Mageia 10 libtiff Significant Denial of Service CVE-2026

Back Linuxsecurity

Mageia 10 libtiff Significant Denial of Service CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 13, 2026

Share: View original

Description: The updated packages fix a security vulnerability: Denial of Service via large SamplesPerPixel tag. (CVE-2026-36849)

Description: The updated packages fix a security vulnerability: Denial of Service via large SamplesPerPixel tag. (CVE-2026-36849)

- - - -

-

-

-

-

- 10/core/libtiff-4.7.2-1.mga10

- 10/core/libtiff-4.7.2-1.mga10

Publication date: 13 Jul 2026 URL: https: //advisories.mageia.org/MGASA-2026-0246.html Type: security CVE: CVE-2026-36849

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mageia 10 Security Vulnerabilities Lead to Denial of Service Risks Mageia 10 has released security updates addressing critical Denial of Service vulnerabilities in libxml2 and libtiff. CVE-2026-6732 affects systems processing crafted xsd-validated documents, while CVE-2026-36849 targets large SamplesPerPixel tags in libtiff. Both vulnerabilities were disclosed on July 13, 2026, and pose significant risks to users of Mageia 10. Additionally, a previous advisory on July 11, 2026, detailed multiple vulnerabilities in libarchive, including CVE-2025-60753 and CVE-2026-5121. Users are urged to apply the latest patches to mitigate these risks. The vulnerabilities could lead to service disruptions and impact system availability for affected users. 68 sources 71

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

CWE-400 - Uncontrolled Resource Consumption

Domains (1)

advisories.mageia.org

Vulnerabilities (1)

Denial Of Service Via Large SamplesPerPixel Tag