Описание
Security update for glibc
This update for glibc fixes the following issues
- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
Список пакетов
Container bci/bci-base-fips:latest
Container bci/bci-busybox:latest
Container bci/bci-init:latest
Container bci/bci-micro-fips:latest
Container bci/bci-micro:latest
Container bci/bci-minimal:latest
Container bci/bci-sle15-kernel-module-devel:latest
Container bci/dotnet-aspnet:8.0
Container bci/dotnet-aspnet:9.0
Container bci/dotnet-aspnet:latest
Container bci/dotnet-runtime:8.0
Container bci/dotnet-runtime:9.0
Container bci/dotnet-runtime:latest
Container bci/dotnet-sdk:8.0
Container bci/dotnet-sdk:9.0
Container bci/dotnet-sdk:latest
Container bci/gcc:latest
Container bci/golang:1.25
Container bci/golang:1.25-openssl
Container bci/golang:latest
Container bci/node:22
Container bci/openjdk-devel:17
Container bci/openjdk-devel:21
Container bci/openjdk-devel:latest
Container bci/openjdk:17
Container bci/openjdk:21
Container bci/openjdk:latest
Container bci/php-apache:latest
Container bci/php-fpm:latest
Container bci/php:latest
Container bci/python:3
Container bci/python:latest
Container bci/ruby:2
Container bci/ruby:latest
Container bci/rust:1.95
Container bci/rust:latest
Container bci/spack:latest
Container private-registry/1.2/harbor-core:latest
Container private-registry/1.2/harbor-exporter:latest
Container private-registry/1.2/harbor-jobservice:latest
Container private-registry/1.2/harbor-portal:latest
Container private-registry/1.2/harbor-registry:latest
Container private-registry/1.2/harbor-registryctl:latest
Container private-registry/1.2/harbor-trivy-adapter:latest
Container private-registry/harbor-core:latest
Container private-registry/harbor-exporter:latest
Container private-registry/harbor-jobservice:latest
Container private-registry/harbor-portal:latest
Container private-registry/harbor-registry:latest
Container private-registry/harbor-registryctl:latest
Container private-registry/harbor-trivy-adapter:latest
Container suse/kea:2.6
Container suse/kiosk/firefox-esr:latest
Container suse/kiosk/pulseaudio:latest
Container suse/kiosk/xorg-client:latest
Container suse/kiosk/xorg:latest
Container suse/kubectl:1.33
Container suse/kubectl:latest
Container suse/ltss/sle15.6/bci-base-fips:latest
Container suse/ltss/sle15.6/sle15:latest
Container suse/manager/5.0/x86_64/server-attestation:latest
Container suse/manager/5.0/x86_64/server-migration-14-16:latest
Container suse/manager/5.0/x86_64/server:latest
Container suse/mariadb-client:latest
Container suse/mariadb:latest
Container suse/postgres:16
Container suse/postgres:16.14
Container suse/postgres:17
Container suse/postgres:17.10
Container suse/postgres:latest
Container suse/rmt-server:latest
Container suse/samba-client:latest
Container suse/samba-server:latest
Container suse/samba-toolbox:latest
Container suse/sle15:latest
Container third-party/amd/amdgpu-driver:sles-15.7-30.20.1
Container third-party/amd/amdgpu-driver:sles-15.7-30.30.3
Container third-party/amd/amdgpu-driver:sles-15.7-31.10
Container third-party/amd/amdgpu-driver:sles-15.7-31.20
Container third-party/amd/amdgpu-driver:sles-15.7-31.30
Container third-party/nvidia/driver:550-sles15.7
Container third-party/nvidia/driver:570-sles15.7
Container third-party/nvidia/driver:575-sles15.7
Container third-party/nvidia/driver:580-sles15.7
Container third-party/nvidia/driver:590-sles15.7
Container third-party/nvidia/driver:595-sles15.7
Image SLES15-SP6
Image SLES15-SP6-Azure-3P
Image SLES15-SP6-Azure-Basic
Image SLES15-SP6-Azure-Standard
Image SLES15-SP6-BYOS
Image SLES15-SP6-BYOS-Azure
Image SLES15-SP6-BYOS-EC2
Image SLES15-SP6-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS
Image SLES15-SP6-CHOST-BYOS-Aliyun
Image SLES15-SP6-CHOST-BYOS-Azure
Image SLES15-SP6-CHOST-BYOS-EC2
Image SLES15-SP6-CHOST-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS-GDC
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
Image SLES15-SP6-EC2
Image SLES15-SP6-EC2-ECS-HVM
Image SLES15-SP6-GCE
Image SLES15-SP6-HPC
Image SLES15-SP6-HPC-Azure
Image SLES15-SP6-HPC-BYOS
Image SLES15-SP6-HPC-BYOS-Azure
Image SLES15-SP6-HPC-BYOS-EC2
Image SLES15-SP6-HPC-BYOS-GCE
Image SLES15-SP6-HPC-EC2
Image SLES15-SP6-HPC-GCE
Image SLES15-SP6-Hardened-BYOS
Image SLES15-SP6-Hardened-BYOS-Azure
Image SLES15-SP6-Hardened-BYOS-EC2
Image SLES15-SP6-Hardened-BYOS-GCE
Image SLES15-SP6-SAP
Image SLES15-SP6-SAP-Azure
Image SLES15-SP6-SAP-Azure-3P
Image SLES15-SP6-SAP-BYOS
Image SLES15-SP6-SAP-BYOS-Azure
Image SLES15-SP6-SAP-BYOS-EC2
Image SLES15-SP6-SAP-BYOS-GCE
Image SLES15-SP6-SAP-EC2
Image SLES15-SP6-SAP-GCE
Image SLES15-SP6-SAP-Hardened
Image SLES15-SP6-SAP-Hardened-Azure
Image SLES15-SP6-SAP-Hardened-BYOS
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
Image SLES15-SP6-SAP-Hardened-EC2
Image SLES15-SP6-SAP-Hardened-GCE
Image SLES15-SP6-SAPCAL
Image SLES15-SP6-SAPCAL-Azure
Image SLES15-SP6-SAPCAL-EC2
Image SLES15-SP6-SAPCAL-GCE
Image SLES15-SP7-Azure-3P
Image SLES15-SP7-Azure-Basic
Image SLES15-SP7-Azure-Standard
Image SLES15-SP7-BYOS-Azure
Image SLES15-SP7-BYOS-EC2
Image SLES15-SP7-BYOS-GCE
Image SLES15-SP7-CHOST-BYOS-Aliyun
Image SLES15-SP7-CHOST-BYOS-Azure
Image SLES15-SP7-CHOST-BYOS-EC2
Image SLES15-SP7-CHOST-BYOS-GCE
Image SLES15-SP7-CHOST-BYOS-GDC
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
Image SLES15-SP7-EC2
Image SLES15-SP7-EC2-ECS-HVM
Image SLES15-SP7-GCE
Image SLES15-SP7-HPC-Azure
Image SLES15-SP7-HPC-BYOS-Azure
Image SLES15-SP7-HPC-BYOS-EC2
Image SLES15-SP7-HPC-BYOS-GCE
Image SLES15-SP7-Hardened-BYOS-Azure
Image SLES15-SP7-Hardened-BYOS-EC2
Image SLES15-SP7-Hardened-BYOS-GCE
Image SLES15-SP7-SAP-Azure
Image SLES15-SP7-SAP-Azure-3P
Image SLES15-SP7-SAP-BYOS-Azure
Image SLES15-SP7-SAP-BYOS-EC2
Image SLES15-SP7-SAP-BYOS-GCE
Image SLES15-SP7-SAP-EC2
Image SLES15-SP7-SAP-GCE
Image SLES15-SP7-SAP-Hardened-Azure
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
Image SLES15-SP7-SAP-Hardened-GCE
Image SLES15-SP7-SAPCAL-Azure
Image SLES15-SP7-SAPCAL-EC2
Image SLES15-SP7-SAPCAL-GCE
Image pr_15_7
Image pr_15_7_1_0
SUSE Linux Enterprise Module for Basesystem 15 SP7
SUSE Linux Enterprise Module for Development Tools 15 SP7
SUSE Linux Enterprise Server 15 SP6-LTSS
SUSE Linux Enterprise Server for SAP Applications 15 SP6
Ссылки
- Link for SUSE-SU-2026:2231-1
- E-Mail link for SUSE-SU-2026:2231-1
- SUSE Security Ratings
- SUSE Bug 1261206
- SUSE Bug 1262464
- SUSE Bug 1262465
- SUSE CVE CVE-2026-4046 page
- SUSE CVE CVE-2026-5450 page
- SUSE CVE CVE-2026-5928 page
Описание
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.
Затронутые продукты
Ссылки
- CVE-2026-4046
- SUSE Bug 1261206
- SUSE Bug 1261209
Описание
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
Затронутые продукты
Ссылки
- CVE-2026-5450
- SUSE Bug 1262465
Описание
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.
Затронутые продукты
Ссылки
- CVE-2026-5928
- SUSE Bug 1262464