CVE-2026-5928
Potential buffer under-read in ungetwc
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Potential buffer under-read in ungetwc
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
CVE-2026-5928- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-127
- Updated
- 2026-11-02
EUVDEUVD-2026-23980
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
EUVD-2026-23980- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-829p-mc9m-7xhr
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set...
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
GHSA-829p-mc9m-7xhr- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-127
- Updated
- 2026-11-02
NVD
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
CVE-2026-5928- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-127
- Updated
- 2026-11-02
OSV
Potential buffer under-read in ungetwc
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
CVE-2026-5928- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-127
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-5928
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
DEBIAN-CVE-2026-5928- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 32 moreShow less
OSVOESA-2026-2409
glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
Security Fix(es):
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.(CVE-2026-5450)
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.(CVE-2026-5928)
- Record
OESA-2026-2409- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2410
glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
Security Fix(es):
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.(CVE-2026-5450)
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.(CVE-2026-5928)
- Record
OESA-2026-2410- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2411
glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
Security Fix(es):
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.(CVE-2026-5450)
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.(CVE-2026-5928)
- Record
OESA-2026-2411- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2412
glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
Security Fix(es):
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.(CVE-2026-5450)
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.(CVE-2026-5928)
- Record
OESA-2026-2412- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2489
glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
Security Fix(es):
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.(CVE-2026-5450)
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.(CVE-2026-5928)
- Record
OESA-2026-2489- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:12740
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:12740- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42694
Red Hat Security Advisory: glibc security update
- Record
RHSA-2026:42694- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42733
Red Hat Security Advisory: glibc security update
- Record
RHSA-2026:42733- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42952
Red Hat Security Advisory: glibc security update
- Record
RHSA-2026:42952- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:42694
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
-
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
-
glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
-
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:42694- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:42733
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
-
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
-
glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
-
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:42733- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:42952
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
-
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
-
glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
-
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:42952- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-5928
CVE-2026-5928 in glibc - Patched by Root
Root has patched CVE-2026-5928 in the glibc package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2026-5928- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-5928
CVE-2026-5928 in glibc - Patched by Root
Root has patched CVE-2026-5928 in the glibc package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2026-5928- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H - Updated
- 2026-11-04
OSVROOT-OS-DEBIAN-13-CVE-2026-5928
CVE-2026-5928 in glibc - Patched by Root
Root has patched CVE-2026-5928 in the glibc package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2026-5928- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-5928
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
UBUNTU-CVE-2026-5928- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2026:42694 No score
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
- glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
- glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
- glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:42694- Updated
- 2026-11-02
OSVALSA-2026:42733 No score
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
- glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
- glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
- glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:42733- Updated
- 2026-11-02
OSVALSA-2026:42952 No score
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
- glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
- glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
- glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:42952- Updated
- 2026-11-02
OSVAZL-83087 No score
CVE-2026-5928 affecting package glibc 2.38-21
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.
A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
- Record
AZL-83087- Updated
- 2026-11-05
OSVCLSA-2026-1780995582 No score
glibc: Fix of 3 CVEs
- CVE-2026-5450: fix off-by-one heap overflow in scanf %mc/%ms allocation
- CVE-2026-5928: fix buffer under-read in _IO_wdefault_pbackfail (ungetwc)
- Record
CLSA-2026-1780995582- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10770-1 No score
glibc-2.43-3.1 on GA media
These are all security issues fixed in the glibc-2.43-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10770-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20764-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
openSUSE-SU-2026:20764-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21682-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:21682-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21688-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:21688-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21751-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:21751-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21780-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:21780-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21807-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:21807-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2231-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:2231-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2333-1 No score
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
- Record
SUSE-SU-2026:2333-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2440-1 No score
Security update for glibc
This update for glibc fixes the following issues:
- CVE-2026-5928: libio: Fix ungetwc operating on byte stream (bsc#1262464, BZ #33998)
- CVE-2026-5450: stdio-common: Fix buffer overflow in scanf %mc (bsc#1262465, BZ #34008)
- CVE-2026-4046: Use pending character state in IBM1390, IBM1399 character sets (bsc#1261206, BZ #33980)
- Record
SUSE-SU-2026:2440-1- Updated
- 2026-11-02
OSVUSN-8611-1 No score
glibc vulnerabilities
It was discovered that the GNU C Library iconv function incorrectly handled certain IBM character sets. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-4046)
It was discovered that the GNU C Library DNS functions incorrectly handled certain DNS server responses when using gethostbyaddr or gethostbyaddr_r. An attacker in a privileged network position could possibly use this issue to cause an application to violate DNS specification or obtain incorrect hostname information. This issue only affected Ubuntu 24.04 LTS. (CVE-2026-4437, CVE-2026-4438)
It was discovered that the GNU C Library deprecated debugging functions incorrectly enforced caller-supplied buffer lengths. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-5435)
It was discovered that the GNU C Library scanf family of functions contained a heap buffer overflow when processing certain format specifiers. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-5450)
It was discovered that the GNU C Library ungetwc function incorrectly handled certain character encodings. An attacker could possibly use this issue to obtain sensitive information or cause a denial of service. (CVE-2026-5928)
It was discovered that the GNU C Library deprecated debugging functions incorrectly validated DNS response record data. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-6238)
- Record
USN-8611-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glibcAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-all-langpacksAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-benchtestsAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-commonAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-develAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-docAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-gconv-extraAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-aaAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-afAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-agrAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
glibc-langpack-akAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-amAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-anAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-anpAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-arAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-asAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-astAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-aycAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-azAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-beAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bemAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-berAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bgAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bhbAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bhoAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-biAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bnAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-boAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-brAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-brxAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bsAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-bynAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-caAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-ceAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-chrAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-ckbAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-cmnAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-crhAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-csAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-csbAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-cvAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-cyAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-daAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-deAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-doiAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-dsbAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-dvAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-dzAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-elAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-enAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-eoAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-esAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-etAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-euAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-faAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-ffAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-fiAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-filAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-foAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-frAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-furAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-fyAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-gaAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-gbmAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-gdAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-gezAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-glAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-guAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-gvAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-haAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hakAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-heAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hiAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hifAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hneAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hrAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hsbAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-htAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-huAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-hyAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-iaAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-idAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-igAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-ikAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-isAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibc-langpack-itAlmaLinux:10 From an advisory covering 3 CVEs |
before 2.39-128.el10_2.alma.1 | 2.39-128.el10_2.alma.1 |
glibcAzure Linux:3 |
through 2.38-21 | None known |
compat-libpthread-nonsharedTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibcTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-all-langpacksTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-benchtestsTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-commonTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-develTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-docTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-gconv-extraTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-headersTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-aaTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-afTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-agrTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-akTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-amTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-anTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-anpTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-arTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-asTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-astTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-aycTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-azTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-beTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bemTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-berTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bgTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bhbTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bhoTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-biTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bnTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-boTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-brTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-brxTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bsTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-bynTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-caTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-ceTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-chrTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-ckbTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-cmnTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-crhTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-csTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-csbTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-cvTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-cyTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-daTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-deTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-doiTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-dsbTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-dvTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-dzTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-elTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-enTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-eoTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-esTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-etTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-euTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-faTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-ffTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-fiTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-filTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-foTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-frTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-furTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-fyTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-gaTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-gdTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-gezTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-glTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-guTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-gvTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-haTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hakTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-heTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hiTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hifTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hneTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hrTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hsbTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-htTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-huTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-hyTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-iaTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-idTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-igTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-ikTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibc-langpack-isTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.34-61.el9_2.1.tuxcare.els4 | 2.34-61.el9_2.1.tuxcare.els4 |
glibcDebian:12 |
All versions, plus listed versions 2.36-10~02.36-92.36-9+deb12u12.36-9+deb12u102.36-9+deb12u11 Show 45 moreShow less2.36-9+deb12u122.36-9+deb12u132.36-9+deb12u142.36-9+deb12u22.36-9+deb12u32.36-9+deb12u42.36-9+deb12u52.36-9+deb12u62.36-9+deb12u72.36-9+deb12u82.36-9+deb12u92.36-9+loong642.37-12.37-102.37-112.37-122.37-132.37-142.37-152.37-15.12.37-15.1+sh42.37-15~deb13u12.37-162.37-172.37-182.37-192.37-22.37-32.37-42.37-52.37-62.37-72.37-82.37-92.38-12.38-102.38-112.38-122.38-12.12.38-132.38-142.38-15~02.38-15~12.38-22.38-3 |
None known |
glibcDebian:13 |
before 2.41-12+deb13u4, plus listed versions 2.41-122.41-12+deb13u12.41-12+deb13u22.41-12+deb13u3 |
2.41-12+deb13u4 |
glibcDebian:14 |
before 2.42-17, plus listed versions 2.41-122.41-13~hurd.02.41-13~hurd.12.42-12.42-10 Show 19 moreShow less2.42-112.42-122.42-12~hurd.12.42-132.42-142.42-14~hurd.12.42-152.42-15~hurd.12.42-162.42-22.42-32.42-42.42-52.42-62.42-72.42-82.42-8~hurd.12.42-8~hurd.22.42-9 |
2.42-17 |
glibcopenEuler:20.03-LTS-SP4 From an advisory covering 2 CVEs |
before 2.28-124.oe2003sp4 | 2.28-124.oe2003sp4 |
glibcopenEuler:22.03-LTS-SP4 From an advisory covering 2 CVEs |
before 2.34-176.oe2203sp4 | 2.34-176.oe2203sp4 |
glibcopenEuler:24.03-LTS From an advisory covering 2 CVEs |
before 2.38-105.oe2403 | 2.38-105.oe2403 |
glibcopenEuler:24.03-LTS-SP3 From an advisory covering 2 CVEs |
before 2.38-105.oe2403sp3 | 2.38-105.oe2403sp3 |
glibcopenEuler:24.03-LTS-SP1 From an advisory covering 2 CVEs |
before 2.38-105.oe2403sp1 | 2.38-105.oe2403sp1 |
glibcRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-all-langpacksRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-benchtestsRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-commonRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-develRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-docRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-gconv-extraRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-aaRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-afRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-agrRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-akRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-amRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-anRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-anpRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-arRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-asRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-astRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-aycRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-azRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-beRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bemRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-berRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bgRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bhbRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bhoRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-biRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bnRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-boRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-brRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-brxRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bsRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-bynRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-caRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-ceRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-chrRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-ckbRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-cmnRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-crhRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-csRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-csbRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-cvRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-cyRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-daRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-deRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-doiRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-dsbRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-dvRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-dzRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-elRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-enRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-eoRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-esRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-etRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-euRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-faRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-ffRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-fiRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-filRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-foRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-frRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-furRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-fyRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-gaRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-gbmRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-gdRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-gezRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-glRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-guRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-gvRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-haRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hakRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-heRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hiRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hifRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hneRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hrRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hsbRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-htRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-huRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-hyRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-iaRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-idRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-igRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-ikRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-isRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibc-langpack-itRed Hat:hummingbird:1 From an advisory covering 5 CVEs |
before 0:2.42-12.hum1 | 0:2.42-12.hum1 |
glibcRocky Linux:10 From an advisory covering 3 CVEs |
before 0:2.39-128.el10_2 | 0:2.39-128.el10_2 |
glibcRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.28-251.el8_10.40 | 0:2.28-251.el8_10.40 |
glibcRocky Linux:9 From an advisory covering 3 CVEs |
before 0:2.34-274.el9_8 | 0:2.34-274.el9_8 |
glibcRoot:Debian:11 |
before 2.31-13+deb11u14.aikido.15 | 2.31-13+deb11u14.aikido.152.31-13+deb11u14.root.io.14 |
rootio-glibcRoot:Debian:11 |
before 2.31-13+deb11u14.aikido.15 | 2.31-13+deb11u14.aikido.152.31-13+deb11u14.root.io.14 |
glibcRoot:Debian:12 |
before 2.36-9+deb12u14.root.io.18 | 2.36-9+deb12u14.root.io.182.36-9+deb12u14.root.io.192.36-9+deb12u14.aikido.202.36-9+deb12u14.aikido.212.36-9+deb12u14.aikido.222.36-9+deb12u14.aikido.232.36-9+deb12u14.aikido.24 |
rootio-glibcRoot:Debian:12 |
before 2.36-9+deb12u14.root.io.18 | 2.36-9+deb12u14.root.io.182.36-9+deb12u14.root.io.192.36-9+deb12u14.aikido.202.36-9+deb12u14.aikido.212.36-9+deb12u14.aikido.222.36-9+deb12u14.aikido.232.36-9+deb12u14.aikido.24 |
glibcSUSE:Linux Micro Extras 6.2 From an advisory covering 3 CVEs |
before 2.40-160000.5.1 | 2.40-160000.5.1 |
glibcSUSE:Linux Enterprise Micro 5.3 From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Micro 5.4 From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Micro 5.5 From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 3 CVEs |
before 2.31-150300.101.1 | 2.31-150300.101.1 |
glibcSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 3 CVEs |
before 2.22-114.46.1 | 2.22-114.46.1 |
glibcSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 3 CVEs |
before 2.22-114.46.1 | 2.22-114.46.1 |
eglibcUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.17-93ubuntu42.18-0ubuntu12.18-0ubuntu22.18-0ubuntu42.18-0ubuntu5 Show 24 moreShow less2.18-0ubuntu62.18-0ubuntu72.19-0ubuntu22.19-0ubuntu32.19-0ubuntu42.19-0ubuntu52.19-0ubuntu62.19-0ubuntu6.12.19-0ubuntu6.32.19-0ubuntu6.42.19-0ubuntu6.52.19-0ubuntu6.62.19-0ubuntu6.72.19-0ubuntu6.82.19-0ubuntu6.92.19-0ubuntu6.102.19-0ubuntu6.112.19-0ubuntu6.132.19-0ubuntu6.142.19-0ubuntu6.152.19-0ubuntu6.15+esm12.19-0ubuntu6.15+esm22.19-0ubuntu6.15+esm32.19-0ubuntu6.15+esm4 |
None known |
glibcUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.21-0ubuntu42.21-0ubuntu52.21-0ubuntu62.23-0ubuntu12.23-0ubuntu2 Show 18 moreShow less2.23-0ubuntu32.23-0ubuntu42.23-0ubuntu52.23-0ubuntu62.23-0ubuntu72.23-0ubuntu92.23-0ubuntu102.23-0ubuntu112.23-0ubuntu11.22.23-0ubuntu11.32.23-0ubuntu11.3+esm12.23-0ubuntu11.3+esm22.23-0ubuntu11.3+esm32.23-0ubuntu11.3+esm52.23-0ubuntu11.3+esm62.23-0ubuntu11.3+esm72.23-0ubuntu11.3+esm82.23-0ubuntu11.3+esm9 |
None known |
glibcUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.26-0ubuntu22.26-0ubuntu2.12.27-0ubuntu22.27-0ubuntu32.27-3ubuntu1 Show 11 moreShow less2.27-3ubuntu1.22.27-3ubuntu1.32.27-3ubuntu1.42.27-3ubuntu1.52.27-3ubuntu1.62.27-3ubuntu1.6+esm12.27-3ubuntu1.6+esm22.27-3ubuntu1.6+esm32.27-3ubuntu1.6+esm42.27-3ubuntu1.6+esm52.27-3ubuntu1.6+esm6 |
None known |
glibcUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.30-0ubuntu22.30-0ubuntu32.31-0ubuntu52.31-0ubuntu62.31-0ubuntu7 Show 13 moreShow less2.31-0ubuntu92.31-0ubuntu9.12.31-0ubuntu9.22.31-0ubuntu9.32.31-0ubuntu9.72.31-0ubuntu9.92.31-0ubuntu9.122.31-0ubuntu9.142.31-0ubuntu9.152.31-0ubuntu9.162.31-0ubuntu9.172.31-0ubuntu9.182.31-0ubuntu9.18+esm1 |
None known |
glibcUbuntu:22.04:LTS |
before 2.35-0ubuntu3.14, plus listed versions 2.34-0ubuntu32.35-0ubuntu12.35-0ubuntu32.35-0ubuntu3.12.35-0ubuntu3.3 Show 10 moreShow less2.35-0ubuntu3.42.35-0ubuntu3.52.35-0ubuntu3.62.35-0ubuntu3.72.35-0ubuntu3.82.35-0ubuntu3.92.35-0ubuntu3.102.35-0ubuntu3.112.35-0ubuntu3.122.35-0ubuntu3.13 |
2.35-0ubuntu3.14 |
glibcUbuntu:24.04:LTS |
before 2.39-0ubuntu8.8, plus listed versions 2.38-1ubuntu62.38-3ubuntu12.39-0ubuntu12.39-0ubuntu22.39-0ubuntu6 Show 8 moreShow less2.39-0ubuntu82.39-0ubuntu8.12.39-0ubuntu8.22.39-0ubuntu8.32.39-0ubuntu8.42.39-0ubuntu8.52.39-0ubuntu8.62.39-0ubuntu8.7 |
2.39-0ubuntu8.8 |
glibcUbuntu:25.10 |
All versions, plus listed versions 2.41-6ubuntu12.41-6ubuntu22.41-9ubuntu12.42-0ubuntu12.42-0ubuntu32.42-0ubuntu3.1 |
None known |
glibcUbuntu:26.04:LTS |
before 2.43-2ubuntu2.3, plus listed versions 2.42-0ubuntu32.42-2ubuntu12.42-2ubuntu22.42-2ubuntu42.42-2ubuntu52.43-2ubuntu12.43-2ubuntu2 |
2.43-2ubuntu2.3 |
glibcUbuntu:22.04:LTS From an advisory covering 7 CVEs |
before 2.35-0ubuntu3.14, plus listed versions 2.34-0ubuntu32.35-0ubuntu12.35-0ubuntu32.35-0ubuntu3.12.35-0ubuntu3.3 Show 10 moreShow less2.35-0ubuntu3.42.35-0ubuntu3.52.35-0ubuntu3.62.35-0ubuntu3.72.35-0ubuntu3.82.35-0ubuntu3.92.35-0ubuntu3.102.35-0ubuntu3.112.35-0ubuntu3.122.35-0ubuntu3.13 |
2.35-0ubuntu3.14 |
glibcUbuntu:24.04:LTS From an advisory covering 7 CVEs |
before 2.39-0ubuntu8.8, plus listed versions 2.38-1ubuntu62.38-3ubuntu12.39-0ubuntu12.39-0ubuntu22.39-0ubuntu6 Show 8 moreShow less2.39-0ubuntu82.39-0ubuntu8.12.39-0ubuntu8.22.39-0ubuntu8.32.39-0ubuntu8.42.39-0ubuntu8.52.39-0ubuntu8.62.39-0ubuntu8.7 |
2.39-0ubuntu8.8 |
glibcUbuntu:26.04:LTS From an advisory covering 7 CVEs |
before 2.43-2ubuntu2.3, plus listed versions 2.42-0ubuntu32.42-2ubuntu12.42-2ubuntu22.42-2ubuntu42.42-2ubuntu52.43-2ubuntu12.43-2ubuntu2 |
2.43-2ubuntu2.3 |
glibcopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 2.43-3.1 | 2.43-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, facts | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-5928 is a high vulnerability (CVSS 7.5) in Gnu Glibc, published April 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in glibc 2.41-12+deb13u4.
References
sourceware.org/bugzilla/show_bug.cgi?id=33998
cert-portal.siemens.com/productcert/html/ssa-082556.html
nvd.nist.gov/vuln/detail/CVE-2026-5928
github.com/advisories/GHSA-829p-mc9m-7xhr
access.redhat.com/errata/RHSA-2026:42694
Show 75 moreShow less
bugzilla.redhat.com/2459854
errata.almalinux.org/10/ALSA-2026-42694.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1780995582.html
security-tracker.debian.org/tracker/CVE-2026-5928
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2409
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12740.json
cve.org/CVERecord?id=CVE-2026-4046
packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra
inbox.sourceware.org/libc-announce/[email protected]/T
errata.rockylinux.org/RLSA-2026:42694
suse.com/support/update/announcement/2026/suse-su-202621682-1
bugzilla.suse.com/1261206
ubuntu.com/security/CVE-2026-5928
Left out here: 1,402 package rows and 84 versions. The JSON record has them. Also not on the record: 159 package claims. ID and package lookups still check them.