{"id":"CVE-2016-10228","aliases":["ALSA-2021:1585","BELL-CVE-2016-10228","DEBIAN-CVE-2016-10228","DLA-3152-1","EUVD-2016-1413","GHSA-g93f-3wq3-pq68","MGASA-2021-0289","RHSA-2021:1585","RLSA-2021:1585","SUSE-SU-2021:2480-1","SUSE-SU-2021:3830-1","SUSE-SU-2022:2886-1","UBUNTU-CVE-2016-10228","USN-5310-1","USN-5768-1","openSUSE-SU-2021:1560-1","openSUSE-SU-2024:10792-1"],"status":"published","title":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with...","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04112,"percentile":0.90845,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2017-03-02T00:00:00Z","modified":"2026-10-29T11:00:29Z","fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.31-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.31-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.31-3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"glibc","fixed_in":["2.29-23.mga7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"glibc","fixed_in":["2.26-13.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"glibc","fixed_in":["2.26-13.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"glibc","fixed_in":["2.26-13.62.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glibc","fixed_in":["2.23-0ubuntu11.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"glibc","fixed_in":["2.27-3ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"glibc","fixed_in":["2.31-0ubuntu9.7"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"glibc","fixed_in":["2.26-lp152.26.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"glibc-testsuite-src","fixed_in":["2.26-lp152.26.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"glibc-benchtests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glibc-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nss_hesiod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-3"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-10+deb10u2"}]}],"versions":["2.28-10","2.28-10+deb10u1"],"bundled":14},{"source":"osv","ecosystem":"Mageia:7","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29-23.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"compat-libpthread-nonshared","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-aa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-af","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-agr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-am","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-an","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-anp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-as","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ayc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-az","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-be","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ber","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bhb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bho","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-br","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-brx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-bs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-byn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-chr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-cmn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-crh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-cs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-csb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-cv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-cy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-da","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-de","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-doi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-dsb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-dv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-dz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-eo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-es","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-et","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-eu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-fy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-gez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-gl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-gu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-gv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-he","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hne","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hsb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ht","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-hy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-id","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ik","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-is","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-it","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-iu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ja","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-kab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-kk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-kl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-km","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-kn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-kok","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ku","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-kw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ky","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-li","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lij","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ln","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-lzh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mfe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mhr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-miq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mjw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-mt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-my","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ne","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nhn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-niu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-nso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-oc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-om","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-or","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-os","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-pap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-pl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-pt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-quz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-raj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ru","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-rw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-se","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-shn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-shs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-si","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-so","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-st","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-sw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-szl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tcy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-te","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-th","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-the","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-to","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-tt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-uk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-unm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-uz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-ve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-vi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-wa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-wae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-wal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-wo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-xh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-yi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-yo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glibc-langpack-yue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glibc-benchtests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glibc-nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nss_hesiod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28-151.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-114.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-114.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-114.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-126.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-126.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"eglibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.17-93ubuntu4","2.18-0ubuntu1","2.18-0ubuntu2","2.18-0ubuntu4","2.18-0ubuntu5","2.18-0ubuntu6","2.18-0ubuntu7","2.19-0ubuntu2","2.19-0ubuntu3","2.19-0ubuntu4","2.19-0ubuntu5","2.19-0ubuntu6","2.19-0ubuntu6.1","2.19-0ubuntu6.3","2.19-0ubuntu6.4","2.19-0ubuntu6.5","2.19-0ubuntu6.6","2.19-0ubuntu6.7","2.19-0ubuntu6.8","2.19-0ubuntu6.9","2.19-0ubuntu6.10","2.19-0ubuntu6.11","2.19-0ubuntu6.13","2.19-0ubuntu6.14","2.19-0ubuntu6.15","2.19-0ubuntu6.15+esm1","2.19-0ubuntu6.15+esm2","2.19-0ubuntu6.15+esm3","2.19-0ubuntu6.15+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.3+esm3"}]}],"versions":["2.21-0ubuntu4","2.21-0ubuntu5","2.21-0ubuntu6","2.23-0ubuntu1","2.23-0ubuntu2","2.23-0ubuntu3","2.23-0ubuntu4","2.23-0ubuntu5","2.23-0ubuntu6","2.23-0ubuntu7","2.23-0ubuntu9","2.23-0ubuntu10","2.23-0ubuntu11","2.23-0ubuntu11.2","2.23-0ubuntu11.3","2.23-0ubuntu11.3+esm1","2.23-0ubuntu11.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3ubuntu1.5"}]}],"versions":["2.26-0ubuntu2","2.26-0ubuntu2.1","2.27-0ubuntu2","2.27-0ubuntu3","2.27-3ubuntu1","2.27-3ubuntu1.2","2.27-3ubuntu1.3","2.27-3ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-0ubuntu9.7"}]}],"versions":["2.30-0ubuntu2","2.30-0ubuntu3","2.31-0ubuntu5","2.31-0ubuntu6","2.31-0ubuntu7","2.31-0ubuntu9","2.31-0ubuntu9.1","2.31-0ubuntu9.2","2.31-0ubuntu9.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3ubuntu1.5"}]}],"versions":["2.26-0ubuntu2","2.26-0ubuntu2.1","2.27-0ubuntu2","2.27-0ubuntu3","2.27-3ubuntu1","2.27-3ubuntu1.2","2.27-3ubuntu1.3","2.27-3ubuntu1.4"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-0ubuntu9.7"}]}],"versions":["2.30-0ubuntu2","2.30-0ubuntu3","2.31-0ubuntu5","2.31-0ubuntu6","2.31-0ubuntu7","2.31-0ubuntu9","2.31-0ubuntu9.1","2.31-0ubuntu9.2","2.31-0ubuntu9.3"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.3+esm3"}]}],"versions":["2.21-0ubuntu4","2.21-0ubuntu5","2.21-0ubuntu6","2.23-0ubuntu1","2.23-0ubuntu2","2.23-0ubuntu3","2.23-0ubuntu4","2.23-0ubuntu5","2.23-0ubuntu6","2.23-0ubuntu7","2.23-0ubuntu9","2.23-0ubuntu10","2.23-0ubuntu11","2.23-0ubuntu11.2","2.23-0ubuntu11.3","2.23-0ubuntu11.3+esm1","2.23-0ubuntu11.3+esm2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-lp152.26.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"glibc-testsuite-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-lp152.26.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-1.2"}]}],"bundled":34}],"affected_more":8,"products":[{"vendor":"gnu","product":"glibc"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"http://www.securityfocus.com/bid/96525","tags":["vdb-entry","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202101-20","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","web"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=19519","tags":["x_transferred","Issue Tracking","report"]},{"url":"http://openwall.com/lists/oss-security/2017/03/01/10","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=19519#c21","tags":["x_transferred","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=26224","tags":["x_transferred","report","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10228","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-g93f-3wq3-pq68"},{"url":"https://vulners.com/cve/CVE-2016-10228","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-25013","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9169","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27618","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3326","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-10228","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10228","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28942","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1585","tags":["web","advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931305","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1585.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10228","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-25013","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-25013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25013","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27618","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3326","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1585","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212480-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027496","tags":["report"]},{"url":"https://bugzilla.suse.com/1131330","tags":["report"]},{"url":"https://bugzilla.suse.com/1187911","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35942","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213830-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183085","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222886-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178386","tags":["report"]},{"url":"https://bugzilla.suse.com/1179694","tags":["report"]},{"url":"https://bugzilla.suse.com/1179721","tags":["report"]},{"url":"https://bugzilla.suse.com/1181505","tags":["report"]},{"url":"https://bugzilla.suse.com/1182117","tags":["report"]},{"url":"https://bugzilla.suse.com/941234","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3326","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-10228","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5310-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5768-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-25013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-29562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-27645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-35942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12132","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4LDTHO3OJZ2XD7I3ONIRIUSKEMP42OY2/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33574","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-10228","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2017-03-02T00:00:00Z","modified":"2026-10-14T06:30:10.279Z","updated_at":"2026-11-02T14:33:31.450804Z"}],"euvd":[{"id":"EUVD-2016-1413","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2017-03-02T00:00:00Z","modified":"2026-10-14T06:30:10Z","updated_at":"2026-11-02T17:27:17.902641Z"}],"ghsa":[{"id":"GHSA-g93f-3wq3-pq68","title":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with...","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2022-05-13T01:01:03Z","modified":"2026-10-14T09:31:16Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:13:22.867821Z"}],"nvd":[{"id":"CVE-2016-10228","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2017-03-02T01:59:00.143Z","modified":"2026-10-14T07:16:37.02Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:37.238712Z"}],"osv":[{"id":"BELL-CVE-2016-10228","title":"CVE-2016-10228 does not affect BellSoft software","status":"withdrawn","published":"2017-03-02T01:59:00Z","modified":"2026-01-26T09:45:39.252601Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-10228","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2017-03-02T01:59:00.143Z","modified":"2026-10-24T10:30:28.299065964Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-10228","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2017-03-02T01:59:00.143Z","modified":"2026-10-14T11:47:26.163127658Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"RHSA-2021:1585","title":"Red Hat Security Advisory: glibc security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:52:57Z","modified":"2026-10-14T10:01:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1585","title":"Moderate: glibc security, bug fix, and enhancement update","description":"The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.\n\nSecurity Fix(es):\n\n* glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding (CVE-2019-25013)\n\n* glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read (CVE-2019-9169)\n\n* glibc: assertion failure in ISO-2022-JP-3 gconv module related to combining characters (CVE-2021-3326)\n\n* glibc: iconv program can hang when invoked with the -c option (CVE-2016-10228)\n\n* glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop (CVE-2020-27618)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:35:07Z","modified":"2026-02-04T17:15:12.483212Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2016-10228","description":"The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.","status":"published","published":"2017-03-02T01:59:00Z","modified":"2026-04-22T10:29:41.056085Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"ALSA-2021:1585","title":"Moderate: glibc security, bug fix, and enhancement update","description":"The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.\n\nSecurity Fix(es):\n\n* glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding (CVE-2019-25013)\n\n* glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read (CVE-2019-9169)\n\n* glibc: assertion failure in ISO-2022-JP-3 gconv module related to combining characters (CVE-2021-3326)\n\n* glibc: iconv program can hang when invoked with the -c option (CVE-2016-10228)\n\n* glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop (CVE-2020-27618)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:35:07Z","modified":"2026-10-29T11:00:29.822369124Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-3152-1","title":"glibc - security update","status":"published","published":"2022-10-17T00:00:00Z","modified":"2026-03-09T01:21:26.95838Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2021-0289","title":"Updated glibc packages fix a security vulnerability","description":"A vulnerability was found in the iconv program provided by glibc when it's\ninvoked with the -c option. It can enter an infinite loop while parsing an\ninvalid multi-byte sequence (CVE-2016-10228).\n","status":"published","published":"2021-06-28T21:16:35Z","modified":"2026-04-16T04:43:40.345091246Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:1560-1","title":"Security update for glibc","description":"\nThis update for glibc fixes the following issues:\n\n\n- libio: do not attempt to free wide buffers of legacy streams (bsc#1183085) \n- CVE-2016-10228: Rewrite iconv option parsing to fix security issue (bsc#1027496)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-12-10T11:06:35Z","modified":"2026-02-04T03:30:28.629881Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10792-1","title":"glibc-2.34-1.2 on GA media","description":"These are all security issues fixed in the glibc-2.34-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:52:58.912445Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:2480-1","title":"Security update for glibc","description":"This update for glibc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-35942: wordexp: Fixed handle overflow in positional parameter number (bsc#1187911)\n- CVE-2016-10228: Rewrite iconv option parsing (bsc#1027496)\n\nOther fixes:\n\n- Fixed race in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)\n","status":"published","published":"2021-07-27T11:47:31Z","modified":"2025-05-02T04:29:40.257007Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3830-1","title":"Security update for glibc","description":"\nThis update for glibc fixes the following issues:\n\n\n- libio: do not attempt to free wide buffers of legacy streams (bsc#1183085) \n- CVE-2016-10228: Rewrite iconv option parsing to fix security issue (bsc#1027496)\n","status":"published","published":"2021-12-01T12:46:04Z","modified":"2026-02-04T02:39:33.343219Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:2886-1","title":"Security update for glibc","description":"This update for glibc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-5180: Fix crash with internal QTYPE in resolv (bsc#941234, BZ #18784)\n- CVE-2016-10228: Rewrite iconv option parsing (bsc#1027496, BZ #19519)\n- CVE-2019-25013: Fix buffer overrun in EUC-KR conversion module (bsc#1182117, BZ #24973)\n- CVE-2020-27618: Accept redundant shift sequences in IBM1364 iconv module (bsc#1178386, BZ #26224)\n- CVE-2020-29562: Fix incorrect UCS4 inner loop bounds in iconv (bsc#1179694, BZ #26923)\n- CVE-2020-29573: Hardened printf against non-normal long double values (bsc#1179721, BZ #26649)\n- CVE-2021-3326: Fix assertion failure in ISO-2022-JP-3 gconv module (bsc#1181505, BZ #27256)\n\n- Recognize ppc64p7 arch to build for power7\n","status":"published","published":"2022-08-24T13:04:08Z","modified":"2026-02-04T02:33:17.772119Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5310-1","title":"glibc vulnerabilities","description":"Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library\niconv feature incorrectly handled certain input sequences. An attacker\ncould possibly use this issue to cause the GNU C Library to hang or crash,\nresulting in a denial of service. This issue only affected Ubuntu 18.04 LTS\nand Ubuntu 20.04 LTS. (CVE-2016-10228, CVE-2019-25013, CVE-2020-27618,\nCVE-2020-29562, CVE-2021-3326)\n\nJason Royes and Samuel Dytrych discovered that the GNU C Library\nincorrectly handled signed comparisons on ARMv7 targets. A remote attacker\ncould use this issue to cause the GNU C Library to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-6096)\n\nIt was discovered that the GNU C Library nscd daemon incorrectly handled\ncertain netgroup lookups. An attacker could possibly use this issue to\ncause the GNU C Library to crash, resulting in a denial of service. This\nissue only affected Ubuntu 20.04 LTS. (CVE-2021-27645)\n\nIt was discovered that the GNU C Library wordexp function incorrectly\nhandled certain patterns. An attacker could use this issue to cause the\nGNU C Library to crash, resulting in a denial of service, or possibly\nobtain sensitive information. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2021-35942)\n\nIt was discovered that the GNU C Library realpath function incorrectly\nhandled return values. An attacker could possibly use this issue to obtain\nsensitive information. This issue only affected Ubuntu 21.10.\n(CVE-2021-3998)\n\nIt was discovered that the GNU C library getcwd function incorrectly\nhandled buffers. An attacker could use this issue to cause the GNU C\nLibrary to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2021-3999)\n\nIt was discovered that the GNU C Library sunrpc module incorrectly handled\nbuffer lengths. An attacker could possibly use this issue to cause the GNU\nC Library to crash, resulting in a denial of service. (CVE-2022-23218,\nCVE-2022-23219)\n","status":"published","published":"2022-03-01T15:09:40Z","modified":"2026-04-27T19:17:38.57642754Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5768-1","title":"glibc vulnerabilities","description":"Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library\niconv feature incorrectly handled certain input sequences. An attacker\ncould possibly use this issue to cause the GNU C Library to hang or crash,\nresulting in a denial of service.  (CVE-2016-10228, CVE-2019-25013,\nCVE-2020-27618)\n\nIt was discovered that the GNU C Library did not properly handled DNS\nresponses when ENDS0 is enabled. An attacker could possibly use this issue\nto cause fragmentation-based attacks. (CVE-2017-12132)\n","status":"published","published":"2022-12-08T13:17:39Z","modified":"2026-06-25T13:31:38.165424526Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}