Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.2

openeuler popt library can crash displaying help

published 2 days ago
Summary

The popt library used for processing command-line options on openeuler can crash when it tries to show help text that is wider than the screen. A user who can cause the program to print such help could make the application stop working, effectively causing a denial of service. Install the latest security update for popt to fix the problem.

What to do
  • Update openeuler popt to version 1.19-7.oe2403sp3.
Affected software
Ecosystem VendorProductAffected versions
openEuler:24.03-LTS-SP3 openeuler popt < 1.19-7.oe2403sp3
Fix: upgrade to 1.19-7.oe2403sp3
Original advisory text
popt security update
The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables (allowing multiple passes in parsing argv), parsing an arbitrary array of argv-style elements (allowing parsing of command-line-strings from any source), a standard method of option aliasing, ability to exec external option filters, and automatic generation of help and usage messages.

Security Fix(es):

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.(CVE-2026-18839)
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.2 Low
Timeline
Published16 Oct 2026
Updated16 Oct 2026
First seen16 Oct 2026
Sources
OESA-2026-4394 · OSV
Track software like this
Free during beta