022.html
Type: security
CVE: CVE-2026-0861, CVE-2026-0915, CVE-2025-15281

Topics%20covered

Topics Covered

security advisory critical heap corruption DoS memory leak Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here