p PatchFirst

SUSE-SU-2026:1369-1

SUSE-SU-2026:1369-1 · Security update for glibc

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for glibc fixes the following issues: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • glibc SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.46.1

    Update to 2.38-150600.14.46.1

  • glibc SUSE:Linux Enterprise Module for Development Tools 15 SP7

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.46.1

    Update to 2.38-150600.14.46.1

  • glibc SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.46.1

    Update to 2.38-150600.14.46.1

  • glibc SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.46.1

    Update to 2.38-150600.14.46.1

  • glibc openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.38-150600.14.46.1

    Update to 2.38-150600.14.46.1

Original sources

Check your server →