Most recent entries from all

ALSA-2026:33092 — Moderate: glibc security, bug fix, and enhancement update

Affected: AlmaLinux:10: glibc, AlmaLinux:10: glibc-all-langpacks, AlmaLinux:10: glibc-benchtests, AlmaLinux:10: glibc-common, AlmaLinux:10: glibc-devel, AlmaLinux:10: glibc-doc, AlmaLinux:10: glibc-gconv-extra, AlmaLinux:10: glibc-langpack-aa, AlmaLinux:10: glibc-langpack-af, AlmaLinux:10: glibc-langpack-agr and 211 more

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450)

Bug Fix(es) and Enhancement(s):

* Backport Zen5 IFUNC changes to prefer AVX512/EVEX?512 string implementations on AlmaLinux 10 [almalinux-10] (JIRA:AlmaLinux-174869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BREW-glibc-CVE-2026-5450 — scanf %mc off-by-one heap buffer overflow

Affected: Homebrew: glibc

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-1094

ESBA-2026:0178 — Moderate: glibc security update

Moderate: glibc security update

EUVD-2026-336370

fkie_cve-2026-5450

GHSA-v898-xg3c-w4rj

msrc_CVE-2026-5450 — scanf %mc off-by-one heap buffer overflow

msrc_CVE-2026-5450

OESA-2026-2409 — glibc security update

Affected: openEuler:20.03-LTS-SP4: glibc

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es):

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.

A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a speci…

RHSA-2026:12740 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

glibc: glibc: Denial of Service via iconv() function with specific character sets glibc: glibc: Out-of-bounds write via TSIG record processing glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

RLSA-2026:33092 — Moderate: glibc security, bug fix, and enhancement update

Affected: Rocky Linux:10: glibc

Security Fix(es):

* glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450)

Bug Fix(es) and Enhancement(s):

* Backport Zen5 IFUNC changes to prefer AVX512/EVEX?512 string implementations on Rocky Linux 10 [rhel-10] (JIRA:Rocky Linux-174869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SSA-082556 — SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

SUSE-SU-2026:21682-1 — Security update for glibc

Security update for glibc

UBUNTU-CVE-2026-5450

Affected: Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:25.10: glibc, Ubuntu:26.04:LTS: glibc

WID-SEC-W-2026-1190 — GNU libc: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.