OESA-2026-3616

Dashboard / Vulnerabilities / OESA-2026-3616

OESA-2026-3616

Summary: glibc security update

Details: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es): CVE-2026-19542 is a vulnerability in the GNU C Library (glibc). Currently, no detailed description is available.(CVE-2026-19542) A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text.(CVE-2026-77117) A flaw was found in glibc. This vulnerability allows a remote attacker to cause a denial of service (DoS) by providing specially crafted text to an application that converts text from SHIFT_JISX0213 to UCS-4. The crafted input can lead to a continuous loop of processing, preventing the application from making progress and consuming resources. Exploitation requires specific conditions, including the application retrying conversion after an error with limited output space.(CVE-2026-80489)

References: https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3616, https://nvd.nist.gov/vuln/detail/CVE-2026-19542, https://nvd.nist.gov/vuln/detail/CVE-2026-77117, https://nvd.nist.gov/vuln/detail/CVE-2026-80489