NIXPKGS-2026-0072
GitHub issue
published on 21 Jan 2026
by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
24 packages
- getconf
- mtrace
- locale
- getent
- iconv
- libc
- libiconv
- glibcInfo
- glibc_multi
- glibc_memusage
- glibcLocales
- glibcLocalesUtf8
- unixtools.getent
- tests.hardeningFlags-clang.allExplicitDisabledGlibcxxAssertions
- tests.hardeningFlags-gcc.allExplicitDisabledGlibcxxAssertions
- tests.hardeningFlags-clang.glibcxxassertionsExplicitDisabled
- tests.hardeningFlags-clang.glibcxxassertionsExplicitEnabled
- tests.hardeningFlags-gcc.glibcxxassertionsExplicitDisabled
- tests.hardeningFlags.allExplicitDisabledGlibcxxAssertions
- tests.hardeningFlags-gcc.glibcxxassertionsExplicitEnabled
- tests.hardeningFlags-clang.glibcxxassertionsStdenvUnsupp
- tests.hardeningFlags-gcc.glibcxxassertionsStdenvUnsupp
- unixtools.getconf
- unixtools.locale
- @LeSuisse accepted
- @LeSuisse published on GitHub
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
Affected products
glibc
- =<2.42
Package maintainers
-
@ConnorBaker Connor Baker <ConnorBaker01@gmail.com>
-
@Ma27 Maximilian Bosch <maximilian@mbosch.me>