openSUSE-SU-2026:21228-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21228-1

Upstream

CVE-2026-5435

CVE-2026-6238

Related

CVE-2026-5435
CVE-2026-6238

Published

2026-07-03T13:19:16Z

Modified

2026-07-05T18:24:10.290080151Z

Summary

Security update for glibc

Details

This update for glibc fixes the following issues

CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656).
CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure (bsc#1263658).

References

Affected packages

openSUSE:Leap 16.0 / glibc

Package

Name: glibc
Purl: pkg:rpm/opensuse/glibc&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-locale": "2.40-160000.6.1",
            "glibc-lang": "2.40-160000.6.1",
            "glibc": "2.40-160000.6.1",
            "glibc-i18ndata": "2.40-160000.6.1",
            "glibc-utils": "2.40-160000.6.1",
            "glibc-info": "2.40-160000.6.1",
            "glibc-extra": "2.40-160000.6.1",
            "glibc-profile": "2.40-160000.6.1",
            "glibc-gconv-modules-extra": "2.40-160000.6.1",
            "cross-s390x-glibc-devel": "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel": "2.40-160000.6.1",
            "glibc-html": "2.40-160000.6.1",
            "glibc-devel": "2.40-160000.6.1",
            "cross-riscv64-glibc-devel": "2.40-160000.6.1",
            "cross-aarch64-glibc-devel": "2.40-160000.6.1",
            "glibc-locale-base": "2.40-160000.6.1",
            "glibc-devel-static": "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-aarch64-src

Package

Name: glibc-cross-aarch64-src
Purl: pkg:rpm/opensuse/glibc-cross-aarch64-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-lang": "2.40-160000.6.1",
            "glibc-locale": "2.40-160000.6.1",
            "glibc": "2.40-160000.6.1",
            "glibc-i18ndata": "2.40-160000.6.1",
            "glibc-utils": "2.40-160000.6.1",
            "glibc-info": "2.40-160000.6.1",
            "glibc-extra": "2.40-160000.6.1",
            "glibc-profile": "2.40-160000.6.1",
            "cross-s390x-glibc-devel": "2.40-160000.6.1",
            "glibc-gconv-modules-extra": "2.40-160000.6.1",
            "glibc-devel-static": "2.40-160000.6.1",
            "glibc-html": "2.40-160000.6.1",
            "glibc-locale-base": "2.40-160000.6.1",
            "cross-riscv64-glibc-devel": "2.40-160000.6.1",
            "cross-aarch64-glibc-devel": "2.40-160000.6.1",
            "glibc-devel": "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel": "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-ppc64le-src

Package

Name: glibc-cross-ppc64le-src
Purl: pkg:rpm/opensuse/glibc-cross-ppc64le-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-lang": "2.40-160000.6.1",
            "glibc-locale": "2.40-160000.6.1",
            "glibc": "2.40-160000.6.1",
            "glibc-i18ndata": "2.40-160000.6.1",
            "glibc-utils": "2.40-160000.6.1",
            "glibc-info": "2.40-160000.6.1",
            "glibc-extra": "2.40-160000.6.1",
            "glibc-profile": "2.40-160000.6.1",
            "glibc-gconv-modules-extra": "2.40-160000.6.1",
            "cross-s390x-glibc-devel": "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel": "2.40-160000.6.1",
            "glibc-html": "2.40-160000.6.1",
            "glibc-locale-base": "2.40-160000.6.1",
            "cross-riscv64-glibc-devel": "2.40-160000.6.1",
            "glibc-devel-static": "2.40-160000.6.1",
            "cross-aarch64-glibc-devel": "2.40-160000.6.1",
            "glibc-devel": "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-riscv64-src

Package

Name: glibc-cross-riscv64-src
Purl: pkg:rpm/opensuse/glibc-cross-riscv64-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-lang": "2.40-160000.6.1",
            "glibc-locale": "2.40-160000.6.1",
            "glibc": "2.40-160000.6.1",
            "glibc-i18ndata": "2.40-160000.6.1",
            "glibc-utils": "2.40-160000.6.1",
            "glibc-info": "2.40-160000.6.1",
            "glibc-extra": "2.40-160000.6.1",
            "glibc-profile": "2.40-160000.6.1",
            "cross-s390x-glibc-devel": "2.40-160000.6.1",
            "glibc-gconv-modules-extra": "2.40-160000.6.1",
            "glibc-devel-static": "2.40-160000.6.1",
            "glibc-html": "2.40-160000.6.1",
            "glibc-devel": "2.40-160000.6.1",
            "cross-riscv64-glibc-devel": "2.40-160000.6.1",
            "cross-aarch64-glibc-devel": "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel": "2.40-160000.6.1",
            "glibc-locale-base": "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-s390x-src

Package

Name: glibc-cross-s390x-src
Purl: pkg:rpm/opensuse/glibc-cross-s390x-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-lang": "2.40-160000.6.1",
            "glibc-locale": "2.40-160000.6.1",
            "glibc": "2.40-160000.6.1",
            "glibc-i18ndata": "2.40-160000.6.1",
            "glibc-utils": "2.40-160000.6.1",
            "glibc-info": "2.40-160000.6.1",
            "glibc-extra": "2.40-160000.6.1",
            "glibc-profile": "2.40-160000.6.1",
            "cross-s390x-glibc-devel": "2.40-160000.6.1",
            "glibc-gconv-modules-extra": "2.40-160000.6.1",
            "glibc-devel-static": "2.40-160000.6.1",
            "glibc-html": "2.40-160000.6.1",
            "glibc-devel": "2.40-160000.6.1",
            "cross-riscv64-glibc-devel": "2.40-160000.6.1",
            "cross-aarch64-glibc-devel": "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel": "2.40-160000.6.1",
            "glibc-locale-base": "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"