Catalogue CVE

CVE-2026-0861

GNU C Library vulnerabilities

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.

Gravité: High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Jan 14, 2026, 9:01:11 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.39% · Oct 27, 2026

Projects and upstream resources

[glibc][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie	glibc	`2.41-12+deb13u2`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debiantrixie	glibc	`2.41-12+deb13u4`	Fixed	[CVE-2026-0861]
Debiansid	glibc	`2.42-8`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debiansid	glibc	`2.43-7`	Fixed	[CVE-2026-0861]
Debianforky	glibc	`2.42-8`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debianforky	glibc	`2.43-7`	Fixed	[CVE-2026-0861]
Debianbookworm	glibc	`2.36-9+deb12u14`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]

Showing 7 fix observations. All 84 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	glibc	`2.36-9+deb12u14`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	glibc	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	glibc-doc	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	glibc-source	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc-bin	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc-dev-bin	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc-devtools	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-amd64	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-dev	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-dev-amd64	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-dev-i386	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-dev-s390	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-dev-x32	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-i386	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-s390	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libc6-x32	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	locales	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	locales-all	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	nscd	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	glibc	`2.36-9+deb12u14`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debianbookworm-security	glibc	`2.36-9+deb12u7`	Affected	[CVE-2026-0861]
Debianforky	glibc	`2.42-8`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debianforky	glibc	`2.43-7`	Fixed	[CVE-2026-0861]
Debiansid	glibc	`2.42-8`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debiansid	glibc	`2.43-7`	Fixed	[CVE-2026-0861]
Debiantrixie	glibc	`2.41-12+deb13u2`	FixedDistribution-reported fixed boundary	[CVE-2026-0861]
Debiantrixie	glibc	`2.41-12+deb13u4`	Fixed	[CVE-2026-0861]
Suselinux enterprise live patching 15 sp4	glibc-livepatches	`0.3-150400.3.11.1`	UnknownSource applicability is not established	[SUSE-SU-2026:0347-1]Feb 4, 2026, 2:49:32 AM UTC
Suselinux enterprise live patching 15 sp5	glibc-livepatches	`0.3-150400.3.11.1`	UnknownSource applicability is not established	[SUSE-SU-2026:0347-1]Feb 4, 2026, 2:49:32 AM UTC
Suselinux enterprise live patching 15 sp6	glibc-livepatches	`0.3-150600.8.2.1`	UnknownSource applicability is not established	[SUSE-SU-2026:0499-1]Mar 23, 2026, 4:52:17 AM UTC
Suselinux enterprise live patching 15 sp7	glibc-livepatches	`0.3-150700.10.4.1`	UnknownSource applicability is not established	[SUSE-SU-2026:0827-1]Mar 6, 2026, 3:30:06 PM UTC
Ubuntu22.04	glibc	`2.34-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.10`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.11`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.12`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.13`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.7`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.8`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu22.04	glibc	`2.35-0ubuntu3.9`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.38-1ubuntu6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.38-3ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu24.04	glibc	`2.39-0ubuntu8.7`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu25.10	glibc	`2.41-6ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu25.10	glibc	`2.41-6ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu25.10	glibc	`2.41-9ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu25.10	glibc	`2.42-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu25.10	glibc	`2.42-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntu25.10	glibc	`2.42-0ubuntu3.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.30-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.30-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu7`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.12`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.14`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.15`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.16`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.17`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.18`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.18+esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.7`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC
Ubuntupro	glibc	`2.31-0ubuntu9.9`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-0861]Apr 22, 2026, 4:17:28 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "glibc",
      "status": "fixed",
      "release": "sid",
      "version": "2.43-7"
    },
    {
      "name": "glibc",
      "status": "fixed",
      "release": "forky",
      "version": "2.43-7"
    },
    {
      "name": "glibc",
      "status": "fixed",
      "release": "trixie",
      "version": "2.41-12+deb13u4"
    },
    {
      "name": "glibc",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.36-9+deb12u14"
    },
    {
      "name": "glibc",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "2.36-9+deb12u7"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1125678,
      "name": "glibc",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.42-8"
    },
    {
      "bug": 1125678,
      "name": "glibc",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.42-8"
    },
    {
      "bug": 1125678,
      "name": "glibc",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.41-12+deb13u2"
    },
    {
      "bug": 1125678,
      "name": "glibc",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.36-9+deb12u14"
    }
  ],
  "distribution_packages": [
    {
      "name": "glibc",
      "fixed_version": "2.36-9+deb12u14",
      "applicability_unknown": true
    },
    {
      "name": "glibc",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "glibc-doc",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "glibc-source",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc-bin",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc-dev-bin",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc-devtools",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-amd64",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-dev",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-dev-amd64",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-dev-i386",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-dev-s390",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-dev-x32",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-i386",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-s390",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "libc6-x32",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "locales",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "locales-all",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "nscd",
      "fixed_version": "2.39-0ubuntu8.7",
      "applicability_unknown": true
    },
    {
      "name": "glibc",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.31-0ubuntu9.18+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.30-0ubuntu2",
        "2.30-0ubuntu3",
        "2.31-0ubuntu5",
        "2.31-0ubuntu6",
        "2.31-0ubuntu7",
        "2.31-0ubuntu9",
        "2.31-0ubuntu9.1",
        "2.31-0ubuntu9.2",
        "2.31-0ubuntu9.3",
        "2.31-0ubuntu9.7",
        "2.31-0ubuntu9.9",
        "2.31-0ubuntu9.12",
        "2.31-0ubuntu9.14",
        "2.31-0ubuntu9.15",
        "2.31-0ubuntu9.16",
        "2.31-0ubuntu9.17",
        "2.31-0ubuntu9.18"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-0861",
      "fixed_version": "2.31-0ubuntu9.18+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-0861",
      "provider_updated_at": "2026-04-22T16:17:28.297278Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.35-0ubuntu3.13"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.34-0ubuntu3",
        "2.35-0ubuntu1",
        "2.35-0ubuntu3",
        "2.35-0ubuntu3.1",
        "2.35-0ubuntu3.3",
        "2.35-0ubuntu3.4",
        "2.35-0ubuntu3.5",
        "2.35-0ubuntu3.6",
        "2.35-0ubuntu3.7",
        "2.35-0ubuntu3.8",
        "2.35-0ubuntu3.9",
        "2.35-0ubuntu3.10",
        "2.35-0ubuntu3.11",
        "2.35-0ubuntu3.12"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-0861",
      "fixed_version": "2.35-0ubuntu3.13",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-0861",
      "provider_updated_at": "2026-04-22T16:17:28.297278Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.39-0ubuntu8.7"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "2.38-1ubuntu6",
        "2.38-3ubuntu1",
        "2.39-0ubuntu1",
        "2.39-0ubuntu2",
        "2.39-0ubuntu6",
        "2.39-0ubuntu8",
        "2.39-0ubuntu8.1",
        "2.39-0ubuntu8.2",
        "2.39-0ubuntu8.3",
        "2.39-0ubuntu8.4",
        "2.39-0ubuntu8.5",
        "2.39-0ubuntu8.6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-0861",
      "fixed_version": "2.39-0ubuntu8.7",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-0861",
      "provider_updated_at": "2026-04-22T16:17:28.297278Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.42-0ubuntu3.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "2.41-6ubuntu1",
        "2.41-6ubuntu2",
        "2.41-9ubuntu1",
        "2.42-0ubuntu1",
        "2.42-0ubuntu3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-0861",
      "fixed_version": "2.42-0ubuntu3.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-0861",
      "provider_updated_at": "2026-04-22T16:17:28.297278Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc-livepatches",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3-150600.8.2.1"
            }
          ]
        }
      ],
      "release": "linux enterprise live patching 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0499-1",
      "fixed_version": "0.3-150600.8.2.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0499-1",
      "provider_updated_at": "2026-03-23T04:52:17.796910Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc-livepatches",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3-150700.10.4.1"
            }
          ]
        }
      ],
      "release": "linux enterprise live patching 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0827-1",
      "fixed_version": "0.3-150700.10.4.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0827-1",
      "provider_updated_at": "2026-03-06T15:30:06.431502Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc-livepatches",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3-150400.3.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise live patching 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0347-1",
      "fixed_version": "0.3-150400.3.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0347-1",
      "provider_updated_at": "2026-02-04T02:49:32.225676Z",
      "applicability_unknown": true
    },
    {
      "name": "glibc-livepatches",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3-150400.3.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise live patching 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0347-1",
      "fixed_version": "0.3-150400.3.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0347-1",
      "provider_updated_at": "2026-02-04T02:49:32.225676Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1125678]

OpenFactory catalog packages

L’association des paquets est en cours.

[Debian 12 (Bookworm)]

[glibc-doc]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[glibc-source]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6-dbg]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6-dev]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6-dev-i386]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6-dev-x32]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6-i386]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc6-x32]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc-bin]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc-dev-bin]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc-devtools]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[libc-l10n]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[locales]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · all · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · all · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[locales-all]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
[nscd]Inconnu
Paquet source: [glibc]
Détails (4)
- 2.36-9+deb12u14 · amd64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u14 · arm64 · bookworm
  Corrigée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · amd64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12
- 2.36-9+deb12u7 · arm64 · bookworm-security
  Affectée · Corrigée: 2.36-9+deb12u14
  usn · glibc · debian · bookworm; usn · glibc · debian · 12

[Debian 13 (Trixie)]

[glibc-doc]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.41-12+deb13u3 · all · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
- 2.41-12+deb13u3 · all · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
[glibc-source]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.41-12+deb13u3 · all · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
- 2.41-12+deb13u3 · all · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
[libc6]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.41-12+deb13u3 · amd64 · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
- 2.41-12+deb13u3 · arm64 · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
[libc6-dbg]Inconnu
Paquet source: [glibc]
Détails (2)
- 2.41-12+deb13u3 · amd64 · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13
- 2.41-12+deb13u3 · arm64 · trixie
  Corrigée · Corrigée: 2.41-12+deb13u2
  usn · glibc · debian · 13

Résultats suivants

Observé: Oct 24, 2026, 2:01:07 AM UTC

Références

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]