Skip to content
OpenAdvisories
Medium ELSA-2026-42694 3 CVEs

Moderate: glibc security update (Oracle Linux 10)

Published Sep 7, 2026 · Updated Sep 7, 2026

Summary

[2.39-128.0.1]
- Forward port Oracle changes to 2.39-128.
- Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
Oracle history:
Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-126.0.1
- Forward port Oracle changes to 2.39-126.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-124.0.1
- Forward port Oracle changes to 2.39-124.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
May-19-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-121.0.1
- Forward port Oracle changes to 2.39-121.
- Reviewed-by: David Faust <david.faust@oracle.com>
April-2-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-113.0.1
- Reverted to version 2.39-113.
- Reviewed-by: David Faust <david.faust@oracle.com>
February-3-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-99.0.1
- Forward port Oracle changes to 2.39-99.
- Reviewed-by: David Faust <david.faust@oracle.com>
January-27-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-58.0.1.7
- Forward port Oracle changes to 2.39-58.7.
- Reviewed-by: David Faust <david.faust@oracle.com>
November-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-58.0.1.2
- Forward port Oracle changes to 2.39-58.2.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
September-29-2025 David Faust <david.faust@oracle.com> - 2.39-58.0.1
- Forward port Oracle changes to 2.39-58.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
August-29-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-54.0.1
- Forward port Oracle changes.
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
August-7-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-46.0.1
- Forward port Oracle changes.
Reviewed-by: David Faust <david.faust@oracle.com>
July-15-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-43.0.1
- Forward port Oracle changes.
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
March-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-37.0.1
- Forward port Oracle changes to 2.39-37.
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
Jan-22-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-32.0.1
- Integration of relevant Oracle patches.
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[2.39-128]
- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
(RHEL-180652, RHEL-185612)

[2.39-127]
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)

Fixed packages 221

ReleasePackageFixed in
Oracle Linux · 10 glibc 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-all-langpacks 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-benchtests 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-common 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-devel 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-doc 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-gconv-extra 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-aa 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-af 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-agr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ak 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-am 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-an 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-anp 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ar 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-as 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ast 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ayc 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-az 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-be 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bem 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ber 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bg 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bhb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bho 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bo 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-br 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-brx 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-bs 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-byn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ca 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ce 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-chr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ckb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-cmn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-crh 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-cs 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-csb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-cv 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-cy 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-da 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-de 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-doi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-dsb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-dv 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-dz 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-el 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-en 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-eo 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-es 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-et 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-eu 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fa 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ff 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fil 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fo 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fur 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-fy 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ga 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-gbm 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-gd 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-gez 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-gl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-gu 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-gv 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ha 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hak 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-he 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hif 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hne 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hsb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ht 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hu 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-hy 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ia 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-id 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ig 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ik 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-is 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-it 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-iu 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ja 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ka 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kab 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kk 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-km 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ko 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kok 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ks 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ku 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kv 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-kw 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ky 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lg 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-li 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lij 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ln 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lo 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lt 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lv 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-lzh 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mag 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mai 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mfe 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mg 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mhr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-miq 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mjw 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mk 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ml 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mni 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mnw 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ms 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-mt 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-my 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nan 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nb 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nds 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ne 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nhn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-niu 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-nso 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-oc 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-om 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-or 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-os 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-pa 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-pap 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-pl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ps 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-pt 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-quz 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-raj 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-rif 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ro 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ru 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-rw 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sa 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sah 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sat 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sc 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sd 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-se 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sgs 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-shn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-shs 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-si 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sid 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sk 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sm 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-so 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sq 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ss 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ssy 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-st 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-su 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sv 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-sw 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-syr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-szl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ta 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tcy 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-te 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tg 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-th 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-the 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ti 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tig 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tk 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tn 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-to 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tok 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tpi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tr 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ts 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-tt 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ug 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-uk 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-unm 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ur 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-uz 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-ve 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-vi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-wa 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-wae 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-wal 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-wo 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-xh 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-yi 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-yo 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-yue 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-yuw 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-zgh 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-zh 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-langpack-zu 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-locale-source 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-minimal-langpack 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-nss-devel 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-static 0:2.39-128.0.1.el10_2
Oracle Linux · 10 glibc-utils 0:2.39-128.0.1.el10_2
Oracle Linux · 10 libnsl 0:2.39-128.0.1.el10_2
Oracle Linux · 10 nss_db 0:2.39-128.0.1.el10_2
Oracle Linux · 10 nss_hesiod 0:2.39-128.0.1.el10_2

Vulnerabilities 3

  • High 7.5

    Potential buffer under-read in ungetwc

    Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes be…

  • High 7.3

    Potential buffer overflow in ns_sprintrrf TSIG handling path

    The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

  • Medium 6.5

    Buffer overread in ns_printrrf with corrupted RDATA field

    The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allo…