Advisories » MGASA-2026-0484

Updated libextractor package fixes security vulnerabilities

Publication date: 12 Oct 2026
Modification date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-91752 , CVE-2026-100310

Description

GNU libextractor before 1.15 Stack Overflow via OLE2. (CVE-2026-91752)
GNU libextractor before 1.16 Privilege Escalation via
LIBEXTRACTOR_PREFIX. (CVE-2026-100310)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36327
• https://www.openwall.com/lists/oss-security/2026/09/16/16
• https://www.vulncheck.com/advisories/gnu-libextractor-before-1.15-stack-overflow-via-ole2
• https://www.openwall.com/lists/oss-security/2026/09/25/25
• https://www.vulncheck.com/advisories/gnu-libextractor-before-1.16-privilege-escalation-via-libextractor-prefix
• https://www.cve.org/CVERecord?id=CVE-2026-91752
• https://www.cve.org/CVERecord?id=CVE-2026-100310

SRPMS

10/core

• libextractor-1.16-1.mga10