{"cves":["CVE-2026-0861","CVE-2026-0915"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[2.39-58.0.1.7]\n- Forward port Oracle changes to 2.39-58.7.\n- Reviewed-by: David Faust david.faust@oracle.com\n  Oracle history:\n  November-26-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-58.0.1.2\n  - Forward port Oracle changes to 2.39-58.2.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-29-2025 David Faust david.faust@oracle.com - 2.39-58.0.1\n  - Forward port Oracle changes to 2.39-58.\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-29-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-54.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-7-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-46.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: David Faust david.faust@oracle.com\n  July-15-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-43.0.1\n  - Forward port Oracle changes.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  March-5-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-37.0.1\n  - Forward port Oracle changes to 2.39-37.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Jan-22-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.39-32.0.1\n  - Integration of relevant Oracle patches.\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.39-58.7]\n- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142197)\n\n[2.39-58.6]\n- CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141848)\n\n[2.39-58.5]\n- patch-git: Avoid trailing tabs in changelog (RHEL-141922)\n\n[2.39-58.4]\n- CVE-2026-0861: Check for alignment overflow in memalign functions\n  (RHEL-141732)\n\n[2.39-58.3]\n- patch-git: Add auto-generated/ prefix to Source: files (RHEL-126052)\n\n[2.39-58.2]\n- patch-git: Import from rhel-10-main and turn on (RHEL-117053)\n\n[2.39-58.2]\n- x86-64: Unconditionally run elf/check-dt-x86-64-plt ABI test (RHEL-113196)\n\n[2.39-58.1]\n- nss: Fix incorrect/empty results when merging groups (RHEL-114264)\n\n[2.39-58]\n- Use Requires(pre): libgcc(x86-64) to break libgcc cycle (RHEL-110559)","id":"ELSA-2026-50078","ovalId":"oval:com.oracle.elsa:def:202650078","source":"oracle_linux","title":"ELSA-2026-50078: glibc security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-50078.html"}