Bugs fixes in "glibc"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-84243 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are | 2026-11-12 |
| CVE | CVE-2026-97399 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, whi | 2026-11-12 |
| CVE | CVE-2026-89092 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for | 2026-11-12 |
| CVE | CVE-2026-95818 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash | 2026-11-12 |
| CVE | CVE-2026-86805 | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a | 2026-11-12 |
| CVE | CVE-2026-8674 | Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of rough | 2026-11-12 |
| CVE | CVE-2026-18374 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or | 2026-11-12 |
| Launchpad | 2170563 | qemu-user: s390x libresolv.so loading fails on 64 KiB-page ppc64el hosts when a mapping fragment overlaps a file-backed page beyond EOF | 2026-11-12 |
| CVE | CVE-2026-84243 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are | 2026-11-12 |
| CVE | CVE-2026-97399 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, whi | 2026-11-12 |
| CVE | CVE-2026-89092 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for | 2026-11-12 |
| CVE | CVE-2026-95818 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash | 2026-11-12 |
| CVE | CVE-2026-86805 | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a | 2026-11-12 |
| CVE | CVE-2026-8674 | Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of rough | 2026-11-12 |
| CVE | CVE-2026-18374 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or | 2026-11-12 |
| Launchpad | 2170563 | qemu-user: s390x libresolv.so loading fails on 64 KiB-page ppc64el hosts when a mapping fragment overlaps a file-backed page beyond EOF | 2026-11-12 |
| CVE | CVE-2026-84243 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are | 2026-11-12 |
| CVE | CVE-2026-97399 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, whi | 2026-11-12 |
| CVE | CVE-2026-89092 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for | 2026-11-12 |
| CVE | CVE-2026-95818 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash | 2026-11-12 |
About
-
Send Feedback to @ubuntu_updates
