CVE-2026-84243 — gettext: Directory traversal via the LANGUAGE environment variable

The gettext family of functions in GNU C Library version 2.0 and later accepts LANGUAGE environment variable entries containing “/” or equal to “..”. This can cause a program to load a message catalog (.mo file) from an arbitrary filesystem location when an attacker can influence the program’s environment and the other stated conditions are met.