7117 matches found
OESA-2026-3616 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2026-3615 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
glibc-2.44-1.1 on GA media (moderate)
glibc-2.44-1.1 on GA media Announcement ID: openSUSE-SU-2026:11660-1 Rating: moderate Cross-References: CVE-2026-6368 CVE-2026-6791 CVSS scores: CVE-2026-6368 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2026-6791 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H Affected...
OPENSUSE-SU-2026:11660-1 glibc-2.44-1.1 on GA media
These are all security issues fixed in the glibc-2.44-1.1 package on the GA media of openSUSE Tumbleweed...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.4.hum1 aarch64, x8664 glibc-2.43-8.4.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.4.hum1 aarch64, x8664 glibc-benchtests-2.43-8.4.hum1 aarch64, x8664...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...
CVE-2026-18374
A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.3.hum1 aarch64, x8664 glibc-2.43-8.3.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.3.hum1 aarch64, x8664 glibc-benchtests-2.43-8.3.hum1 aarch64, x8664...
glibc: Buffer Overflow in strfmon right-justification padding
A flaw was found in glibc. The strfmon and strfmonl functions are vulnerable to a buffer overflow when processing right-justified width padding. This occurs because an incorrect length is used for an internal memory operation, causing data to be written beyond its intended buffer. An attacker cou...
CVE-2026-18374
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
AZL-98042 CVE-2026-18374 affecting package glibc 2.38-21
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
UBUNTU-CVE-2026-18374
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
EUVD-2026-67222
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
CVE-2026-18374
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
CVE-2026-18374
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
CVE-2026-18374
CVE-2026-18374 affects the GNU C Library (glibc) version 2.45 or earlier . The vulnerability is a heap buffer overflow in the fopen function triggered by passing an effectively empty string to the ,ccs= syntax extension of the mode argument, when that input is attacker-controlled. The CVSS 3.1 sc...
CVE-2026-80489
A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...
WS-2026-0060
A number of vulnerabilities, two rated critical, have been discovered and fixed in the upstream libheif dependency bundled by sharp. These can lead to possible remote code execution on glibc-based Linux when processing untrusted input. sharp before 0.35.4 bundles libheif 1.23.1 or earlier; 0.35.4...
PT-2026-82651
Name of the Vulnerable Software and Affected Versions GNU C Library versions prior to 2.46 Description A heap buffer overflow can occur in the fopen function when an effectively empty string is passed to the ,ccs= syntax extension of the mode argument, provided the mode string is controlled by an...