p PatchFirst

SUSE-SU-2026:0371-1

SUSE-SU-2026:0371-1 · Security update for glibc

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for glibc fixes the following issues: Security fixes: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766). - CVE-2026-0915: Fixed uninitialized stack buffer used as DNS query name when net==0 in _nss_dns_getnetbyaddr_r (bsc#1256822). - CVE-2025-15281: Fixed uninitialized memory may cause the process abort (bsc#1257005). Other fixes: - NPTL: Optimize trylock for high cache contention workloads (bsc#1256437).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • glibc SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.40.1

    Update to 2.38-150600.14.40.1

  • glibc SUSE:Linux Enterprise Module for Development Tools 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.40.1

    Update to 2.38-150600.14.40.1

  • glibc SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.40.1

    Update to 2.38-150600.14.40.1

  • glibc SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.40.1

    Update to 2.38-150600.14.40.1

  • glibc openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.40.1

    Update to 2.38-150600.14.40.1

Original sources

Check your server →