Mageia — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical HTTP Request Smuggling Vulnerability in Starman Web Server

  A critical vulnerability has been identified in Starman versions prior to 0.4018, allowing HTTP Request Smuggling due to improper header precedence. The issue arises when both 'Content-Length' and 'Transfer-Encoding:…

  4 articles · Updated May 8, 2026
• Multiple CVEs Discovered in tar Affecting Ubuntu and Mageia Systems

  Multiple vulnerabilities were identified in the tar utility, affecting Ubuntu 22.04 LTS and 24.04 LTS, as well as Mageia systems. These vulnerabilities allow attackers to craft malicious tar files that can lead to file…

  2 articles · Updated June 2, 2026
• Mageia 9 libxml2 Critical DoS Vulnerabilities Identified

  Mageia 9 has been found to have multiple critical vulnerabilities in the libxml2 library, leading to denial of service (DoS) conditions. The issues include unbounded recursion, heap use after free, and various types of…

  4 articles · Updated January 30, 2026
• Mageia 9 Vulnerabilities in GraphicsMagick and libpng Addressed

  Recent updates to Mageia 9 have addressed critical vulnerabilities in GraphicsMagick and libpng. GraphicsMagick was found to have a stack write buffer overflow (CVE-2026-28690) and a heap overflow (CVE-2026-30883), both…

  2 articles · Updated March 28, 2026
• Multiple CVEs Discovered in Mageia's libssh Affecting Resource Management

  Mageia has reported several vulnerabilities in its libssh implementation, with the most recent advisories detailing five new CVEs (CVE-2026-0964 to CVE-2026-0968) published on March 26, 2026. These vulnerabilities…

  2 articles · Updated June 12, 2026
• Multiple Vulnerabilities Discovered in openSUSE and Mageia 9

  A series of vulnerabilities have been identified in openSUSE and Mageia 9, affecting various components including Python, Blender, and critical libraries. Key issues include moderate to critical vulnerabilities such as…

  33 articles · Updated November 22, 2025
• Debian Trixie Faces Critical FFmpeg Vulnerability Leading to DoS and Code Execution

  Debian Trixie has reported a critical vulnerability in FFmpeg that allows for denial of service (DoS) and potential code execution. This affects users of the Debian operating system, particularly those utilizing FFmpeg…

  20 articles · Updated December 7, 2025
• Debian 11 Faces Critical ReDoS Vulnerability in Python

  A critical ReDoS (Regular Expression Denial of Service) vulnerability has been identified in Python for Debian 11, leading to potential denial of service attacks. This advisory, identified as DLA-4418-1, affects users…

  10 articles · Updated December 22, 2025
• Critical Vulnerabilities Found in Mageia 9 and openSUSE Leap 16.0

  Mageia 9 has been identified with two critical vulnerabilities: a heap buffer overflow (CVE-2026) and a severe buffer overflow risk (CVE-2025). These vulnerabilities affect users of Mageia 9 and openSUSE Leap 16.0,…

  251 articles · Updated February 12, 2026
• Multiple Linux Distributions Address Security Vulnerabilities in November 2025

  Several Linux distributions, including openSUSE and Mageia, have released advisories addressing critical vulnerabilities in their systems. Key issues include important updates for CVE-2025-47913, CVE-2025, and various…

  49 articles · Updated November 28, 2025

Recent Intelligence Reports

• Mageia 9 libssh Security Flaw in SCP Causes Resource Exhaustion Issues — Linuxsecurity · June 12, 2026
• Mageia 2026-0168: tar — Linuxsecurity · June 2, 2026
• Mageia 9 perl-Starman Important HTTP Request Smuggling MGASA-2026 — Linuxsecurity · May 7, 2026
• Mageia 9 Kernel Important Security Advisory MGASA-2026 — Linuxsecurity · April 15, 2026
• Mageia 9 GraphicsMagick Important Buffer Overflows Fix MGASA-2026 — Linuxsecurity · March 25, 2026
• Debian postgresql-15 Important Security Flaw Memory Disclosure DSA-6132 — Linuxsecurity · February 12, 2026
• Mageia 9 xrdp Severe Buffer Overflow Risk MGASA-2026-0037 CVE-2025 — Linuxsecurity · February 11, 2026
• openSUSE Leap 16.0 Cockpit Packages Vulnerable to CVE-2025 — Linuxsecurity · February 11, 2026

Related Entities