MGASA-2026-0022

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0022.html
Import Source
https://advisories.mageia.org/MGASA-2026-0022.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0022
Upstream
Published
2026-01-27T18:20:27Z
Modified
2026-04-16T04:41:56Z
Summary
Updated glibc packages fix security vulnerabilities
Details

Integer overflow in memalign leads to heap corruption. (CVE-2026-0861) getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler. (CVE-2026-0915) wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory. (CVE-2025-15281)

References
Credits

Affected packages

Mageia:9 / glibc

Package

Name
glibc
Purl
pkg:rpm/mageia/glibc?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.36-59.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0022.json"