openSUSE-SU-2026:21228-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21228-1

Upstream

CVE (2)

CVE-2026-5435
CVE-2026-6238

Related

CVE (2)

CVE-2026-5435
CVE-2026-6238

Published

2026-07-03T13:19:16Z

Modified

2026-07-05T18:24:10Z

Summary

Security update for glibc

Details

This update for glibc fixes the following issues

CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write (bsc#1263656).
CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure (bsc#1263658).

References

Affected packages

openSUSE:Leap 16.0 / glibc

Package

Name: glibc
Purl: pkg:rpm/opensuse/glibc&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.6.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.6.1",
            "cross-s390x-glibc-devel":  "2.40-160000.6.1",
            "glibc":  "2.40-160000.6.1",
            "glibc-devel":  "2.40-160000.6.1",
            "glibc-devel-static":  "2.40-160000.6.1",
            "glibc-extra":  "2.40-160000.6.1",
            "glibc-gconv-modules-extra":  "2.40-160000.6.1",
            "glibc-html":  "2.40-160000.6.1",
            "glibc-i18ndata":  "2.40-160000.6.1",
            "glibc-info":  "2.40-160000.6.1",
            "glibc-lang":  "2.40-160000.6.1",
            "glibc-locale":  "2.40-160000.6.1",
            "glibc-locale-base":  "2.40-160000.6.1",
            "glibc-profile":  "2.40-160000.6.1",
            "glibc-utils":  "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-aarch64-src

Package

Name: glibc-cross-aarch64-src
Purl: pkg:rpm/opensuse/glibc-cross-aarch64-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.6.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.6.1",
            "cross-s390x-glibc-devel":  "2.40-160000.6.1",
            "glibc":  "2.40-160000.6.1",
            "glibc-devel":  "2.40-160000.6.1",
            "glibc-devel-static":  "2.40-160000.6.1",
            "glibc-extra":  "2.40-160000.6.1",
            "glibc-gconv-modules-extra":  "2.40-160000.6.1",
            "glibc-html":  "2.40-160000.6.1",
            "glibc-i18ndata":  "2.40-160000.6.1",
            "glibc-info":  "2.40-160000.6.1",
            "glibc-lang":  "2.40-160000.6.1",
            "glibc-locale":  "2.40-160000.6.1",
            "glibc-locale-base":  "2.40-160000.6.1",
            "glibc-profile":  "2.40-160000.6.1",
            "glibc-utils":  "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-ppc64le-src

Package

Name: glibc-cross-ppc64le-src
Purl: pkg:rpm/opensuse/glibc-cross-ppc64le-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.6.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.6.1",
            "cross-s390x-glibc-devel":  "2.40-160000.6.1",
            "glibc":  "2.40-160000.6.1",
            "glibc-devel":  "2.40-160000.6.1",
            "glibc-devel-static":  "2.40-160000.6.1",
            "glibc-extra":  "2.40-160000.6.1",
            "glibc-gconv-modules-extra":  "2.40-160000.6.1",
            "glibc-html":  "2.40-160000.6.1",
            "glibc-i18ndata":  "2.40-160000.6.1",
            "glibc-info":  "2.40-160000.6.1",
            "glibc-lang":  "2.40-160000.6.1",
            "glibc-locale":  "2.40-160000.6.1",
            "glibc-locale-base":  "2.40-160000.6.1",
            "glibc-profile":  "2.40-160000.6.1",
            "glibc-utils":  "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-riscv64-src

Package

Name: glibc-cross-riscv64-src
Purl: pkg:rpm/opensuse/glibc-cross-riscv64-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.6.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.6.1",
            "cross-s390x-glibc-devel":  "2.40-160000.6.1",
            "glibc":  "2.40-160000.6.1",
            "glibc-devel":  "2.40-160000.6.1",
            "glibc-devel-static":  "2.40-160000.6.1",
            "glibc-extra":  "2.40-160000.6.1",
            "glibc-gconv-modules-extra":  "2.40-160000.6.1",
            "glibc-html":  "2.40-160000.6.1",
            "glibc-i18ndata":  "2.40-160000.6.1",
            "glibc-info":  "2.40-160000.6.1",
            "glibc-lang":  "2.40-160000.6.1",
            "glibc-locale":  "2.40-160000.6.1",
            "glibc-locale-base":  "2.40-160000.6.1",
            "glibc-profile":  "2.40-160000.6.1",
            "glibc-utils":  "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"

openSUSE:Leap 16.0 / glibc-cross-s390x-src

Package

Name: glibc-cross-s390x-src
Purl: pkg:rpm/opensuse/glibc-cross-s390x-src&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.40-160000.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "cross-aarch64-glibc-devel":  "2.40-160000.6.1",
            "cross-ppc64le-glibc-devel":  "2.40-160000.6.1",
            "cross-riscv64-glibc-devel":  "2.40-160000.6.1",
            "cross-s390x-glibc-devel":  "2.40-160000.6.1",
            "glibc":  "2.40-160000.6.1",
            "glibc-devel":  "2.40-160000.6.1",
            "glibc-devel-static":  "2.40-160000.6.1",
            "glibc-extra":  "2.40-160000.6.1",
            "glibc-gconv-modules-extra":  "2.40-160000.6.1",
            "glibc-html":  "2.40-160000.6.1",
            "glibc-i18ndata":  "2.40-160000.6.1",
            "glibc-info":  "2.40-160000.6.1",
            "glibc-lang":  "2.40-160000.6.1",
            "glibc-locale":  "2.40-160000.6.1",
            "glibc-locale-base":  "2.40-160000.6.1",
            "glibc-profile":  "2.40-160000.6.1",
            "glibc-utils":  "2.40-160000.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21228-1.json"