CGA-p393-qjc7-fhf4

CGA-p393-qjc7-fhf4 PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
glibc-locale-hi	Wolfi	2.39-r5
glibc-locale-mai	Chainguard	2.39-r5
glibc-locale-lzh	Chainguard	2.39-r5
sotruss	Wolfi	2.39-r5
glibc-locale-et	Chainguard	2.39-r5
glibc-locale-aa	Chainguard	2.39-r5
glibc-locale-ku	Chainguard	2.39-r5
glibc-locale-he	Wolfi	2.39-r5
glibc-locale-sw	Chainguard	2.39-r5
glibc-locale-ia	Chainguard	2.39-r5
glibc-locale-kl	Chainguard	2.39-r5
glibc-locale-gl	Wolfi	2.39-r5

88 more packages have a fixed version. See every fix in Lookup.

Affected products

Vendor	Product	Versions
Wolfi	glibc-locale-hi	0
Chainguard	glibc-locale-mai	0
Chainguard	glibc-locale-lzh	0
Wolfi	sotruss	0
Chainguard	glibc-locale-et	0
Chainguard	glibc-locale-aa	0
Chainguard	glibc-locale-ku	0
Wolfi	glibc-locale-he	0
Chainguard	glibc-locale-sw	0
Chainguard	glibc-locale-ia	0
Chainguard	glibc-locale-kl	0
Wolfi	glibc-locale-gl	0
Wolfi	localedef	0
Chainguard	glibc-locale-ff	0
Wolfi	glibc-locale-uz	0
Wolfi	glibc-locale-pt	0
Wolfi	glibc-locale-yuw	0
Chainguard	glibc-locale-nso	0
Wolfi	glibc-locale-an	0
Wolfi	glibc-locale-bo	0

…and 438 more

Timeline

Jan 29, 2026 CVE Published
Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-p393-qjc7-fhf4
vulnetix vdb fixes CGA-p393-qjc7-fhf4

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-p393-qjc7-fhf4/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →