{"cves":["CVE-2026-5435","CVE-2026-5928","CVE-2026-6238"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[2.39-128.0.1]\n- Forward port Oracle changes to 2.39-128.\n- Reviewed-by: Elena Zannoni elena.zannoni@oracle.com\n  Oracle history:\n  Jul-15-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-126.0.1\n  - Forward port Oracle changes to 2.39-126.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Jul-15-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-124.0.1\n  - Forward port Oracle changes to 2.39-124.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  May-19-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-121.0.1\n  - Forward port Oracle changes to 2.39-121.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  April-2-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-113.0.1\n  - Reverted to version 2.39-113.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  February-3-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-99.0.1\n  - Forward port Oracle changes to 2.39-99.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  January-27-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-58.0.1.7\n  - Forward port Oracle changes to 2.39-58.7.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  November-26-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-58.0.1.2\n  - Forward port Oracle changes to 2.39-58.2.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-29-2025 David Faust david.faust@oracle.com - 2.39-58.0.1\n  - Forward port Oracle changes to 2.39-58.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-29-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-54.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-7-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-46.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: David Faust david.faust@oracle.com\n  July-15-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-43.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  March-5-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-37.0.1\n  - Forward port Oracle changes to 2.39-37.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Jan-22-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-32.0.1\n  - Integration of relevant Oracle patches.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.39-128]\n- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing\n  (RHEL-180652, RHEL-185612)\n\n[2.39-127]\n- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)\n\n[2.39-126]\n- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5\n  (RHEL-174869)\n\n[2.39-125]\n- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)\n\n[2.39-124]\n- Add LD_DEBUG=tls for tracking thread-local storage and TCB management\n  (RHEL-159427)\n\n[2.39-123]\n- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules\n  (RHEL-162885)\n\n[2.39-122]\n- Fix __nss_get_default_domain logic to restore netgroup user enumeration\n  (RHEL-149709)\n\n[2.39-121]\n- Avoid duplicate DNS queries when search path contains '.' (RHEL-142675)\n\n[2.39-120]\n- Sync with upstream branch release/2.39/master (RHEL-151554)\n- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa\n- resolv: Check hostname for validity (CVE-2026-4438)\n- resolv: Count records correctly (CVE-2026-4437)\n- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module","id":"ELSA-2026-500297","ovalId":"oval:com.oracle.elsa:def:2026500297","source":"oracle_linux","title":"ELSA-2026-500297: glibc security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-500297.html"}