elsa-2026-50370

{
  "cves": [
    "CVE-2026-5450"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[2.34-272.0.1]\n- Forward-port Oracle patches for ol9-u8\n  Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  Reviewed-by: David Faust david.faust@oracle.com\n  Oracle history:\n  June-5-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-270.0.1\n  - Forward-port Oracle patches for ol9-u8\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  May-20-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-266.0.1\n  - Forward-port Oracle patches for ol9-u8\n    Reviewed-by: David Faust david.faust@oracle.com\n  March-25-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-262.0.1\n  - Forward-port Oracle patches for ol9-u8\n    Reviewed-by: David Faust david.faust@oracle.com\n  March-6-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-256.0.1\n  - Forward-port Oracle patches for ol9-u8\n    Reviewed-by: David Faust david.faust@oracle.com\n  February-3-2026 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-245.0.1\n  - Forward-port Oracle patches for ol9-u8\n    Reviewed-by: David Faust david.faust@oracle.com\n  November-14-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-231.0.1.1\n  - Forward-port Oracle patches for ol9-u7\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-24-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-231.0.1\n  - Forward-port Oracle patches for ol9-u7\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-8-2025 Jose E. Marchesi jose.marchesi@oracle.com - 2.34-228.0.1\n  - Forward-port Oracle patches for ol9-u7\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-5-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-217.0.1\n  - Forward-port Oralce patches for ol9-u7\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  August-5-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-168.0.1.23\n  - Forward-port Oracle patches for ol9-u6\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  June-30-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-168.0.1.20\n  - Forward-port Oracle patches for ol9-u6\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  June-9-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-168.0.1.19\n  - Forward-port Oracle patches for ol9-u6\n    Reviewed-by: David Faust david.faust@oracle.com\n  May-17-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-168.0.1.14\n  - Forward-port Oracle patches for ol9-u6\n    Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n  March-6-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-168.0.1\n  - Forward-port Oracle patches for ol9-u6\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  February-18-2025 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-160.0.1\n  - Forward-port Oracle patches for ol9-u6 DP\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  November-12-2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-125.0.1.1\n  - Forward-port Oracle patches for ol9-u5\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  October-1-2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-100.0.1.4\n  - Forward-port Oracle patches for ol9-u4\n    Reviewed by: David Faust david.faust@oracle.com\n  August-26-2024 Jose E. Marchesi jose.marchesi@oracle.com - 2.34-100.0.1.3\n  - Forward-port Oracle patches for ol9-u4\n    Reviewed by: David Faust david.faust@oracle.com\n  May-24-2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-100.0.1.2\n  - Forward-port Oracle patches for ol9-u4\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  April-30-2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-100.0.1\n  - Forward-port Oracle patches for ol9-u4\n    Reviewed by: Indu Bhagat indu.bhagat@oracle.com\n  March-28-2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-100.0.1\n  - Forward-port Oracle patches for ol9-u4-beta\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  March 15 2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-83.0.2.12\n  - Forward-port Oracle patches for ol9\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  February-26-2024 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-83.0.2.7\n  - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  October-24-2023 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-83.0.1.7\n  - Forward-port Oracle patches for ol9\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  October-4-2023 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-82.0.1\n  - Forward-port Oracle patches for ol9\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  April-18-2023 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-60.0.2\n  - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks\n  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages\n    can be used for stack allocation.\n  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to\n    0, glibc will madvise the kernel not to use allow hugepages for stack\n    allocations.\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  March-28-2023 Cupertino Miranda cupertino.miranda@oracle.com - 2.34-60.0.1\n  - Merge Oracle patches for ol9-u2 beta\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  September-28-2022 Patrick McGehearty patrick.mcgehearty@oracle.com - 2.34-40.0.1\n  - Merge Oracle patches for ol9-u1 beta\n    Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n  April-25-2022 Patrick McGehearty patrick.mcgehearty@oracle.com - 2.34-28.0.1\n  - Merge Oracle patches with ol9 beta\n  - Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.34-272]\n- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)\n\n[2.34-271]\n- Fix gconv module reference counter overflow in swscanf and swprintf\n  families (RHEL-145156)\n\n[2.34-270]\n- Fix incorrect setting of CXX variable in spec file (RHEL-148252)\n\n[2.34-269]\n- Fix __nss_get_default_domain logic to restore netgroup user enumeration\n  (RHEL-168096)\n\n[2.34-268]\n- resolv: Correctly count records and check hostname validity (RHEL-168851,\n  RHEL-168852)\n\n[2.34-267]\n- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules\n  (RHEL-162901)\n\n[2.34-266]\n- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)\n\n[2.34-265]\n- Fix null pointer dereference and assertion failures in __nss_database_get\n  (bug 28940) (RHEL-150269)\n\n[2.34-264]\n- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)",
  "id": "ELSA-2026-50370",
  "ovalId": "oval:com.oracle.elsa:def:202650370",
  "source": "oracle_linux",
  "title": "ELSA-2026-50370: glibc security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-50370.html"
}