Similar to bug 34556, there is also a hang in euc-jisx0213.c. The glibc security team requested a separate bug for this. Found by: Florian Weimer (Red Hat)
I've got a fix & test. Will re-post once CVE assignment is done.
Reserved CVE ID CVE-2026-80489 for this issue.
Florian, What attribution would you like for this issue?
(In reply to Carlos O'Donell from comment #3) > Florian, What attribution would you like for this issue? No attribution is required. It's not covered by the attribution requirements mentioned in bug 34556 (and it's up to glibc project to decide whether to include this in any advisory release).
(In reply to Florian Weimer from comment #4) > (In reply to Carlos O'Donell from comment #3) > > Florian, What attribution would you like for this issue? > > No attribution is required. It's not covered by the attribution requirements > mentioned in bug 34556 (and it's up to glibc project to decide whether to > include this in any advisory release). Thanks. No attribution will be used when we publish the advisory (both local and with the CVE database).
The master branch has been updated by Florian Weimer <fw@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=4dafa087ff5fe7df45bd37dc727e988da6b8c935 commit 4dafa087ff5fe7df45bd37dc727e988da6b8c935 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) This fixes bug 34568. Reviewed-by: Carlos O'Donell <carlos@redhat.com>
The master branch has been updated by Florian Weimer <fw@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=35efcffa97553df071bc37ab31fd7dc2c634e7da commit 35efcffa97553df071bc37ab31fd7dc2c634e7da Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: Test case for bug 34556, bug 34568 Assisted-by: LLM Reviewed-by: Carlos O'Donell <carlos@redhat.com>
The release/2.44/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=cb61572ea3f773e1e1978f6c412cc36a30acdb0c commit cb61572ea3f773e1e1978f6c412cc36a30acdb0c Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) This fixes bug 34568. Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 4dafa087ff5fe7df45bd37dc727e988da6b8c935)
The release/2.44/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=ca54198decdc3be693b010687f8de716a750b0e4 commit ca54198decdc3be693b010687f8de716a750b0e4 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: Test case for bug 34556, bug 34568 Assisted-by: LLM Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 35efcffa97553df071bc37ab31fd7dc2c634e7da)
The release/2.43/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=3ad1bbd8f94a207efb108a38d434695eab8a1831 commit 3ad1bbd8f94a207efb108a38d434695eab8a1831 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) This fixes bug 34568. Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 4dafa087ff5fe7df45bd37dc727e988da6b8c935)
The release/2.43/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=c29ca5d216bbe0868648e2473caa6b75a407cc31 commit c29ca5d216bbe0868648e2473caa6b75a407cc31 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: Test case for bug 34556, bug 34568 Assisted-by: LLM Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 35efcffa97553df071bc37ab31fd7dc2c634e7da)
The release/2.42/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=87c2795cf6a7584e351036ab43e74b03ccc54a83 commit 87c2795cf6a7584e351036ab43e74b03ccc54a83 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) This fixes bug 34568. Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 4dafa087ff5fe7df45bd37dc727e988da6b8c935)
The release/2.42/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=0afd4d5feb591512629d5f46ceab310b54a06034 commit 0afd4d5feb591512629d5f46ceab310b54a06034 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: Test case for bug 34556, bug 34568 Assisted-by: LLM Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 35efcffa97553df071bc37ab31fd7dc2c634e7da)
The release/2.41/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=ec116a0fbedcc860631e525e70b409cf295f27da commit ec116a0fbedcc860631e525e70b409cf295f27da Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) This fixes bug 34568. Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 4dafa087ff5fe7df45bd37dc727e988da6b8c935)
The release/2.41/master branch has been updated by Aurelien Jarno <aurel32@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=3d141c23899d90559741b5fe74db97ccf0ef5c29 commit 3d141c23899d90559741b5fe74db97ccf0ef5c29 Author: Florian Weimer <fweimer@redhat.com> Date: Fri Aug 28 10:26:07 2026 +0200 iconvdata: Test case for bug 34556, bug 34568 Assisted-by: LLM Reviewed-by: Carlos O'Donell <carlos@redhat.com> (cherry picked from commit 35efcffa97553df071bc37ab31fd7dc2c634e7da)
Fixed on 2.45.