Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

openSUSE Leap 16.0 glibc Important issues CVE-2026-4437 CVE-2026-4438

opensuse
Calendar Grey April 21, 2026
Scroller Opensuse
Update available for openSUSE fixing critical issues in glibc related to DNS response parsing and hostname retrieval.
An update that solves 2 vulnerabilities and has 3 bug fixes can now be installed.

Description

This update for glibc fixes the following issues:

Security fixes:

- CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078).

- CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

Other fixes:

- nss: Missing checks in __nss_configure_lookup, __nss_database_get (bsc#1258319).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-516=1

Topics%20covered

Topics Covered

security advisory security issue important glibc DNS OpenSUSE

Patch

Package List

- openSUSE Leap 16.0:

cross-aarch64-glibc-devel-2.40-160000.4.1

cross-ppc64le-glibc-devel-2.40-160000.4.1

cross-riscv64-glibc-devel-2.40-160000.4.1

cross-s390x-glibc-devel-2.40-160000.4.1

glibc-2.40-160000.4.1

glibc-devel-2.40-160000.4.1

glibc-devel-static-2.40-160000.4.1

glibc-extra-2.40-160000.4.1

glibc-gconv-modules-extra-2.40-160000.4.1

glibc-html-2.40-160000.4.1

glibc-i18ndata-2.40-160000.4.1

glibc-info-2.40-160000.4.1

glibc-lang-2.40-160000.4.1

glibc-locale-2.40-160000.4.1

glibc-locale-base-2.40-160000.4.1

glibc-profile-2.40-160000.4.1

glibc-utils-2.40-160000.4.1

References

* bsc#1258319

* bsc#1260078

* bsc#1260082

References:

* https://www.suse.com/security/cve/CVE-2026-4437.html

* https://www.suse.com/security/cve/CVE-2026-4438.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20501-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory security issue important glibc DNS OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.