SUSE SLES12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4204-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4204-1 advisory. - CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. - CVE-2026-679...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. CVE-2026-6791: wordexp: unbounded alloca strndupa in parsetilde bsc1274723. CVE-2026-18374: overflow in the fopen ccs extension...

SUSE-SU-2026:4204-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. - CVE-2026-6791: wordexp: unbounded alloca strndupa in parsetilde bsc1274723. - CVE-2026-18374: overflow in the fopen ccs extensio...

SUSE-SU-2026:23738-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. - CVE-2026-19499: buffer...

SUSE-SU-2026:23830-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. - CVE-2026-19499: buffer...

MGASA-2026-0391 Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

USN-8737-2 glibc vulnerabilities

USN-8737-1 fixed vulnerabilities in GNU C Library. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly...

USN-8737-2: GNU C Library vulnerabilities

USN-8737-1 fixed vulnerabilities in GNU C Library. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly...

USN-8737-1 glibc vulnerabilities

It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-19499 It was discover...

USN-8737-1: GNU C Library vulnerabilities

It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-19499 It was discover...

NewStart CGSL MAIN 7.02 : glibc Multiple Vulnerabilities (NS-SA-2026-0097)

The remote NewStart CGSL host, running version MAIN 7.02, has glibc packages installed that are affected by multiple vulnerabilities: - Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network...

PT-2026-86906

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.3 through 2.44 Description Converting crafted EUC JISX0213 input to UCS-4 or internal wide character encoding using functions such as iconv can cause the calling application to hang. This occurs because certain EUC...

K000163028: glibc vulnerability CVE-2025-15281

Security Advisory Description Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process. CVE-2025-15281...

PT-2026-86427

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.38 through 2.44 Description Calling the functions strfmon and strfmon l can result in a buffer overflow where data is written past the end of the caller-supplied output buffer. This occurs when a conversion utilizes...

TencentOS Server 4: glibc (TSSA-2026:0850)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

PT-2026-84878

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.1 through 2.44 Description Calling the tdelete function on a sufficiently deep tree may result in writing one pointer past the end of an alloca-allocated array on the stack, potentially causing the application to crash...

OESA-2026-3418 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

SUSE CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

SUSE CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...