QSN-8737-1: GNU C Library vulnerabilities
2026-09-08

Summary:
Several security issues were fixed in GNU C Library.

Details:
It was discovered that GNU C Library had a buffer overflow in the strfmon
function when handling right-justification padding. An attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-19499)

It was discovered that GNU C Library had an out-of-bounds stack array
access in the tdelete function. An attacker could possibly use this issue
to cause a denial of service or execute arbitrary code. (CVE-2026-19542)

It was discovered that GNU C Library incorrectly handled memory when
calling wordexp with the WRDE_APPEND flag. An attacker could possibly use
this issue to cause a denial of service. (CVE-2026-6368)

It was discovered that GNU C Library had a stack overflow in the wordexp
function when expanding paths beginning with a tilde followed by a long
username. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. (CVE-2026-6791)

It was discovered that GNU C Library had a hang in the SHIFT_JISX0213
character set converter. An attacker could possibly use this issue to cause
a denial of service. (CVE-2026-77117)

It was discovered that GNU C Library had a hang in the EUC_JISX0213
character set converter. An attacker could possibly use this issue to cause
a denial of service. (CVE-2026-80489)

Affected QuantaStor releases:
  6.9.1.001 jammy: libc-bin 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.1.001 jammy: libc-dev-bin 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.1.001 jammy: libc6 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.1.001 jammy: libc6-dev 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.1.001 jammy: locales 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.0.464 jammy: libc-bin 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.0.464 jammy: libc-dev-bin 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.0.464 jammy: libc6 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.0.464 jammy: libc6-dev 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.9.0.464 jammy: locales 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.8.6.015 jammy: libc-bin 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.8.6.015 jammy: libc-dev-bin 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.8.6.015 jammy: libc6 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.8.6.015 jammy: libc6-dev 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.8.6.015 jammy: locales 2.35-0ubuntu3.15 (fixed in 2.35-0ubuntu3.15)
  6.8.5.018 jammy: libc-bin 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.5.018 jammy: libc-dev-bin 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.5.018 jammy: libc6 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.5.018 jammy: libc6-dev 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.5.018 jammy: locales 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.4.038 jammy: libc-bin 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.4.038 jammy: libc-dev-bin 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.4.038 jammy: libc6 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.4.038 jammy: libc6-dev 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.4.038 jammy: locales 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.3.018 jammy: libc-bin 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.3.018 jammy: libc-dev-bin 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.3.018 jammy: libc6 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.3.018 jammy: libc6-dev 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.3.018 jammy: locales 2.35-0ubuntu3.14 (fixed in 2.35-0ubuntu3.15)
  6.8.2.002 jammy: libc-bin 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.2.002 jammy: libc-dev-bin 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.2.002 jammy: libc6 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.2.002 jammy: libc6-dev 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.2.002 jammy: locales 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.1.007 jammy: libc-bin 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.1.007 jammy: libc-dev-bin 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.1.007 jammy: libc6 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.1.007 jammy: libc6-dev 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.1.007 jammy: locales 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.0.205 jammy: libc-bin 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.0.205 jammy: libc-dev-bin 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.0.205 jammy: libc6 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.0.205 jammy: libc6-dev 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)
  6.8.0.205 jammy: locales 2.35-0ubuntu3.13 (fixed in 2.35-0ubuntu3.15)

CVEs: CVE-2026-77117, CVE-2026-19499, CVE-2026-19542, CVE-2026-6791, CVE-2026-6368, CVE-2026-80489

References:
  https://ubuntu.com/security/notices/USN-8737-1