UbuntuUpdates.org

Package "glibc"

Name: glibc

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • GNU C Library: sources
  • GNU C Library: Development tools
  • GNU C Library: Name Service Cache Daemon
Latest version: 2.44-1ubuntu2.1
Release: stonking (26.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "glibc" in Stonking

Repository Area Version
base universe 2.44-1ubuntu2
base main 2.44-1ubuntu2
security main 2.44-1ubuntu2.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.44-1ubuntu2.1 2026-11-12 20:08:07 UTC

glibc (2.44-1ubuntu2.1) stonking-security; urgency=medium

  * SECURITY UPDATE: arbitrary gettext load location via LANGUAGE var
    - debian/patches/CVE-2026-84243.patch: intl: Restrict path traversal when
      using LANGUAGE env var in intl/Makefile, intl/dcigettext.c,
      intl/tst-gettext-path-traversal.c.
    - CVE-2026-84243
  * Fix s390x QEMU user-mode emulation issue (LP: #2170563)
    - debian/patches/s390x-alignment.patch: set max-page-size on s390x in
      resolv/Makefile.

 -- Marc Deslauriers Thu, 05 Nov 2026 12:18:26 -0500
2170563 qemu-user: s390x libresolv.so loading fails on 64 KiB-page ppc64el hosts when a mapping fragment overlaps a file-backed page beyond EOF
CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are


About   -   Send Feedback to @ubuntu_updates