{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "The GNU C Library glibc: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/the-gnu-c-library--glibc/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/the-gnu-c-library--glibc/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · disclosed",
   "content_text": "The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.\n\nThis condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in Chainguard (glibc-2.43 0 and 46 more)",
   "content_text": "Fixed versions: glibc-2.43 0, glibc-2.43-abi-report 0, glibc-2.43-dev 0, glibc-2.43-iconv 0, glibc-2.43-locale-ca 0, glibc-2.43-locale-de 0, glibc-2.43-locale-en 0, glibc-2.43-locale-es 0, glibc-2.43-locale-extra 0, glibc-2.43-locale-fr 0, glibc-2.43-locale-posix 0, glibc-2.43-locales 0, glibc-2.43-testresults 0, glibc-2.43-tracing 0, glibc-2.44 0, glibc-2.44-abi-report 0, glibc-2.44-iconv 0, glibc-2.44-locale-ca 0, glibc-2.44-locale-de 0, glibc-2.44-locale-en 0, glibc-2.44-locale-extra 0, glibc-2.44-locale-fr 0, glibc-2.44-locales 0, glibc-2.44-testresults 0, glibc-2.44-tracing 0, ld-linux-2.43 0, ld-linux-2.44 0, libc-bin-2.43 0, libcrypt1-2.43 0, libcrypt1-2.44 0, localedef-2.43 0, nscd-2.43 0, nscd-2.44 0, nss-db-2.43 0, nss-db-2.44 0, nss-hesiod-2.43 0, nss-hesiod-2.44 0, pcprofiledump-2.43 0, pcprofiledump-2.44 0, posix-libc-utils-2.43 0, posix-libc-utils-2.44 0, posix-libc-utils-bin-2.43 0, sln-2.43 0, sln-2.44 0, sotruss-2.43 0, tzutils-2.43 0, tzutils-2.44 0.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in Debian 14 (glibc 2.43-7)",
   "content_text": "Fixed versions: glibc 2.43-7.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in openSUSE Tumbleweed (glibc 2.44-3.1)",
   "content_text": "Fixed versions: glibc 2.44-3.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Micro 5.3 (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Micro 5.4 (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Micro 5.5 (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (glibc 2.38-150600.14.61.1)",
   "content_text": "Fixed versions: glibc 2.38-150600.14.61.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-module-for-development-tools-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Module for Development Tools 15 SP7 (glibc 2.38-150600.14.61.1)",
   "content_text": "Fixed versions: glibc 2.38-150600.14.61.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (glibc 2.38-150600.14.61.1)",
   "content_text": "Fixed versions: glibc 2.38-150600.14.61.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (glibc 2.31-150300.109.1)",
   "content_text": "Fixed versions: glibc 2.31-150300.109.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (glibc 2.38-150600.14.61.1)",
   "content_text": "Fixed versions: glibc 2.38-150600.14.61.1.",
   "date_published": "2026-09-28T15:21:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97399/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97399/",
   "title": "CVE-2026-97399 · The GNU C Library glibc · fixed in Wolfi (glibc-2.43 0 and 46 more)",
   "content_text": "Fixed versions: glibc-2.43 0, glibc-2.43-abi-report 0, glibc-2.43-dev 0, glibc-2.43-iconv 0, glibc-2.43-locale-ca 0, glibc-2.43-locale-de 0, glibc-2.43-locale-en 0, glibc-2.43-locale-es 0, glibc-2.43-locale-extra 0, glibc-2.43-locale-fr 0, glibc-2.43-locale-posix 0, glibc-2.43-locales 0, glibc-2.43-testresults 0, glibc-2.43-tracing 0, glibc-2.44 0, glibc-2.44-abi-report 0, glibc-2.44-iconv 0, glibc-2.44-locale-ca 0, glibc-2.44-locale-de 0, glibc-2.44-locale-en 0, glibc-2.44-locale-extra 0, glibc-2.44-locale-fr 0, glibc-2.44-locales 0, glibc-2.44-testresults 0, glibc-2.44-tracing 0, ld-linux-2.43 0, ld-linux-2.44 0, libc-bin-2.43 0, libcrypt1-2.43 0, libcrypt1-2.44 0, localedef-2.43 0, nscd-2.43 0, nscd-2.44 0, nss-db-2.43 0, nss-db-2.44 0, nss-hesiod-2.43 0, nss-hesiod-2.44 0, pcprofiledump-2.43 0, pcprofiledump-2.44 0, posix-libc-utils-2.43 0, posix-libc-utils-2.44 0, posix-libc-utils-bin-2.43 0, sln-2.43 0, sln-2.44 0, sotruss-2.43 0, tzutils-2.43 0, tzutils-2.44 0.",
   "date_published": "2026-09-28T15:21:02Z"
  }
 ]
}