CLSA-2026-1789569255
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1789569255.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1789569255
- Upstream
- Published
- 2026-09-16T14:34:24Z
- Modified
- 2026-10-26T09:32:02Z
- Summary
- Fix CVE(s): CVE-2026-70456
- Details
-
- SECURITY UPDATE: out-of-bounds NULL write past the argv allocation in the
daemon's read_args()
- debian/patches/CVE-2026-70456.patch: grow argv to argc+1 entries before storing the trailing NULL in read_args(), since the post-dot glob_expand()/glob_match() path reserves room only for the entry it adds and the pre-dot growth check at "argc == maxargs-1" never fires once dot_pos is set; keep this tree's realloc_array()/out_of_memory() idiom, as 3.1.1's allocator returns NULL on failure rather than aborting
- CVE-2026-70456
- SECURITY UPDATE: out-of-bounds NULL write past the argv allocation in the
daemon's read_args()
- References