Advisories ยป MGASA-2026-0512

Updated parted package fixes security vulnerabilities

Publication date: 17 Oct 2026
Modification date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-89085 , CVE-2026-89088

Description

A heap-based buffer overflow can occur when processing a specially
crafted FAT32 filesystem due to an integer calculation error during
buffer allocation. A local attacker could exploit this by enticing a
user or automated service to open a malicious filesystem image,
resulting in an application crash leading to a Denial of Service (DoS)
or potential memory corruption.
A heap-based buffer overflow exists in libparted's file system resizing
logic when handling FAT16 volumes. By convincing a user or administrator
to resize a specially crafted FAT16 file system image with malformed
directory metadata, an attacker can trigger an oversized read into a
fixed-size memory buffer. This issue causes memory corruption, resulting
in an application crash and a denial of service (DoS).

References

SRPMS

10/core