Skip to content
Heist/ feed
Unrated

UBUNTU-CVE-2026-97399

Type: advisorySource: OSV1 source record

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

Announced Source revision 1
Original source ↗

UBUNTU-CVE-2026-97399

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:UBUNTU-CVE-2026-97399

eglibc

Source reference: /affected/0/package/name

Affected versions
2.17-93ubuntu4

Source reference: /affected/0/versions

2.18-0ubuntu1

Source reference: /affected/0/versions

2.18-0ubuntu2

Source reference: /affected/0/versions

2.18-0ubuntu4

Source reference: /affected/0/versions

2.18-0ubuntu5

Source reference: /affected/0/versions

2.18-0ubuntu6

Source reference: /affected/0/versions

2.18-0ubuntu7

Source reference: /affected/0/versions

2.19-0ubuntu2

Source reference: /affected/0/versions

2.19-0ubuntu3

Source reference: /affected/0/versions

2.19-0ubuntu4

Source reference: /affected/0/versions

2.19-0ubuntu5

Source reference: /affected/0/versions

2.19-0ubuntu6

Source reference: /affected/0/versions

2.19-0ubuntu6.1

Source reference: /affected/0/versions

2.19-0ubuntu6.3

Source reference: /affected/0/versions

2.19-0ubuntu6.4

Source reference: /affected/0/versions

2.19-0ubuntu6.5

Source reference: /affected/0/versions

2.19-0ubuntu6.6

Source reference: /affected/0/versions

2.19-0ubuntu6.7

Source reference: /affected/0/versions

2.19-0ubuntu6.8

Source reference: /affected/0/versions

2.19-0ubuntu6.9

Source reference: /affected/0/versions

2.19-0ubuntu6.10

Source reference: /affected/0/versions

2.19-0ubuntu6.11

Source reference: /affected/0/versions

2.19-0ubuntu6.13

Source reference: /affected/0/versions

2.19-0ubuntu6.14

Source reference: /affected/0/versions

2.19-0ubuntu6.15

Source reference: /affected/0/versions

2.19-0ubuntu6.15+esm1

Source reference: /affected/0/versions

2.19-0ubuntu6.15+esm2

Source reference: /affected/0/versions

2.19-0ubuntu6.15+esm3

Source reference: /affected/0/versions

2.19-0ubuntu6.15+esm4

Source reference: /affected/0/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

glibc

Source reference: /affected/1/package/name

Affected versions
2.21-0ubuntu4

Source reference: /affected/1/versions

2.21-0ubuntu5

Source reference: /affected/1/versions

2.21-0ubuntu6

Source reference: /affected/1/versions

2.23-0ubuntu1

Source reference: /affected/1/versions

2.23-0ubuntu2

Source reference: /affected/1/versions

2.23-0ubuntu3

Source reference: /affected/1/versions

2.23-0ubuntu4

Source reference: /affected/1/versions

2.23-0ubuntu5

Source reference: /affected/1/versions

2.23-0ubuntu6

Source reference: /affected/1/versions

2.23-0ubuntu7

Source reference: /affected/1/versions

2.23-0ubuntu9

Source reference: /affected/1/versions

2.23-0ubuntu10

Source reference: /affected/1/versions

2.23-0ubuntu11

Source reference: /affected/1/versions

2.23-0ubuntu11.2

Source reference: /affected/1/versions

2.23-0ubuntu11.3

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm1

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm2

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm3

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm5

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm6

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm7

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm8

Source reference: /affected/1/versions

2.23-0ubuntu11.3+esm9

Source reference: /affected/1/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

glibc

Source reference: /affected/2/package/name

Affected versions
2.26-0ubuntu2

Source reference: /affected/2/versions

2.26-0ubuntu2.1

Source reference: /affected/2/versions

2.27-0ubuntu2

Source reference: /affected/2/versions

2.27-0ubuntu3

Source reference: /affected/2/versions

2.27-3ubuntu1

Source reference: /affected/2/versions

2.27-3ubuntu1.2

Source reference: /affected/2/versions

2.27-3ubuntu1.3

Source reference: /affected/2/versions

2.27-3ubuntu1.4

Source reference: /affected/2/versions

2.27-3ubuntu1.5

Source reference: /affected/2/versions

2.27-3ubuntu1.6

Source reference: /affected/2/versions

2.27-3ubuntu1.6+esm1

Source reference: /affected/2/versions

2.27-3ubuntu1.6+esm2

Source reference: /affected/2/versions

2.27-3ubuntu1.6+esm3

Source reference: /affected/2/versions

2.27-3ubuntu1.6+esm4

Source reference: /affected/2/versions

2.27-3ubuntu1.6+esm5

Source reference: /affected/2/versions

2.27-3ubuntu1.6+esm6

Source reference: /affected/2/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

glibc

Source reference: /affected/3/package/name

Affected versions
2.30-0ubuntu2

Source reference: /affected/3/versions

2.30-0ubuntu3

Source reference: /affected/3/versions

2.31-0ubuntu5

Source reference: /affected/3/versions

2.31-0ubuntu6

Source reference: /affected/3/versions

2.31-0ubuntu7

Source reference: /affected/3/versions

2.31-0ubuntu9

Source reference: /affected/3/versions

2.31-0ubuntu9.1

Source reference: /affected/3/versions

2.31-0ubuntu9.2

Source reference: /affected/3/versions

2.31-0ubuntu9.3

Source reference: /affected/3/versions

2.31-0ubuntu9.7

Source reference: /affected/3/versions

2.31-0ubuntu9.9

Source reference: /affected/3/versions

2.31-0ubuntu9.12

Source reference: /affected/3/versions

2.31-0ubuntu9.14

Source reference: /affected/3/versions

2.31-0ubuntu9.15

Source reference: /affected/3/versions

2.31-0ubuntu9.16

Source reference: /affected/3/versions

2.31-0ubuntu9.17

Source reference: /affected/3/versions

2.31-0ubuntu9.18

Source reference: /affected/3/versions

2.31-0ubuntu9.18+esm1

Source reference: /affected/3/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

glibc

Source reference: /affected/4/package/name

Affected versions
2.34-0ubuntu3

Source reference: /affected/4/versions

2.35-0ubuntu1

Source reference: /affected/4/versions

2.35-0ubuntu3

Source reference: /affected/4/versions

2.35-0ubuntu3.1

Source reference: /affected/4/versions

2.35-0ubuntu3.3

Source reference: /affected/4/versions

2.35-0ubuntu3.4

Source reference: /affected/4/versions

2.35-0ubuntu3.5

Source reference: /affected/4/versions

2.35-0ubuntu3.6

Source reference: /affected/4/versions

2.35-0ubuntu3.7

Source reference: /affected/4/versions

2.35-0ubuntu3.8

Source reference: /affected/4/versions

2.35-0ubuntu3.9

Source reference: /affected/4/versions

2.35-0ubuntu3.10

Source reference: /affected/4/versions

2.35-0ubuntu3.11

Source reference: /affected/4/versions

2.35-0ubuntu3.12

Source reference: /affected/4/versions

2.35-0ubuntu3.13

Source reference: /affected/4/versions

2.35-0ubuntu3.14

Source reference: /affected/4/versions

2.35-0ubuntu3.15

Source reference: /affected/4/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

glibc

Source reference: /affected/5/package/name

Affected versions
2.38-1ubuntu6

Source reference: /affected/5/versions

2.38-3ubuntu1

Source reference: /affected/5/versions

2.39-0ubuntu1

Source reference: /affected/5/versions

2.39-0ubuntu2

Source reference: /affected/5/versions

2.39-0ubuntu6

Source reference: /affected/5/versions

2.39-0ubuntu8

Source reference: /affected/5/versions

2.39-0ubuntu8.1

Source reference: /affected/5/versions

2.39-0ubuntu8.2

Source reference: /affected/5/versions

2.39-0ubuntu8.3

Source reference: /affected/5/versions

2.39-0ubuntu8.4

Source reference: /affected/5/versions

2.39-0ubuntu8.5

Source reference: /affected/5/versions

2.39-0ubuntu8.6

Source reference: /affected/5/versions

2.39-0ubuntu8.7

Source reference: /affected/5/versions

2.39-0ubuntu8.8

Source reference: /affected/5/versions

2.39-0ubuntu8.9

Source reference: /affected/5/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

glibc

Source reference: /affected/6/package/name

Affected versions
2.42-0ubuntu3

Source reference: /affected/6/versions

2.42-2ubuntu1

Source reference: /affected/6/versions

2.42-2ubuntu2

Source reference: /affected/6/versions

2.42-2ubuntu4

Source reference: /affected/6/versions

2.42-2ubuntu5

Source reference: /affected/6/versions

2.43-2ubuntu1

Source reference: /affected/6/versions

2.43-2ubuntu2

Source reference: /affected/6/versions

2.43-2ubuntu2.3

Source reference: /affected/6/versions

2.43-2ubuntu2.4

Source reference: /affected/6/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "eglibc",
      "purl": "pkg:deb/ubuntu/eglibc?arch=source&distro=esm-infra-legacy%2Ftrusty",
      "ecosystem": "Ubuntu:Pro:14.04:LTS"
    },
    "versions": [
      "2.17-93ubuntu4",
      "2.18-0ubuntu1",
      "2.18-0ubuntu2",
      "2.18-0ubuntu4",
      "2.18-0ubuntu5",
      "2.18-0ubuntu6",
      "2.18-0ubuntu7",
      "2.19-0ubuntu2",
      "2.19-0ubuntu3",
      "2.19-0ubuntu4",
      "2.19-0ubuntu5",
      "2.19-0ubuntu6",
      "2.19-0ubuntu6.1",
      "2.19-0ubuntu6.3",
      "2.19-0ubuntu6.4",
      "2.19-0ubuntu6.5",
      "2.19-0ubuntu6.6",
      "2.19-0ubuntu6.7",
      "2.19-0ubuntu6.8",
      "2.19-0ubuntu6.9",
      "2.19-0ubuntu6.10",
      "2.19-0ubuntu6.11",
      "2.19-0ubuntu6.13",
      "2.19-0ubuntu6.14",
      "2.19-0ubuntu6.15",
      "2.19-0ubuntu6.15+esm1",
      "2.19-0ubuntu6.15+esm2",
      "2.19-0ubuntu6.15+esm3",
      "2.19-0ubuntu6.15+esm4"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "eglibc-source",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-armel",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-dev-armel",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-pic",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-prof",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "multiarch-support",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.19-0ubuntu6.15+esm4"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "glibc",
      "purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fxenial",
      "ecosystem": "Ubuntu:Pro:16.04:LTS"
    },
    "versions": [
      "2.21-0ubuntu4",
      "2.21-0ubuntu5",
      "2.21-0ubuntu6",
      "2.23-0ubuntu1",
      "2.23-0ubuntu2",
      "2.23-0ubuntu3",
      "2.23-0ubuntu4",
      "2.23-0ubuntu5",
      "2.23-0ubuntu6",
      "2.23-0ubuntu7",
      "2.23-0ubuntu9",
      "2.23-0ubuntu10",
      "2.23-0ubuntu11",
      "2.23-0ubuntu11.2",
      "2.23-0ubuntu11.3",
      "2.23-0ubuntu11.3+esm1",
      "2.23-0ubuntu11.3+esm2",
      "2.23-0ubuntu11.3+esm3",
      "2.23-0ubuntu11.3+esm5",
      "2.23-0ubuntu11.3+esm6",
      "2.23-0ubuntu11.3+esm7",
      "2.23-0ubuntu11.3+esm8",
      "2.23-0ubuntu11.3+esm9"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "glibc-source",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-armel",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-dev-armel",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-dev-s390",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-pic",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-s390",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "locales",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "locales-all",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "multiarch-support",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.23-0ubuntu11.3+esm9"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "glibc",
      "purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fbionic",
      "ecosystem": "Ubuntu:Pro:18.04:LTS"
    },
    "versions": [
      "2.26-0ubuntu2",
      "2.26-0ubuntu2.1",
      "2.27-0ubuntu2",
      "2.27-0ubuntu3",
      "2.27-3ubuntu1",
      "2.27-3ubuntu1.2",
      "2.27-3ubuntu1.3",
      "2.27-3ubuntu1.4",
      "2.27-3ubuntu1.5",
      "2.27-3ubuntu1.6",
      "2.27-3ubuntu1.6+esm1",
      "2.27-3ubuntu1.6+esm2",
      "2.27-3ubuntu1.6+esm3",
      "2.27-3ubuntu1.6+esm4",
      "2.27-3ubuntu1.6+esm5",
      "2.27-3ubuntu1.6+esm6"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "glibc-source",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-armel",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-dev-armel",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-dev-s390",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-lse",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-pic",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-s390",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "locales",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "locales-all",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "multiarch-support",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.27-3ubuntu1.6+esm6"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "glibc",
      "purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Ffocal",
      "ecosystem": "Ubuntu:Pro:20.04:LTS"
    },
    "versions": [
      "2.30-0ubuntu2",
      "2.30-0ubuntu3",
      "2.31-0ubuntu5",
      "2.31-0ubuntu6",
      "2.31-0ubuntu7",
      "2.31-0ubuntu9",
      "2.31-0ubuntu9.1",
      "2.31-0ubuntu9.2",
      "2.31-0ubuntu9.3",
      "2.31-0ubuntu9.7",
      "2.31-0ubuntu9.9",
      "2.31-0ubuntu9.12",
      "2.31-0ubuntu9.14",
      "2.31-0ubuntu9.15",
      "2.31-0ubuntu9.16",
      "2.31-0ubuntu9.17",
      "2.31-0ubuntu9.18",
      "2.31-0ubuntu9.18+esm1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "glibc-source",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-armel",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-dev-armel",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-dev-s390",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-lse",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-pic",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-prof",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-s390",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "locales",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "locales-all",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.31-0ubuntu9.18+esm1"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "glibc",
      "purl": "pkg:deb/ubuntu/glibc?arch=source&distro=jammy",
      "ecosystem": "Ubuntu:22.04:LTS"
    },
    "versions": [
      "2.34-0ubuntu3",
      "2.35-0ubuntu1",
      "2.35-0ubuntu3",
      "2.35-0ubuntu3.1",
      "2.35-0ubuntu3.3",
      "2.35-0ubuntu3.4",
      "2.35-0ubuntu3.5",
      "2.35-0ubuntu3.6",
      "2.35-0ubuntu3.7",
      "2.35-0ubuntu3.8",
      "2.35-0ubuntu3.9",
      "2.35-0ubuntu3.10",
      "2.35-0ubuntu3.11",
      "2.35-0ubuntu3.12",
      "2.35-0ubuntu3.13",
      "2.35-0ubuntu3.14",
      "2.35-0ubuntu3.15"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "glibc-source",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc-devtools",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-dev-s390",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-prof",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-s390",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "locales",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "locales-all",
          "binary_version": "2.35-0ubuntu3.15"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.35-0ubuntu3.15"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "glibc",
      "purl": "pkg:deb/ubuntu/glibc?arch=source&distro=noble",
      "ecosystem": "Ubuntu:24.04:LTS"
    },
    "versions": [
      "2.38-1ubuntu6",
      "2.38-3ubuntu1",
      "2.39-0ubuntu1",
      "2.39-0ubuntu2",
      "2.39-0ubuntu6",
      "2.39-0ubuntu8",
      "2.39-0ubuntu8.1",
      "2.39-0ubuntu8.2",
      "2.39-0ubuntu8.3",
      "2.39-0ubuntu8.4",
      "2.39-0ubuntu8.5",
      "2.39-0ubuntu8.6",
      "2.39-0ubuntu8.7",
      "2.39-0ubuntu8.8",
      "2.39-0ubuntu8.9"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "glibc-source",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc-devtools",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-dev-s390",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-s390",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "locales",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "locales-all",
          "binary_version": "2.39-0ubuntu8.9"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.39-0ubuntu8.9"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "glibc",
      "purl": "pkg:deb/ubuntu/glibc?arch=source&distro=resolute",
      "ecosystem": "Ubuntu:26.04:LTS"
    },
    "versions": [
      "2.42-0ubuntu3",
      "2.42-2ubuntu1",
      "2.42-2ubuntu2",
      "2.42-2ubuntu4",
      "2.42-2ubuntu5",
      "2.43-2ubuntu1",
      "2.43-2ubuntu2",
      "2.43-2ubuntu2.3",
      "2.43-2ubuntu2.4"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-97399.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "glibc-source",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc-bin",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc-dev-bin",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc-devtools",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc-gconv-modules-extra",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6-amd64",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6-dev-amd64",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6-dev-i386",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6-dev-x32",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6-i386",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "libc6-x32",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "locales",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "locales-all",
          "binary_version": "2.43-2ubuntu2.4"
        },
        {
          "binary_name": "nscd",
          "binary_version": "2.43-2ubuntu2.4"
        }
      ]
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#63802 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement