UBUNTU-CVE-2026-77117
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFT_JISX0213 sequences decode to two code points. If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call. The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used. The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489.
UBUNTU-CVE-2026-77117
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-77117
eglibc
Source reference: /affected/0/package/name
- Affected versions
- 2.17-93ubuntu4
Source reference:
/affected/0/versions2.18-0ubuntu1Source reference:
/affected/0/versions2.18-0ubuntu2Source reference:
/affected/0/versions2.18-0ubuntu4Source reference:
/affected/0/versions2.18-0ubuntu5Source reference:
/affected/0/versions2.18-0ubuntu6Source reference:
/affected/0/versions2.18-0ubuntu7Source reference:
/affected/0/versions2.19-0ubuntu2Source reference:
/affected/0/versions2.19-0ubuntu3Source reference:
/affected/0/versions2.19-0ubuntu4Source reference:
/affected/0/versions2.19-0ubuntu5Source reference:
/affected/0/versions2.19-0ubuntu6Source reference:
/affected/0/versions2.19-0ubuntu6.1Source reference:
/affected/0/versions2.19-0ubuntu6.3Source reference:
/affected/0/versions2.19-0ubuntu6.4Source reference:
/affected/0/versions2.19-0ubuntu6.5Source reference:
/affected/0/versions2.19-0ubuntu6.6Source reference:
/affected/0/versions2.19-0ubuntu6.7Source reference:
/affected/0/versions2.19-0ubuntu6.8Source reference:
/affected/0/versions2.19-0ubuntu6.9Source reference:
/affected/0/versions2.19-0ubuntu6.10Source reference:
/affected/0/versions2.19-0ubuntu6.11Source reference:
/affected/0/versions2.19-0ubuntu6.13Source reference:
/affected/0/versions2.19-0ubuntu6.14Source reference:
/affected/0/versions2.19-0ubuntu6.15Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm1Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm2Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm3Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/1/package/name
- Affected versions
- 2.21-0ubuntu4
Source reference:
/affected/1/versions2.21-0ubuntu5Source reference:
/affected/1/versions2.21-0ubuntu6Source reference:
/affected/1/versions2.23-0ubuntu1Source reference:
/affected/1/versions2.23-0ubuntu2Source reference:
/affected/1/versions2.23-0ubuntu3Source reference:
/affected/1/versions2.23-0ubuntu4Source reference:
/affected/1/versions2.23-0ubuntu5Source reference:
/affected/1/versions2.23-0ubuntu6Source reference:
/affected/1/versions2.23-0ubuntu7Source reference:
/affected/1/versions2.23-0ubuntu9Source reference:
/affected/1/versions2.23-0ubuntu10Source reference:
/affected/1/versions2.23-0ubuntu11Source reference:
/affected/1/versions2.23-0ubuntu11.2Source reference:
/affected/1/versions2.23-0ubuntu11.3Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm1Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm2Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm3Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm5Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm6Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm7Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm8Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm9Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/2/package/name
- Affected versions
- 2.26-0ubuntu2
Source reference:
/affected/2/versions2.26-0ubuntu2.1Source reference:
/affected/2/versions2.27-0ubuntu2Source reference:
/affected/2/versions2.27-0ubuntu3Source reference:
/affected/2/versions2.27-3ubuntu1Source reference:
/affected/2/versions2.27-3ubuntu1.2Source reference:
/affected/2/versions2.27-3ubuntu1.3Source reference:
/affected/2/versions2.27-3ubuntu1.4Source reference:
/affected/2/versions2.27-3ubuntu1.5Source reference:
/affected/2/versions2.27-3ubuntu1.6Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm1Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm2Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm3Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm4Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm5Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm6Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/3/package/name
- Affected versions
- 2.30-0ubuntu2
Source reference:
/affected/3/versions2.30-0ubuntu3Source reference:
/affected/3/versions2.31-0ubuntu5Source reference:
/affected/3/versions2.31-0ubuntu6Source reference:
/affected/3/versions2.31-0ubuntu7Source reference:
/affected/3/versions2.31-0ubuntu9Source reference:
/affected/3/versions2.31-0ubuntu9.1Source reference:
/affected/3/versions2.31-0ubuntu9.2Source reference:
/affected/3/versions2.31-0ubuntu9.3Source reference:
/affected/3/versions2.31-0ubuntu9.7Source reference:
/affected/3/versions2.31-0ubuntu9.9Source reference:
/affected/3/versions2.31-0ubuntu9.12Source reference:
/affected/3/versions2.31-0ubuntu9.14Source reference:
/affected/3/versions2.31-0ubuntu9.15Source reference:
/affected/3/versions2.31-0ubuntu9.16Source reference:
/affected/3/versions2.31-0ubuntu9.17Source reference:
/affected/3/versions2.31-0ubuntu9.18Source reference:
/affected/3/versions2.31-0ubuntu9.18+esm1Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/4/package/name
- Affected versions
- 2.34-0ubuntu3
Source reference:
/affected/4/versions2.35-0ubuntu1Source reference:
/affected/4/versions2.35-0ubuntu3Source reference:
/affected/4/versions2.35-0ubuntu3.1Source reference:
/affected/4/versions2.35-0ubuntu3.3Source reference:
/affected/4/versions2.35-0ubuntu3.4Source reference:
/affected/4/versions2.35-0ubuntu3.5Source reference:
/affected/4/versions2.35-0ubuntu3.6Source reference:
/affected/4/versions2.35-0ubuntu3.7Source reference:
/affected/4/versions2.35-0ubuntu3.8Source reference:
/affected/4/versions2.35-0ubuntu3.9Source reference:
/affected/4/versions2.35-0ubuntu3.10Source reference:
/affected/4/versions2.35-0ubuntu3.11Source reference:
/affected/4/versions2.35-0ubuntu3.12Source reference:
/affected/4/versions2.35-0ubuntu3.13Source reference:
/affected/4/versions2.35-0ubuntu3.14Source reference:
/affected/4/versions - Fixed versions
- 2.35-0ubuntu3.15
Source reference:
/affected/4/ranges - Prerequisites
- Not stated in this record
glibc
Source reference: /affected/5/package/name
- Affected versions
- 2.38-1ubuntu6
Source reference:
/affected/5/versions2.38-3ubuntu1Source reference:
/affected/5/versions2.39-0ubuntu1Source reference:
/affected/5/versions2.39-0ubuntu2Source reference:
/affected/5/versions2.39-0ubuntu6Source reference:
/affected/5/versions2.39-0ubuntu8Source reference:
/affected/5/versions2.39-0ubuntu8.1Source reference:
/affected/5/versions2.39-0ubuntu8.2Source reference:
/affected/5/versions2.39-0ubuntu8.3Source reference:
/affected/5/versions2.39-0ubuntu8.4Source reference:
/affected/5/versions2.39-0ubuntu8.5Source reference:
/affected/5/versions2.39-0ubuntu8.6Source reference:
/affected/5/versions2.39-0ubuntu8.7Source reference:
/affected/5/versions2.39-0ubuntu8.8Source reference:
/affected/5/versions - Fixed versions
- 2.39-0ubuntu8.9
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
glibc
Source reference: /affected/6/package/name
- Affected versions
- 2.42-0ubuntu3
Source reference:
/affected/6/versions2.42-2ubuntu1Source reference:
/affected/6/versions2.42-2ubuntu2Source reference:
/affected/6/versions2.42-2ubuntu4Source reference:
/affected/6/versions2.42-2ubuntu5Source reference:
/affected/6/versions2.43-2ubuntu1Source reference:
/affected/6/versions2.43-2ubuntu2Source reference:
/affected/6/versions2.43-2ubuntu2.3Source reference:
/affected/6/versions - Fixed versions
- 2.43-2ubuntu2.4
Source reference:
/affected/6/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "eglibc",
"purl": "pkg:deb/ubuntu/eglibc?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"2.17-93ubuntu4",
"2.18-0ubuntu1",
"2.18-0ubuntu2",
"2.18-0ubuntu4",
"2.18-0ubuntu5",
"2.18-0ubuntu6",
"2.18-0ubuntu7",
"2.19-0ubuntu2",
"2.19-0ubuntu3",
"2.19-0ubuntu4",
"2.19-0ubuntu5",
"2.19-0ubuntu6",
"2.19-0ubuntu6.1",
"2.19-0ubuntu6.3",
"2.19-0ubuntu6.4",
"2.19-0ubuntu6.5",
"2.19-0ubuntu6.6",
"2.19-0ubuntu6.7",
"2.19-0ubuntu6.8",
"2.19-0ubuntu6.9",
"2.19-0ubuntu6.10",
"2.19-0ubuntu6.11",
"2.19-0ubuntu6.13",
"2.19-0ubuntu6.14",
"2.19-0ubuntu6.15",
"2.19-0ubuntu6.15+esm1",
"2.19-0ubuntu6.15+esm2",
"2.19-0ubuntu6.15+esm3",
"2.19-0ubuntu6.15+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "eglibc-source",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc-bin",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "nscd",
"binary_version": "2.19-0ubuntu6.15+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"2.21-0ubuntu4",
"2.21-0ubuntu5",
"2.21-0ubuntu6",
"2.23-0ubuntu1",
"2.23-0ubuntu2",
"2.23-0ubuntu3",
"2.23-0ubuntu4",
"2.23-0ubuntu5",
"2.23-0ubuntu6",
"2.23-0ubuntu7",
"2.23-0ubuntu9",
"2.23-0ubuntu10",
"2.23-0ubuntu11",
"2.23-0ubuntu11.2",
"2.23-0ubuntu11.3",
"2.23-0ubuntu11.3+esm1",
"2.23-0ubuntu11.3+esm2",
"2.23-0ubuntu11.3+esm3",
"2.23-0ubuntu11.3+esm5",
"2.23-0ubuntu11.3+esm6",
"2.23-0ubuntu11.3+esm7",
"2.23-0ubuntu11.3+esm8",
"2.23-0ubuntu11.3+esm9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc-bin",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "locales",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "locales-all",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "nscd",
"binary_version": "2.23-0ubuntu11.3+esm9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.26-0ubuntu2",
"2.26-0ubuntu2.1",
"2.27-0ubuntu2",
"2.27-0ubuntu3",
"2.27-3ubuntu1",
"2.27-3ubuntu1.2",
"2.27-3ubuntu1.3",
"2.27-3ubuntu1.4",
"2.27-3ubuntu1.5",
"2.27-3ubuntu1.6",
"2.27-3ubuntu1.6+esm1",
"2.27-3ubuntu1.6+esm2",
"2.27-3ubuntu1.6+esm3",
"2.27-3ubuntu1.6+esm4",
"2.27-3ubuntu1.6+esm5",
"2.27-3ubuntu1.6+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc-bin",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-lse",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "locales",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "locales-all",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "nscd",
"binary_version": "2.27-3ubuntu1.6+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.30-0ubuntu2",
"2.30-0ubuntu3",
"2.31-0ubuntu5",
"2.31-0ubuntu6",
"2.31-0ubuntu7",
"2.31-0ubuntu9",
"2.31-0ubuntu9.1",
"2.31-0ubuntu9.2",
"2.31-0ubuntu9.3",
"2.31-0ubuntu9.7",
"2.31-0ubuntu9.9",
"2.31-0ubuntu9.12",
"2.31-0ubuntu9.14",
"2.31-0ubuntu9.15",
"2.31-0ubuntu9.16",
"2.31-0ubuntu9.17",
"2.31-0ubuntu9.18",
"2.31-0ubuntu9.18+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc-bin",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-lse",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "locales",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "locales-all",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "nscd",
"binary_version": "2.31-0ubuntu9.18+esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.35-0ubuntu3.15"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.34-0ubuntu3",
"2.35-0ubuntu1",
"2.35-0ubuntu3",
"2.35-0ubuntu3.1",
"2.35-0ubuntu3.3",
"2.35-0ubuntu3.4",
"2.35-0ubuntu3.5",
"2.35-0ubuntu3.6",
"2.35-0ubuntu3.7",
"2.35-0ubuntu3.8",
"2.35-0ubuntu3.9",
"2.35-0ubuntu3.10",
"2.35-0ubuntu3.11",
"2.35-0ubuntu3.12",
"2.35-0ubuntu3.13",
"2.35-0ubuntu3.14"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-bin",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "locales",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "locales-all",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "nscd",
"binary_version": "2.35-0ubuntu3.15"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.39-0ubuntu8.9"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.38-1ubuntu6",
"2.38-3ubuntu1",
"2.39-0ubuntu1",
"2.39-0ubuntu2",
"2.39-0ubuntu6",
"2.39-0ubuntu8",
"2.39-0ubuntu8.1",
"2.39-0ubuntu8.2",
"2.39-0ubuntu8.3",
"2.39-0ubuntu8.4",
"2.39-0ubuntu8.5",
"2.39-0ubuntu8.6",
"2.39-0ubuntu8.7",
"2.39-0ubuntu8.8"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-bin",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "locales",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "locales-all",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "nscd",
"binary_version": "2.39-0ubuntu8.9"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.43-2ubuntu2.4"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.42-0ubuntu3",
"2.42-2ubuntu1",
"2.42-2ubuntu2",
"2.42-2ubuntu4",
"2.42-2ubuntu5",
"2.43-2ubuntu1",
"2.43-2ubuntu2",
"2.43-2ubuntu2.3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-77117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-bin",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-gconv-modules-extra",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "locales",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "locales-all",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "nscd",
"binary_version": "2.43-2ubuntu2.4"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #5812 · Revision 1
- Added to Heist Feed
- Publisher date