Advisories » MGASA-2026-0299

Updated libnfs packages fix a security vulnerability

Publication date: 25 Jul 2026
Modification date: 25 Jul 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-53689

Description

The updated packages fix a security vulnerability:
libnfs through 6.0.2 before 55c18ea does not validate a string size,
leading to an integer overflow during a connection to a crafted NFS
server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.
(CVE-2026-53689)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35753
• https://ubuntu.com/security/notices/USN-8464-1
• https://www.cve.org/CVERecord?id=CVE-2026-53689

SRPMS

10/core

• libnfs-6.0.2-2.1.mga10

9/core

• libnfs-5.0.2-1.1.mga9