{"cves":["CVE-2026-5450"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[2.39-126.0.1]\n- Forward port Oracle changes to 2.39-126.\n- Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Oracle history:\n  Jul-15-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-124.0.1\n  - Forward port Oracle changes to 2.39-124.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  May-19-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-121.0.1\n  - Forward port Oracle changes to 2.39-121.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  April-2-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-113.0.1\n  - Reverted to version 2.39-113.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  February-3-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-99.0.1\n  - Forward port Oracle changes to 2.39-99.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  January-27-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-58.0.1.7\n  - Forward port Oracle changes to 2.39-58.7.\n  - Reviewed-by: David Faust david.faust@oracle.com\n  November-26-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-58.0.1.2\n  - Forward port Oracle changes to 2.39-58.2.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-29-2025 David Faust david.faust@oracle.com - 2.39-58.0.1\n  - Forward port Oracle changes to 2.39-58.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-29-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-54.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-7-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-46.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: David Faust david.faust@oracle.com\n  July-15-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-43.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  March-5-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-37.0.1\n  - Forward port Oracle changes to 2.39-37.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Jan-22-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-32.0.1\n  - Integration of relevant Oracle patches.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.39-126]\n- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5\n  (RHEL-174869)\n\n[2.39-125]\n- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)\n\n[2.39-124]\n- Add LD_DEBUG=tls for tracking thread-local storage and TCB management\n  (RHEL-159427)\n\n[2.39-123]\n- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules\n  (RHEL-162885)\n\n[2.39-122]\n- Fix __nss_get_default_domain logic to restore netgroup user enumeration\n  (RHEL-149709)","id":"ELSA-2026-33092","ovalId":"oval:com.oracle.elsa:def:202633092","source":"oracle_linux","title":"ELSA-2026-33092:  glibc security, bug fix, and enhancement update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-33092.html"}