glibc security update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glibc: glibc: Process abort due to invalid memory in wordexp

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

RHEL 8 : glibc (RHSA-2026:76777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76777 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

ALSA-2026:76777 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

Astra Linux – Vulnerability in glibc

The wordexp function in the GNU C Library also known as glibc, up to version 2.33, may crash or access arbitrary memory during the parseparam function located in posix/wordexp.c when called with an untrusted, crafted pattern. This could potentially lead to a denial of service or the disclosure of...

openSUSE 16: cross-aarch64-glibc-devel / cross-ppc64le-glibc-devel / etc (openSUSE-SU-2026:21968-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21968-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723....

Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (crlsa-2021_4358)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214358 advisory. glibc: Arbitrary read in wordexp CVE-2021-35942 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c CVE-2021-27645 glibc: mqnotify does no...

AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1772186153)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772186153 advisory. - Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to...

Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (crlsa-2026_4772)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264772 advisory. glibc: glibc: Information disclosure via zero-valued network query CVE-2026-0915 glibc: wordexp with WRDEREUSE and WRDEAPPEND may return uninitialized memo...

Rocky Linux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1772186153)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772186153 advisory. - Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to...

AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.2:CLSA-2026:1773827924)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1773827924 advisory. - Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to...

SUSE-SU-2026:23934-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local...

SUSE-SU-2026:23929-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2026-090401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090401 advisory. The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted,...

SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4250-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4250-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. CVE-2026-19499: buffer overflo...

SUSE-SU-2026:4250-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. - CVE-2026-19499: buffer...