SUSE-SU-2026:4591-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-20264591-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:4591-1

Upstream

CVE (10)

Related

CVE (10)

Published

2026-10-08T12:18:31Z

Modified

2026-10-09T18:15:03Z

Summary

Security update for glibc

Details

This update for glibc fixes the following issues:

CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726).
CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723).
CVE-2026-8674: reachable assert in resolv/resolv_conf.c:update_from_conf allows an attacker in a local network to trigger a process crash (bsc#1281297).
CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262).
CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946).
CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921).
CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922).
CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).
CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
CVE-2026-97399: one byte out-of-bounds read via function strncasecmp on Power8 can lead to a program crash (bsc#1283147).

References

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Micro 5.3

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Micro 5.4

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Micro%205.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Micro 5.5

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Server 15 SP4-LTSS

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Server 15 SP5-LTSS

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP4

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP5

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.109.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc": "2.31-150300.109.1",
            "glibc-32bit": "2.31-150300.109.1",
            "glibc-devel": "2.31-150300.109.1",
            "glibc-devel-32bit": "2.31-150300.109.1",
            "glibc-devel-static": "2.31-150300.109.1",
            "glibc-extra": "2.31-150300.109.1",
            "glibc-i18ndata": "2.31-150300.109.1",
            "glibc-info": "2.31-150300.109.1",
            "glibc-lang": "2.31-150300.109.1",
            "glibc-locale": "2.31-150300.109.1",
            "glibc-locale-base": "2.31-150300.109.1",
            "glibc-locale-base-32bit": "2.31-150300.109.1",
            "glibc-profile": "2.31-150300.109.1",
            "glibc-utils": "2.31-150300.109.1",
            "nscd": "2.31-150300.109.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4591-1.json"