Hi,

The following vulnerability was published for glibc.

CVE-2026-6368[0]:
| Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to
| version 2.43 can cause the interface to return invalid memory in the
| we_wordv member, which on subsequent calls to wordfree may abort the
| process.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-6368
https://www.cve.org/CVERecord?id=CVE-2026-6368
[1] https://sourceware.org/bugzilla/show_bug.cgi?id=34090
[2] https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014

Regards,
Salvatore

Hello,

Bug #1144252 in glibc reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/glibc-team/glibc/-/commit/3f612170a1dcffa441421a30eac0368fd0e3a7e6
------------------------------------------------------------------------
debian/patches/git-updates.diff: update from upstream stable branch:

* debian/patches/git-updates.diff: update from upstream stable branch:
  - Cache cpuid results in ld.so for Intel CPUs.
  - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field
    (CVE-2026-6238).  Closes: #1135231.
  - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records
    (CVE-2026-5435).  Closes: #1135230.
  - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791).
  - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors
    (CVE-2026-6368).  Closes: #1144252.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1144252

We believe that the bug you reported is fixed in the latest version of
glibc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1144252@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Aurelien Jarno <aurel32@debian.org> (supplier of updated glibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 23 Aug 2026 15:07:44 +0200
Source: glibc
Architecture: source
Version: 2.43-4
Distribution: unstable
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Closes: 1144250 1144252
Changes:
 glibc (2.43-4) unstable; urgency=medium
 .
   [ Aurelien Jarno ]
   * debian/patches/git-updates.diff: update from upstream stable branch:
     - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors
       (CVE-2026-6368).  Closes: #1144252.
     - Fix fmod/fmodf infinite recursion on m68k.  Closes: #1144250.
     - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542).
Checksums-Sha1:
 070cdf5e1340504f2a1f687b3bf882a3e40fffd3 8571 glibc_2.43-4.dsc
 8d89bedfda9120a17ab30e561ba4cb9a42cbffee 483560 glibc_2.43-4.debian.tar.xz
 fc50d15aec7462b1b653e69bf7412fbe4bc8e361 9507 glibc_2.43-4_source.buildinfo
Checksums-Sha256:
 ff51df0396173169ec056fd926ef3b98a694e2bb22c8e81ea29922984187009c 8571 glibc_2.43-4.dsc
 d18798878c9879b269dbf7615e0516b999bc91dfba4750b88e54b5a0cfd7316d 483560 glibc_2.43-4.debian.tar.xz
 599598a47c9502601531158d41db2ccb515899d7659902b194ce0481337dae43 9507 glibc_2.43-4_source.buildinfo
Files:
 d46bf494643c3e4b77f1a2ca0dee86c9 8571 libs required glibc_2.43-4.dsc
 171695855db35ed5fb5cbf41c47356a7 483560 libs required glibc_2.43-4.debian.tar.xz
 5f2eefffcf57240bb43274c994d704ec 9507 libs required glibc_2.43-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=HUB5
-----END PGP SIGNATURE-----