[CLSA-2026:1794006114] Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-06 23:02:08 UTC
Description:
* SECURITY UPDATE: gettext loads message catalogs from arbitrary paths via LANGUAGE directory traversal - debian/patches/CVE-2026-84243.patch: gettext loads message catalogs from arbitrary paths via LANGUAGE directory traversal - CVE-2026-84243 * SECURITY UPDATE: ld.so opens unnormalized $ORIGIN rpath in AT_SECURE programs - debian/patches/CVE-2026-95818-CVE-2026-86805.patch: open the normalized $ORIGIN path - CVE-2026-95818 - CVE-2026-86805 * SECURITY UPDATE: nscd stack overflow via alloca in aicache and hstcache - debian/patches/CVE-2026-89092.patch: use malloc instead of alloca - CVE-2026-89092 * SECURITY UPDATE: resolver assertion failure on search list truncation - debian/patches/CVE-2026-8674.patch: fix truncation check in resolv_conf_matches - CVE-2026-8674
CVEs fixed:
Updated packages:
  • glibc-doc_2.31-13+deb11u14+tuxcare.els2_all.deb
    sha:34d5f7b3104bd263ac76a07cd21e5fce0fd682f4
  • glibc-source_2.31-13+deb11u14+tuxcare.els2_all.deb
    sha:751f43e954c419fbab1385fc97f70135d988b9ba
  • libc-bin_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:1df5fe714edd58b125a421a4d81b94e0a8ea8e45
  • libc-dev-bin_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:d3fe8f14e89ca20179726f80308ce5c4ba59d805
  • libc-devtools_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:f8a4e090b4574a82b797b6f2a21d849b45cdbd7c
  • libc-l10n_2.31-13+deb11u14+tuxcare.els2_all.deb
    sha:c9a8e427082ccf90a90477d37acf3a146cbf1226
  • libc6_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:233b641009c28ba1e941975dbf1263e8f6d07733
  • libc6-dev_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:5763249bd55c2d7dc5652e33e5e4c62cad955c13
  • libc6-dev-i386_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:2e2bc4bd2e86fad1385d5c46d6198d125040d730
  • libc6-dev-x32_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:896a64c15e6be96fb8706a0331045cafc0fd8c7f
  • libc6-i386_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:cfed65f4bd4ba9a7581302c6493f0c7419e55513
  • libc6-x32_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:16339286fb803b56998b1b822b0059dc3468fc4a
  • locales_2.31-13+deb11u14+tuxcare.els2_all.deb
    sha:0ead87c7301986ab51e01238e4fcc97ba6a96f17
  • locales-all_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:e662df2a9eb2a9c6ce3a8e7e8c6ba8094f2d0e77
  • nscd_2.31-13+deb11u14+tuxcare.els2_amd64.deb
    sha:d499cb0d61e37c0a827d64726c8695c9a8ced609
  • libc-bin_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:f1b9b79a9641dc7dc01dcc4697afd996779edb9c
  • libc-dev-bin_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:81dbca8869759c33f5b129421c68e57280ad9146
  • libc-devtools_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:e3022100e17b1d5429f60b47154eb70a5ac79af6
  • libc6_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:11fea2b1fa63e04d51dcd662e935aadfe4956345
  • libc6-dev_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:ad3fbe60fecbdae862e339472e87fe7908b5bef3
  • locales-all_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:d9820f016cf01d6c7620db1f5b81f7403713df26
  • nscd_2.31-13+deb11u14+tuxcare.els2_arm64.deb
    sha:316500c42398f8430f8cb4a22f478c239aa7bbc9
  • libc-bin_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:1ee7c1af21f806f3671887cea6834e0921e7b7ba
  • libc-dev-bin_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:3c005d2e87e7850bef32418d8c94bed343d8dd35
  • libc-devtools_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:0a1545ebe33002dd2cbcd103f349d4cad478cdb3
  • libc6_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:c6923d63079f2620402ff1f72fe5a650a9abc0d6
  • libc6-dev_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:736a8be2316d24d7b12590ababee17f6c6324ccc
  • locales-all_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:9c57fd6ce78da29453e35fae61d380e1123b9913
  • nscd_2.31-13+deb11u14+tuxcare.els2_armel.deb
    sha:8f6d26b26ab39df23cbedefdd4400066e30a5c62
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.