[glibc] Document CVE-2026-4046
Siddhesh Poyarekar via Glibc-cvs <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.cvs |
|---|---|
| Message-ID | <[email protected]> |
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=4b73af327e98c23d04938301ec2d5583ea9e696c commit 4b73af327e98c23d04938301ec2d5583ea9e696c Author: Siddhesh Poyarekar <[email protected]> Date: Mon Mar 30 13:26:16 2026 -0400 Document CVE-2026-4046 Signed-off-by: Siddhesh Poyarekar <[email protected]> Diff: --- advisories/GLIBC-SA-2026-0007 | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/advisories/GLIBC-SA-2026-0007 b/advisories/GLIBC-SA-2026-0007 new file mode 100644 index 0000000000..b960525e7f --- /dev/null +++ b/advisories/GLIBC-SA-2026-0007 @@ -0,0 +1,14 @@ +iconv crash due to assertion failure with untrusted input + +The iconv() function in the GNU C Library versions 2.43 and earlier may +crash due to an assertion failure when converting inputs from the +IBM1390 or IBM1399 character sets, which may be used to remotely crash +an application. + +This vulnerability can be trivially mitigated by removing the IBM1390 +and IBM1399 character sets from systems that do not need them. + +CVE-Id: CVE-2026-4046 +Public-Date: 2026-03-12 +Vulnerable-Commit: 0ecb606cb6cf65de1d9fc8a919bceb4be476c602 (2.3.3-1501) +Reported-by: Rocket Ma