Important: glibc

Issue Overview: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing...

OPENSUSE-SU-2026:10662-1 glibc-2.43-1.1 on GA media

These are all security issues fixed in the glibc-2.43-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-41499

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE vulnerabilities exist in parseunamestring remotedop.c. This function processes OS identification data from agents and...

CLSA-2026-1777481470 glibc: Fix of CVE-2021-3326

CVE-2021-3326: fix assertion failure in iconv ISO-2022-JP-3 module...

CVE-2026-6238

GLIBC: The deprecated debugging functions ns_printrrf, ns_printrr and fp_nquery in GNU C Library (glibc) 2.2 and newer fail to validate RDATA against its length for DNS LOC, CERT, TKEY or TSIG records. This may let an attacker craft a DNS response that crashes a target application or reads uninit...

SUSE-SU-2026:21424-1 Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application bsc1261209...

SUSE-SU-2026:21395-1 Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application bsc1261209...

SUSE-SU-2026:20608-1 Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues: Changes in glibc-livepatches: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow bsc1256913...

SUSE-SU-2026:20544-1 Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues: Changes in glibc-livepatches: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow bsc1256913...

OESA-2026-2101 ntfs-3g security update

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. Security Fixes: A heap buff...

CVE-2026-5358 vulnerabilities

Vulnerabilities for packages: glibc...

GHSA-JJ2G-XQ7W-GF88 vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-5358

No description is available for this CVE. Mitigation To mitigate this issue, ensure that Network Information Service NIS is not in use on affected systems. NIS is an obsolete service and its use is deprecated in modern Red Hat Enterprise Linux environments. If NIS is not required, disable any...

SUSE SLES15 Security Update : glibc-livepatches (SUSE-SU-2026:1498-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:1498-1 advisory. This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an...

SUSE SLES15 Security Update : glibc-livepatches (SUSE-SU-2026:1501-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:1501-1 advisory. This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an...

glibc: Fix of 3 CVEs

CVE-2018-6485: fix integer overflows in memalign and malloc - CVE-2018-1000001: fix realpath buffer underflow via getcwd - CVE-2018-19591: fix ifnametoindex descriptor leak...

CLSA-2026-1776605836 glibc: Fix of 3 CVEs

CVE-2018-6485: fix integer overflows in memalign and malloc - CVE-2018-1000001: fix realpath buffer underflow via getcwd - CVE-2018-19591: fix ifnametoindex descriptor leak...

Security update for glibc (important)

openSUSE security update: security update for glibc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20501-1 Rating: important References: bsc1258319 bsc1260078 bsc1260082 Cross-References: CVE-2026-4437 CVE-2026-4438 CVSS scores: CVE-2026-4437 SUSE ...

CVE-2026-5450

Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow...

CVE-2026-5928 Potential buffer under-read in ungetwc

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...