SUSE-SU-2026:4204-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20264204-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4204-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:4204-1
- Upstream
CVE (6)
- Related
- Published
- 2026-09-16T08:20:06Z
- Modified
- 2026-09-16T21:45:03Z
- Summary
- Security update for glibc
- Details
-
This update for glibc fixes the following issues:
- CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726).
- CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723).
- CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262).
- CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946).
- CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921).
- CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20264204-1/
- https://bugzilla.suse.com/1274723
- https://bugzilla.suse.com/1274726
- https://bugzilla.suse.com/1276946
- https://bugzilla.suse.com/1277262
- https://bugzilla.suse.com/1277921
- https://bugzilla.suse.com/1277922
- https://www.suse.com/security/cve/CVE-2026-18374
- https://www.suse.com/security/cve/CVE-2026-19542
- https://www.suse.com/security/cve/CVE-2026-6368
- https://www.suse.com/security/cve/CVE-2026-6791
- https://www.suse.com/security/cve/CVE-2026-77117
- https://www.suse.com/security/cve/CVE-2026-80489
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / glibc
Package
- Name
- glibc
- Purl
- pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.22-114.52.2
Ecosystem specific
{
"binaries": [
{
"glibc": "2.22-114.52.2",
"glibc-32bit": "2.22-114.52.2",
"glibc-devel": "2.22-114.52.2",
"glibc-devel-32bit": "2.22-114.52.2",
"glibc-devel-static": "2.22-114.52.2",
"glibc-html": "2.22-114.52.2",
"glibc-i18ndata": "2.22-114.52.2",
"glibc-info": "2.22-114.52.2",
"glibc-locale": "2.22-114.52.2",
"glibc-locale-32bit": "2.22-114.52.2",
"glibc-profile": "2.22-114.52.2",
"glibc-profile-32bit": "2.22-114.52.2",
"nscd": "2.22-114.52.2"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / glibc
Package
- Name
- glibc
- Purl
- pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.22-114.52.2
Ecosystem specific
{
"binaries": [
{
"glibc": "2.22-114.52.2",
"glibc-32bit": "2.22-114.52.2",
"glibc-devel": "2.22-114.52.2",
"glibc-devel-32bit": "2.22-114.52.2",
"glibc-devel-static": "2.22-114.52.2",
"glibc-html": "2.22-114.52.2",
"glibc-i18ndata": "2.22-114.52.2",
"glibc-info": "2.22-114.52.2",
"glibc-locale": "2.22-114.52.2",
"glibc-locale-32bit": "2.22-114.52.2",
"glibc-profile": "2.22-114.52.2",
"glibc-profile-32bit": "2.22-114.52.2",
"nscd": "2.22-114.52.2"
}
]
}