Mageia 10 Security Vulnerabilities Lead to Denial of Service Risks

Linuxsecurity

Mageia 10 Security Vulnerabilities Lead to Denial of Service Risks

First seen 14 Jul 2026, 09:39 UTC • •70.5

Article Content

1 / 69

Browse articles

ThreatCluster •July 15, 2026 at 08:30 UTC

•Mageia 10 has critical Denial of Service vulnerabilities in libxml2 and libtiff.
•CVE-2026-6732 and CVE-2026-36849 were disclosed on July 13, 2026.
•Users are advised to apply patches to prevent potential service disruptions.

Mageia 10 has released security updates addressing critical Denial of Service vulnerabilities in libxml2 and libtiff. CVE-2026-6732 affects systems processing crafted xsd-validated documents, while CVE-2026-36849 targets large SamplesPerPixel tags in libtiff. Both vulnerabilities were disclosed on July 13, 2026, and pose significant risks to users of Mageia 10. Additionally, a previous advisory on July 11, 2026, detailed multiple vulnerabilities in libarchive, including CVE-2025-60753 and CVE-2026-5121. Users are urged to apply the latest patches to mitigate these risks. The vulnerabilities could lead to service disruptions and impact system availability for affected users.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 92d ago How this analysis works

Timeline

2025-11-05

CVE-2025-60753 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-03-13

CVE-2026-4111 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-03-19

CVE-2026-4424 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-03-19

CVE-2026-4426 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-03-30

CVE-2026-5121 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-04-23

CVE-2026-6732 published

Denial of service vulnerability in libxml2 disclosed, affecting document processing.

2026-07-11

Multiple vulnerabilities in libarchive disclosed

Advisory published detailing several vulnerabilities, including CVE-2025-60753 and CVE-2026-5121.

2026-07-13

CVE-2026-36849 published

Denial of service vulnerability in libtiff disclosed, affecting image processing.

More articles in this cluster (68)

Following this threat?

Track CVE-2023-31122 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…