openSUSE-SU-2026:20501-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20501-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20501-1

Upstream

CVE (2)

Related

CVE (2)

Published

2026-04-10T06:36:43Z

Modified

2026-04-22T18:26:50Z

Summary

Security update for glibc

Details

This update for glibc fixes the following issues:

Security fixes:

CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078).
CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

Other fixes:

nss: Missing checks in __nss_configure_lookup, __nss_database_get (bsc#1258319).

References

Affected packages

openSUSE:Leap 16.0 / glibc

Package

Name: glibc
Purl: pkg:rpm/opensuse/glibc&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.4.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.4.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.4.1",
            "cross-s390x-glibc-devel":  "2.40-160000.4.1",
            "glibc":  "2.40-160000.4.1",
            "glibc-devel":  "2.40-160000.4.1",
            "glibc-devel-static":  "2.40-160000.4.1",
            "glibc-extra":  "2.40-160000.4.1",
            "glibc-gconv-modules-extra":  "2.40-160000.4.1",
            "glibc-html":  "2.40-160000.4.1",
            "glibc-i18ndata":  "2.40-160000.4.1",
            "glibc-info":  "2.40-160000.4.1",
            "glibc-lang":  "2.40-160000.4.1",
            "glibc-locale":  "2.40-160000.4.1",
            "glibc-locale-base":  "2.40-160000.4.1",
            "glibc-profile":  "2.40-160000.4.1",
            "glibc-utils":  "2.40-160000.4.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20501-1.json"

openSUSE:Leap 16.0 / glibc-cross-aarch64-src

Package

Name: glibc-cross-aarch64-src
Purl: pkg:rpm/opensuse/glibc-cross-aarch64-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.4.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.4.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.4.1",
            "cross-s390x-glibc-devel":  "2.40-160000.4.1",
            "glibc":  "2.40-160000.4.1",
            "glibc-devel":  "2.40-160000.4.1",
            "glibc-devel-static":  "2.40-160000.4.1",
            "glibc-extra":  "2.40-160000.4.1",
            "glibc-gconv-modules-extra":  "2.40-160000.4.1",
            "glibc-html":  "2.40-160000.4.1",
            "glibc-i18ndata":  "2.40-160000.4.1",
            "glibc-info":  "2.40-160000.4.1",
            "glibc-lang":  "2.40-160000.4.1",
            "glibc-locale":  "2.40-160000.4.1",
            "glibc-locale-base":  "2.40-160000.4.1",
            "glibc-profile":  "2.40-160000.4.1",
            "glibc-utils":  "2.40-160000.4.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20501-1.json"

openSUSE:Leap 16.0 / glibc-cross-ppc64le-src

Package

Name: glibc-cross-ppc64le-src
Purl: pkg:rpm/opensuse/glibc-cross-ppc64le-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.4.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.4.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.4.1",
            "cross-s390x-glibc-devel":  "2.40-160000.4.1",
            "glibc":  "2.40-160000.4.1",
            "glibc-devel":  "2.40-160000.4.1",
            "glibc-devel-static":  "2.40-160000.4.1",
            "glibc-extra":  "2.40-160000.4.1",
            "glibc-gconv-modules-extra":  "2.40-160000.4.1",
            "glibc-html":  "2.40-160000.4.1",
            "glibc-i18ndata":  "2.40-160000.4.1",
            "glibc-info":  "2.40-160000.4.1",
            "glibc-lang":  "2.40-160000.4.1",
            "glibc-locale":  "2.40-160000.4.1",
            "glibc-locale-base":  "2.40-160000.4.1",
            "glibc-profile":  "2.40-160000.4.1",
            "glibc-utils":  "2.40-160000.4.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20501-1.json"

openSUSE:Leap 16.0 / glibc-cross-riscv64-src

Package

Name: glibc-cross-riscv64-src
Purl: pkg:rpm/opensuse/glibc-cross-riscv64-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.4.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.4.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.4.1",
            "cross-s390x-glibc-devel":  "2.40-160000.4.1",
            "glibc":  "2.40-160000.4.1",
            "glibc-devel":  "2.40-160000.4.1",
            "glibc-devel-static":  "2.40-160000.4.1",
            "glibc-extra":  "2.40-160000.4.1",
            "glibc-gconv-modules-extra":  "2.40-160000.4.1",
            "glibc-html":  "2.40-160000.4.1",
            "glibc-i18ndata":  "2.40-160000.4.1",
            "glibc-info":  "2.40-160000.4.1",
            "glibc-lang":  "2.40-160000.4.1",
            "glibc-locale":  "2.40-160000.4.1",
            "glibc-locale-base":  "2.40-160000.4.1",
            "glibc-profile":  "2.40-160000.4.1",
            "glibc-utils":  "2.40-160000.4.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20501-1.json"

openSUSE:Leap 16.0 / glibc-cross-s390x-src

Package

Name: glibc-cross-s390x-src
Purl: pkg:rpm/opensuse/glibc-cross-s390x-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.4.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.4.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.4.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.4.1",
            "cross-s390x-glibc-devel":  "2.40-160000.4.1",
            "glibc":  "2.40-160000.4.1",
            "glibc-devel":  "2.40-160000.4.1",
            "glibc-devel-static":  "2.40-160000.4.1",
            "glibc-extra":  "2.40-160000.4.1",
            "glibc-gconv-modules-extra":  "2.40-160000.4.1",
            "glibc-html":  "2.40-160000.4.1",
            "glibc-i18ndata":  "2.40-160000.4.1",
            "glibc-info":  "2.40-160000.4.1",
            "glibc-lang":  "2.40-160000.4.1",
            "glibc-locale":  "2.40-160000.4.1",
            "glibc-locale-base":  "2.40-160000.4.1",
            "glibc-profile":  "2.40-160000.4.1",
            "glibc-utils":  "2.40-160000.4.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20501-1.json"