{
  "cves": [
    "CVE-2026-0861",
    "CVE-2026-0915"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[2.39-58.0.1.7]\n- Forward port Oracle changes to 2.39-58.7.\n- Reviewed-by: David Faust david.faust@oracle.com\n  Oracle history:\n  November-26-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-58.0.1.2\n  - Forward port Oracle changes to 2.39-58.2.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-29-2025 David Faust david.faust@oracle.com - 2.39-58.0.1\n  - Forward port Oracle changes to 2.39-58.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-29-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-54.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-7-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-46.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: David Faust david.faust@oracle.com\n  July-15-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-43.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  March-5-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-37.0.1\n  - Forward port Oracle changes to 2.39-37.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Jan-22-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-32.0.1\n  - Integration of relevant Oracle patches.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.39-58.7]\n- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142197)\n\n[2.39-58.6]\n- CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141848)\n\n[2.39-58.5]\n- patch-git: Avoid trailing tabs in changelog (RHEL-141922)\n\n[2.39-58.4]\n- CVE-2026-0861: Check for alignment overflow in memalign functions\n  (RHEL-141732)\n\n[2.39-58.3]\n- patch-git: Add auto-generated/ prefix to Source: files (RHEL-126052)\n\n[2.39-58.2]\n- patch-git: Import from rhel-10-main and turn on (RHEL-117053)\n\n[2.39-58.2]\n- x86-64: Unconditionally run elf/check-dt-x86-64-plt ABI test (RHEL-113196)\n\n[2.39-58.1]\n- nss: Fix incorrect/empty results when merging groups (RHEL-114264)",
  "id": "ELSA-2026-1334",
  "ovalId": "oval:com.oracle.elsa:def:20261334",
  "source": "oracle_linux",
  "title": "ELSA-2026-1334:  glibc security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-1334.html"
}