SUSE-SU-2026:3029-1

Опубликовано: 15 июл. 2026

Источник: suse-cvrf

Описание

Security update for glibc

This update for glibc fixes the following issues

CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656).
CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure (bsc#1263658).

Список пакетов

Container suse/ltss/sle15.4/bci-base-fips:latest

glibc-2.31-150300.104.1

Container suse/sle-micro-rancher/5.3:latest

glibc-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro-rancher/5.4:latest

glibc-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/5.3/toolbox:latest

glibc-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/5.4/toolbox:latest

glibc-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/5.5/toolbox:latest

glibc-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/5.5:latest

glibc-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/base-5.5:latest

glibc-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/kvm-5.5:latest

glibc-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro/rt-5.5:latest

glibc-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise Micro 5.3

glibc-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

SUSE Linux Enterprise Micro 5.4

glibc-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

SUSE Linux Enterprise Micro 5.5

glibc-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

SUSE Linux Enterprise Server 15 SP4-LTSS

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise Server 15 SP5-LTSS

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

glibc-2.31-150300.104.1

glibc-32bit-2.31-150300.104.1

glibc-devel-2.31-150300.104.1

glibc-devel-32bit-2.31-150300.104.1

glibc-devel-static-2.31-150300.104.1

glibc-extra-2.31-150300.104.1

glibc-i18ndata-2.31-150300.104.1

glibc-info-2.31-150300.104.1

glibc-lang-2.31-150300.104.1

glibc-locale-2.31-150300.104.1

glibc-locale-base-2.31-150300.104.1

glibc-locale-base-32bit-2.31-150300.104.1

glibc-profile-2.31-150300.104.1

glibc-utils-2.31-150300.104.1

nscd-2.31-150300.104.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263029-1/
Link for SUSE-SU-2026:3029-1
https://lists.suse.com/pipermail/sle-updates/2026-July/048303.html
E-Mail link for SUSE-SU-2026:3029-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1263656
SUSE Bug 1263656
https://bugzilla.suse.com/1263658
SUSE Bug 1263658
https://www.suse.com/security/cve/CVE-2026-5435/
SUSE CVE CVE-2026-5435 page
https://www.suse.com/security/cve/CVE-2026-6238/
SUSE CVE CVE-2026-6238 page

Описание

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

Затронутые продукты

Container suse/ltss/sle15.4/bci-base-fips:latest:glibc-2.31-150300.104.1

Container suse/sle-micro-rancher/5.3:latest:glibc-2.31-150300.104.1

Container suse/sle-micro-rancher/5.3:latest:glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro-rancher/5.4:latest:glibc-2.31-150300.104.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-5435.html
CVE-2026-5435
https://bugzilla.suse.com/1263656
SUSE Bug 1263656

Описание

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.

Затронутые продукты

Container suse/ltss/sle15.4/bci-base-fips:latest:glibc-2.31-150300.104.1

Container suse/sle-micro-rancher/5.3:latest:glibc-2.31-150300.104.1

Container suse/sle-micro-rancher/5.3:latest:glibc-locale-base-2.31-150300.104.1

Container suse/sle-micro-rancher/5.4:latest:glibc-2.31-150300.104.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6238.html
CVE-2026-6238
https://bugzilla.suse.com/1263658
SUSE Bug 1263658

SUSE-SU-2026:3029-1

Описание

Список пакетов

Container suse/ltss/sle15.4/bci-base-fips:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.3/toolbox:latest

Container suse/sle-micro/5.4/toolbox:latest

Container suse/sle-micro/5.5/toolbox:latest

Container suse/sle-micro/5.5:latest

Container suse/sle-micro/base-5.5:latest

Container suse/sle-micro/kvm-5.5:latest

Container suse/sle-micro/rt-5.5:latest

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

Ссылки

Уязвимость: CVE-2026-5435

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6238

Описание

Затронутые продукты

Ссылки