UbuntuUpdates.org

Package "nscd"

Name: nscd

Description:

GNU C Library: Name Service Cache Daemon
Latest version: 2.44-1ubuntu2.1
Release: stonking (26.10)
Level: security
Repository: universe
Head package: glibc
Homepage: https://www.gnu.org/software/libc/libc.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "nscd"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "nscd" in Stonking

Repository Area Version
base universe 2.44-1ubuntu2

Changelog

Version: 2.44-1ubuntu2.1 2026-11-12 20:08:07 UTC

glibc (2.44-1ubuntu2.1) stonking-security; urgency=medium

  * SECURITY UPDATE: arbitrary gettext load location via LANGUAGE var
    - debian/patches/CVE-2026-84243.patch: intl: Restrict path traversal when
      using LANGUAGE env var in intl/Makefile, intl/dcigettext.c,
      intl/tst-gettext-path-traversal.c.
    - CVE-2026-84243
  * Fix s390x QEMU user-mode emulation issue (LP: #2170563)
    - debian/patches/s390x-alignment.patch: set max-page-size on s390x in
      resolv/Makefile.

 -- Marc Deslauriers Thu, 05 Nov 2026 12:18:26 -0500
2170563 qemu-user: s390x libresolv.so loading fails on 64 KiB-page ppc64el hosts when a mapping fragment overlaps a file-backed page beyond EOF
CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are


About   -   Send Feedback to @ubuntu_updates