Skip to content
OpenAdvisories
Medium ALSA-2026:20597 3 CVEs

Moderate: glibc security update

Published May 26, 2026 · Updated Oct 29, 2026

Summary

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437)
* glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438)
* glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 215

ReleasePackageFixed in
AlmaLinux · 9 glibc 2.34-270.el9_8
AlmaLinux · 9 glibc-all-langpacks 2.34-270.el9_8
AlmaLinux · 9 glibc-benchtests 2.34-270.el9_8
AlmaLinux · 9 glibc-common 2.34-270.el9_8
AlmaLinux · 9 glibc-devel 2.34-270.el9_8
AlmaLinux · 9 glibc-doc 2.34-270.el9_8
AlmaLinux · 9 glibc-gconv-extra 2.34-270.el9_8
AlmaLinux · 9 glibc-headers 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-aa 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-af 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-agr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ak 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-am 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-an 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-anp 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ar 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-as 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ast 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ayc 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-az 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-be 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bem 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ber 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bg 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bhb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bho 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bo 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-br 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-brx 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-bs 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-byn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ca 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ce 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-chr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ckb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-cmn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-crh 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-cs 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-csb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-cv 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-cy 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-da 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-de 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-doi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-dsb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-dv 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-dz 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-el 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-en 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-eo 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-es 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-et 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-eu 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fa 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ff 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fil 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fo 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fur 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-fy 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ga 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-gd 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-gez 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-gl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-gu 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-gv 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ha 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hak 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-he 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hif 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hne 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hsb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ht 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hu 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-hy 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ia 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-id 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ig 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ik 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-is 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-it 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-iu 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ja 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ka 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-kab 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-kk 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-kl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-km 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-kn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ko 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-kok 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ks 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ku 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-kw 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ky 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lg 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-li 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lij 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ln 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lo 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lt 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lv 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-lzh 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mag 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mai 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mfe 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mg 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mhr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-miq 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mjw 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mk 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ml 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mni 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mnw 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ms 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-mt 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-my 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nan 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nb 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nds 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ne 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nhn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-niu 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-nso 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-oc 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-om 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-or 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-os 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-pa 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-pap 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-pl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ps 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-pt 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-quz 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-raj 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ro 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ru 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-rw 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sa 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sah 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sat 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sc 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sd 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-se 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sgs 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-shn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-shs 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-si 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sid 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sk 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sm 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-so 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sq 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ss 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-st 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sv 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-sw 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-szl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ta 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tcy 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-te 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tg 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-th 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-the 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ti 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tig 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tk 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tl 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tn 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-to 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tpi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tr 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ts 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-tt 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ug 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-uk 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-unm 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ur 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-uz 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-ve 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-vi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-wa 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-wae 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-wal 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-wo 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-xh 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-yi 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-yo 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-yue 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-yuw 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-zh 2.34-270.el9_8
AlmaLinux · 9 glibc-langpack-zu 2.34-270.el9_8
AlmaLinux · 9 glibc-locale-source 2.34-270.el9_8
AlmaLinux · 9 glibc-minimal-langpack 2.34-270.el9_8
AlmaLinux · 9 glibc-nss-devel 2.34-270.el9_8
AlmaLinux · 9 glibc-static 2.34-270.el9_8
AlmaLinux · 9 glibc-utils 2.34-270.el9_8
AlmaLinux · 9 libnsl 2.34-270.el9_8
AlmaLinux · 9 nscd 2.34-270.el9_8
AlmaLinux · 9 nss_db 2.34-270.el9_8
AlmaLinux · 9 nss_hesiod 2.34-270.el9_8

Vulnerabilities 3

  • High 7.5

    iconv crash due to assertion failure with untrusted input

    The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be triviall…

  • High 7.5

    gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

    Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS…

  • Medium 5.4

    gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

    Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS sp…

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-4046
  • report
    https://access.redhat.com/security/cve/CVE-2026-4437
  • report
    https://access.redhat.com/security/cve/CVE-2026-4438
  • report
    https://bugzilla.redhat.com/2449777
  • report
    https://bugzilla.redhat.com/2449783
  • report
    https://bugzilla.redhat.com/2453117
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-20597.html