[committed] Document CVE-2026-4046

[Siddhesh Poyarekar]

Signed-off-by: Siddhesh Poyarekar <siddhesh@gotplt.org>
---
 advisories/GLIBC-SA-2026-0007 | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 advisories/GLIBC-SA-2026-0007

diff --git a/advisories/GLIBC-SA-2026-0007 b/advisories/GLIBC-SA-2026-0007
new file mode 100644
index 0000000000..b960525e7f
--- /dev/null
+++ b/advisories/GLIBC-SA-2026-0007
@@ -0,0 +1,14 @@
+iconv crash due to assertion failure with untrusted input
+
+The iconv() function in the GNU C Library versions 2.43 and earlier may
+crash due to an assertion failure when converting inputs from the
+IBM1390 or IBM1399 character sets, which may be used to remotely crash
+an application.
+
+This vulnerability can be trivially mitigated by removing the IBM1390
+and IBM1399 character sets from systems that do not need them.
+
+CVE-Id: CVE-2026-4046
+Public-Date: 2026-03-12
+Vulnerable-Commit: 0ecb606cb6cf65de1d9fc8a919bceb4be476c602 (2.3.3-1501)
+Reported-by: Rocket Ma
-- 
2.52.0