An update for glibc is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-2412 Final 1.0 1.0 2026-05-22 Initial 2026-05-22 2026-05-22 openEuler SA Tool V1.0 2026-05-22 glibc security update An update for glibc is now available for openEuler-24.03-LTS-SP3 The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es): Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.(CVE-2026-5450) Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.(CVE-2026-5928) An update for glibc is now available for openEuler-24.03-LTS-SP3. openEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Critical glibc https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2412 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-5450 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 openEuler-24.03-LTS-SP3 glibc-2.38-105.oe2403sp3.aarch64.rpm glibc-all-langpacks-2.38-105.oe2403sp3.aarch64.rpm glibc-common-2.38-105.oe2403sp3.aarch64.rpm glibc-debuginfo-2.38-105.oe2403sp3.aarch64.rpm glibc-debugsource-2.38-105.oe2403sp3.aarch64.rpm glibc-debugutils-2.38-105.oe2403sp3.aarch64.rpm glibc-devel-2.38-105.oe2403sp3.aarch64.rpm glibc-locale-archive-2.38-105.oe2403sp3.aarch64.rpm glibc-locale-source-2.38-105.oe2403sp3.aarch64.rpm glibc-nss-devel-2.38-105.oe2403sp3.aarch64.rpm libnsl-2.38-105.oe2403sp3.aarch64.rpm nscd-2.38-105.oe2403sp3.aarch64.rpm nss_modules-2.38-105.oe2403sp3.aarch64.rpm glibc-2.38-105.oe2403sp3.src.rpm glibc-2.38-105.oe2403sp3.x86_64.rpm glibc-all-langpacks-2.38-105.oe2403sp3.x86_64.rpm glibc-common-2.38-105.oe2403sp3.x86_64.rpm glibc-debuginfo-2.38-105.oe2403sp3.x86_64.rpm glibc-debugsource-2.38-105.oe2403sp3.x86_64.rpm glibc-debugutils-2.38-105.oe2403sp3.x86_64.rpm glibc-devel-2.38-105.oe2403sp3.x86_64.rpm glibc-locale-archive-2.38-105.oe2403sp3.x86_64.rpm glibc-locale-source-2.38-105.oe2403sp3.x86_64.rpm glibc-nss-devel-2.38-105.oe2403sp3.x86_64.rpm libnsl-2.38-105.oe2403sp3.x86_64.rpm nscd-2.38-105.oe2403sp3.x86_64.rpm nss_modules-2.38-105.oe2403sp3.x86_64.rpm glibc-help-2.38-105.oe2403sp3.noarch.rpm Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow. 2026-05-22 CVE-2026-5450 openEuler-24.03-LTS-SP3 Critical 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H glibc security update 2026-05-22 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2412 Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets. 2026-05-22 CVE-2026-5928 openEuler-24.03-LTS-SP3 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H glibc security update 2026-05-22 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2412