openSUSE glibc Important Local Privilege Escalation Update 2026-4656

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

This update for glibc fixes the following issues:

* CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf`

allows an attacker in a local network to trigger a process crash

* CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local

attackers to escalate privileges (bsc#1282509).

* CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution

* CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on

Power8 can lead to a program crash (bsc#1283147).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4656

zypper in -t patch SUSE-2026-4656

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4656

* Development Tools Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4656

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4656

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)

* glibc-locale-base-2.38-150600.14.61.1

* glibc-devel-debuginfo-2.38-150600.14.61.1

* glibc-2.38-150600.14.61.1

* libnsl1-2.38-150600.14.61.1

* glibc-utils-debuginfo-2.38-150600.14.61.1

* glibc-extra-debuginfo-2.38-150600.14.61.1

* glibc-devel-static-2.38-150600.14.61.1

* glibc-extra-2.38-150600.14.61.1

* glibc-profile-2.38-150600.14.61.1

* glibc-debugsource-2.38-150600.14.61.1

* glibc-devel-2.38-150600.14.61.1

* glibc-locale-2.38-150600.14.61.1

* libnsl1-debuginfo-2.38-150600.14.61.1

* nscd-debuginfo-2.38-150600.14.61.1

* glibc-debuginfo-2.38-150600.14.61.1

* glibc-utils-src-debugsource-2.38-150600.14.61.1

* glibc-locale-base-debuginfo-2.38-150600.14.61.1

* glibc-utils-2.38-150600.14.61.1

* nscd-2.38-150600.14.61.1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64)

* glibc-locale-base-32bit-2.38-150600.14.61.1

* glibc-32bit-debuginfo-2.38-150600.14.61.1

* glibc-devel-32bit-debuginfo-2.38-150600.14.61.1

*

*

*

*

*

*

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases