MGASA-2026-0495

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2026-0495.html

Import Source

https://advisories.mageia.org/MGASA-2026-0495.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2026-0495

Upstream

CVE-2025-15614

Published

2026-10-12T20:48:13Z

Modified

2026-10-12T21:00:03Z

Summary

Updated ugrep package fixes a security vulnerability

Details

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process.

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:10 / ugrep

Package

Name: ugrep
Purl: pkg:rpm/mageia/ugrep?arch=source&distro=mageia-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.8.5-1.mga10

Ecosystem specific

{
    "section":  "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2026-0495.json"