{"schema_version":"1.7.2","id":"OESA-2026-3418","modified":"2026-08-20T09:55:09Z","published":"2026-08-20T09:55:09Z","upstream":["CVE-2026-6368","CVE-2026-6791"],"summary":"glibc security update","details":"The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,  login, exit and more.\r\n\r\nSecurity Fix(es):\n\nCalling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.(CVE-2026-6368)\n\nWhen expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.  The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.(CVE-2026-6791)","affected":[{"package":{"ecosystem":"openEuler:20.03-LTS-SP4","name":"glibc","purl":"pkg:rpm/openEuler/glibc&distro=openEuler-20.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-129.oe2003sp4"}]}],"ecosystem_specific":{"aarch64":["glibc-2.28-129.oe2003sp4.aarch64.rpm","glibc-all-langpacks-2.28-129.oe2003sp4.aarch64.rpm","glibc-benchtests-2.28-129.oe2003sp4.aarch64.rpm","glibc-common-2.28-129.oe2003sp4.aarch64.rpm","glibc-compat-2.17-2.28-129.oe2003sp4.aarch64.rpm","glibc-debuginfo-2.28-129.oe2003sp4.aarch64.rpm","glibc-debugsource-2.28-129.oe2003sp4.aarch64.rpm","glibc-debugutils-2.28-129.oe2003sp4.aarch64.rpm","glibc-devel-2.28-129.oe2003sp4.aarch64.rpm","glibc-locale-source-2.28-129.oe2003sp4.aarch64.rpm","glibc-nss-devel-2.28-129.oe2003sp4.aarch64.rpm","libnsl-2.28-129.oe2003sp4.aarch64.rpm","nscd-2.28-129.oe2003sp4.aarch64.rpm","nss_modules-2.28-129.oe2003sp4.aarch64.rpm"],"noarch":["glibc-help-2.28-129.oe2003sp4.noarch.rpm"],"src":["glibc-2.28-129.oe2003sp4.src.rpm"],"x86_64":["glibc-2.28-129.oe2003sp4.x86_64.rpm","glibc-all-langpacks-2.28-129.oe2003sp4.x86_64.rpm","glibc-benchtests-2.28-129.oe2003sp4.x86_64.rpm","glibc-common-2.28-129.oe2003sp4.x86_64.rpm","glibc-compat-2.17-2.28-129.oe2003sp4.x86_64.rpm","glibc-debuginfo-2.28-129.oe2003sp4.x86_64.rpm","glibc-debugsource-2.28-129.oe2003sp4.x86_64.rpm","glibc-debugutils-2.28-129.oe2003sp4.x86_64.rpm","glibc-devel-2.28-129.oe2003sp4.x86_64.rpm","glibc-locale-source-2.28-129.oe2003sp4.x86_64.rpm","glibc-nss-devel-2.28-129.oe2003sp4.x86_64.rpm","libnsl-2.28-129.oe2003sp4.x86_64.rpm","nscd-2.28-129.oe2003sp4.x86_64.rpm","nss_modules-2.28-129.oe2003sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:22.03-LTS-SP4","name":"glibc","purl":"pkg:rpm/openEuler/glibc&distro=openEuler-22.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-181.oe2203sp4"}]}],"ecosystem_specific":{"aarch64":["glibc-2.34-181.oe2203sp4.aarch64.rpm","glibc-all-langpacks-2.34-181.oe2203sp4.aarch64.rpm","glibc-common-2.34-181.oe2203sp4.aarch64.rpm","glibc-compat-2.17-2.34-181.oe2203sp4.aarch64.rpm","glibc-debuginfo-2.34-181.oe2203sp4.aarch64.rpm","glibc-debugsource-2.34-181.oe2203sp4.aarch64.rpm","glibc-debugutils-2.34-181.oe2203sp4.aarch64.rpm","glibc-devel-2.34-181.oe2203sp4.aarch64.rpm","glibc-locale-archive-2.34-181.oe2203sp4.aarch64.rpm","glibc-locale-source-2.34-181.oe2203sp4.aarch64.rpm","glibc-nss-devel-2.34-181.oe2203sp4.aarch64.rpm","libnsl-2.34-181.oe2203sp4.aarch64.rpm","nscd-2.34-181.oe2203sp4.aarch64.rpm","nss_modules-2.34-181.oe2203sp4.aarch64.rpm"],"noarch":["glibc-help-2.34-181.oe2203sp4.noarch.rpm"],"src":["glibc-2.34-181.oe2203sp4.src.rpm"],"x86_64":["glibc-2.34-181.oe2203sp4.x86_64.rpm","glibc-all-langpacks-2.34-181.oe2203sp4.x86_64.rpm","glibc-common-2.34-181.oe2203sp4.x86_64.rpm","glibc-compat-2.17-2.34-181.oe2203sp4.x86_64.rpm","glibc-debuginfo-2.34-181.oe2203sp4.x86_64.rpm","glibc-debugsource-2.34-181.oe2203sp4.x86_64.rpm","glibc-debugutils-2.34-181.oe2203sp4.x86_64.rpm","glibc-devel-2.34-181.oe2203sp4.x86_64.rpm","glibc-locale-archive-2.34-181.oe2203sp4.x86_64.rpm","glibc-locale-source-2.34-181.oe2203sp4.x86_64.rpm","glibc-nss-devel-2.34-181.oe2203sp4.x86_64.rpm","libnsl-2.34-181.oe2203sp4.x86_64.rpm","nscd-2.34-181.oe2203sp4.x86_64.rpm","nss_modules-2.34-181.oe2203sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP1","name":"glibc","purl":"pkg:rpm/openEuler/glibc&distro=openEuler-24.03-LTS-SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-119.oe2403sp1"}]}],"ecosystem_specific":{"aarch64":["glibc-2.38-119.oe2403sp1.aarch64.rpm","glibc-all-langpacks-2.38-119.oe2403sp1.aarch64.rpm","glibc-common-2.38-119.oe2403sp1.aarch64.rpm","glibc-debuginfo-2.38-119.oe2403sp1.aarch64.rpm","glibc-debugsource-2.38-119.oe2403sp1.aarch64.rpm","glibc-debugutils-2.38-119.oe2403sp1.aarch64.rpm","glibc-devel-2.38-119.oe2403sp1.aarch64.rpm","glibc-locale-archive-2.38-119.oe2403sp1.aarch64.rpm","glibc-locale-source-2.38-119.oe2403sp1.aarch64.rpm","glibc-nss-devel-2.38-119.oe2403sp1.aarch64.rpm","libnsl-2.38-119.oe2403sp1.aarch64.rpm","nscd-2.38-119.oe2403sp1.aarch64.rpm","nss_modules-2.38-119.oe2403sp1.aarch64.rpm"],"noarch":["glibc-help-2.38-119.oe2403sp1.noarch.rpm"],"src":["glibc-2.38-119.oe2403sp1.src.rpm"],"x86_64":["glibc-2.38-119.oe2403sp1.x86_64.rpm","glibc-all-langpacks-2.38-119.oe2403sp1.x86_64.rpm","glibc-common-2.38-119.oe2403sp1.x86_64.rpm","glibc-debuginfo-2.38-119.oe2403sp1.x86_64.rpm","glibc-debugsource-2.38-119.oe2403sp1.x86_64.rpm","glibc-debugutils-2.38-119.oe2403sp1.x86_64.rpm","glibc-devel-2.38-119.oe2403sp1.x86_64.rpm","glibc-locale-archive-2.38-119.oe2403sp1.x86_64.rpm","glibc-locale-source-2.38-119.oe2403sp1.x86_64.rpm","glibc-nss-devel-2.38-119.oe2403sp1.x86_64.rpm","libnsl-2.38-119.oe2403sp1.x86_64.rpm","nscd-2.38-119.oe2403sp1.x86_64.rpm","nss_modules-2.38-119.oe2403sp1.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP3","name":"glibc","purl":"pkg:rpm/openEuler/glibc&distro=openEuler-24.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-119.oe2403sp3"}]}],"ecosystem_specific":{"aarch64":["glibc-2.38-119.oe2403sp3.aarch64.rpm","glibc-all-langpacks-2.38-119.oe2403sp3.aarch64.rpm","glibc-common-2.38-119.oe2403sp3.aarch64.rpm","glibc-debuginfo-2.38-119.oe2403sp3.aarch64.rpm","glibc-debugsource-2.38-119.oe2403sp3.aarch64.rpm","glibc-debugutils-2.38-119.oe2403sp3.aarch64.rpm","glibc-devel-2.38-119.oe2403sp3.aarch64.rpm","glibc-locale-archive-2.38-119.oe2403sp3.aarch64.rpm","glibc-locale-source-2.38-119.oe2403sp3.aarch64.rpm","glibc-nss-devel-2.38-119.oe2403sp3.aarch64.rpm","libnsl-2.38-119.oe2403sp3.aarch64.rpm","nscd-2.38-119.oe2403sp3.aarch64.rpm","nss_modules-2.38-119.oe2403sp3.aarch64.rpm"],"noarch":["glibc-help-2.38-119.oe2403sp3.noarch.rpm"],"src":["glibc-2.38-119.oe2403sp3.src.rpm"],"x86_64":["glibc-2.38-119.oe2403sp3.x86_64.rpm","glibc-all-langpacks-2.38-119.oe2403sp3.x86_64.rpm","glibc-common-2.38-119.oe2403sp3.x86_64.rpm","glibc-debuginfo-2.38-119.oe2403sp3.x86_64.rpm","glibc-debugsource-2.38-119.oe2403sp3.x86_64.rpm","glibc-debugutils-2.38-119.oe2403sp3.x86_64.rpm","glibc-devel-2.38-119.oe2403sp3.x86_64.rpm","glibc-locale-archive-2.38-119.oe2403sp3.x86_64.rpm","glibc-locale-source-2.38-119.oe2403sp3.x86_64.rpm","glibc-nss-devel-2.38-119.oe2403sp3.x86_64.rpm","libnsl-2.38-119.oe2403sp3.x86_64.rpm","nscd-2.38-119.oe2403sp3.x86_64.rpm","nss_modules-2.38-119.oe2403sp3.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP4","name":"glibc","purl":"pkg:rpm/openEuler/glibc&distro=openEuler-24.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-119.oe2403sp4"}]}],"ecosystem_specific":{"aarch64":["glibc-2.38-119.oe2403sp4.aarch64.rpm","glibc-all-langpacks-2.38-119.oe2403sp4.aarch64.rpm","glibc-common-2.38-119.oe2403sp4.aarch64.rpm","glibc-debuginfo-2.38-119.oe2403sp4.aarch64.rpm","glibc-debugsource-2.38-119.oe2403sp4.aarch64.rpm","glibc-debugutils-2.38-119.oe2403sp4.aarch64.rpm","glibc-devel-2.38-119.oe2403sp4.aarch64.rpm","glibc-locale-archive-2.38-119.oe2403sp4.aarch64.rpm","glibc-locale-source-2.38-119.oe2403sp4.aarch64.rpm","glibc-nss-devel-2.38-119.oe2403sp4.aarch64.rpm","libnsl-2.38-119.oe2403sp4.aarch64.rpm","nscd-2.38-119.oe2403sp4.aarch64.rpm","nss_modules-2.38-119.oe2403sp4.aarch64.rpm"],"noarch":["glibc-help-2.38-119.oe2403sp4.noarch.rpm"],"src":["glibc-2.38-119.oe2403sp4.src.rpm"],"x86_64":["glibc-2.38-119.oe2403sp4.x86_64.rpm","glibc-all-langpacks-2.38-119.oe2403sp4.x86_64.rpm","glibc-common-2.38-119.oe2403sp4.x86_64.rpm","glibc-debuginfo-2.38-119.oe2403sp4.x86_64.rpm","glibc-debugsource-2.38-119.oe2403sp4.x86_64.rpm","glibc-debugutils-2.38-119.oe2403sp4.x86_64.rpm","glibc-devel-2.38-119.oe2403sp4.x86_64.rpm","glibc-locale-archive-2.38-119.oe2403sp4.x86_64.rpm","glibc-locale-source-2.38-119.oe2403sp4.x86_64.rpm","glibc-nss-devel-2.38-119.oe2403sp4.x86_64.rpm","libnsl-2.38-119.oe2403sp4.x86_64.rpm","nscd-2.38-119.oe2403sp4.x86_64.rpm","nss_modules-2.38-119.oe2403sp4.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3418"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6368"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6791"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}],"database_specific":{"severity":"Critical"}}