[glibc] advisories: Update GLIBC-SA-2026-0007.
Carlos O'Donell via Glibc-cvs <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.cvs |
|---|---|
| Message-ID | <[email protected]> |
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=76fabd4141b5d0fe5612b925b8bf97a7502aea4f commit 76fabd4141b5d0fe5612b925b8bf97a7502aea4f Author: Carlos O'Donell <[email protected]> Date: Fri Apr 17 17:12:48 2026 -0400 advisories: Update GLIBC-SA-2026-0007. Update NEWS to include GLIBC-SA-2026-0007. Diff: --- NEWS | 4 ++++ advisories/GLIBC-SA-2026-0007 | 1 + 2 files changed, 5 insertions(+) diff --git a/NEWS b/NEWS index c6e9a83923..d72c1efccb 100644 --- a/NEWS +++ b/NEWS @@ -42,6 +42,10 @@ found in the advisories directory of the release tarball: gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames (CVE-2026-4438) + GLIBC-SA-2026-0007: + iconv crash due to assertion failure with untrusted input + (CVE-2026-4046) + The following bugs were resolved with this release: [The release manager will add the list generated by diff --git a/advisories/GLIBC-SA-2026-0007 b/advisories/GLIBC-SA-2026-0007 index b960525e7f..b880fb5544 100644 --- a/advisories/GLIBC-SA-2026-0007 +++ b/advisories/GLIBC-SA-2026-0007 @@ -11,4 +11,5 @@ and IBM1399 character sets from systems that do not need them. CVE-Id: CVE-2026-4046 Public-Date: 2026-03-12 Vulnerable-Commit: 0ecb606cb6cf65de1d9fc8a919bceb4be476c602 (2.3.3-1501) +Fix-Commit: d6f08d1cf027f4eb2ba289a6cc66853722d4badc (2.44) Reported-by: Rocket Ma