Skip to content
OpenAdvisories
Medium ALSA-2026:42952 3 CVEs

Moderate: glibc security update

Published Jul 21, 2026 · Updated Oct 29, 2026

Summary

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
* glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
* glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 215

ReleasePackageFixed in
AlmaLinux · 9 glibc 2.34-274.el9_8
AlmaLinux · 9 glibc-all-langpacks 2.34-274.el9_8
AlmaLinux · 9 glibc-benchtests 2.34-274.el9_8
AlmaLinux · 9 glibc-common 2.34-274.el9_8
AlmaLinux · 9 glibc-devel 2.34-274.el9_8
AlmaLinux · 9 glibc-doc 2.34-274.el9_8
AlmaLinux · 9 glibc-gconv-extra 2.34-274.el9_8
AlmaLinux · 9 glibc-headers 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-aa 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-af 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-agr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ak 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-am 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-an 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-anp 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ar 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-as 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ast 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ayc 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-az 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-be 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bem 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ber 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bg 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bhb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bho 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bo 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-br 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-brx 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-bs 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-byn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ca 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ce 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-chr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ckb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-cmn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-crh 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-cs 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-csb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-cv 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-cy 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-da 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-de 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-doi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-dsb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-dv 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-dz 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-el 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-en 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-eo 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-es 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-et 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-eu 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fa 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ff 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fil 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fo 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fur 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-fy 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ga 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-gd 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-gez 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-gl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-gu 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-gv 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ha 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hak 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-he 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hif 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hne 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hsb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ht 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hu 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-hy 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ia 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-id 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ig 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ik 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-is 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-it 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-iu 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ja 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ka 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-kab 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-kk 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-kl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-km 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-kn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ko 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-kok 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ks 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ku 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-kw 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ky 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lg 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-li 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lij 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ln 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lo 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lt 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lv 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-lzh 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mag 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mai 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mfe 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mg 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mhr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-miq 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mjw 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mk 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ml 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mni 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mnw 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ms 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-mt 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-my 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nan 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nb 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nds 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ne 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nhn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-niu 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-nso 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-oc 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-om 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-or 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-os 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-pa 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-pap 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-pl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ps 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-pt 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-quz 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-raj 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ro 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ru 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-rw 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sa 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sah 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sat 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sc 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sd 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-se 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sgs 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-shn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-shs 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-si 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sid 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sk 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sm 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-so 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sq 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ss 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-st 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sv 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-sw 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-szl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ta 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tcy 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-te 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tg 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-th 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-the 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ti 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tig 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tk 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tl 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tn 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-to 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tpi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tr 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ts 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-tt 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ug 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-uk 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-unm 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ur 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-uz 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-ve 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-vi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-wa 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-wae 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-wal 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-wo 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-xh 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-yi 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-yo 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-yue 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-yuw 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-zh 2.34-274.el9_8
AlmaLinux · 9 glibc-langpack-zu 2.34-274.el9_8
AlmaLinux · 9 glibc-locale-source 2.34-274.el9_8
AlmaLinux · 9 glibc-minimal-langpack 2.34-274.el9_8
AlmaLinux · 9 glibc-nss-devel 2.34-274.el9_8
AlmaLinux · 9 glibc-static 2.34-274.el9_8
AlmaLinux · 9 glibc-utils 2.34-274.el9_8
AlmaLinux · 9 libnsl 2.34-274.el9_8
AlmaLinux · 9 nscd 2.34-274.el9_8
AlmaLinux · 9 nss_db 2.34-274.el9_8
AlmaLinux · 9 nss_hesiod 2.34-274.el9_8

Vulnerabilities 3

  • High 7.5

    Potential buffer under-read in ungetwc

    Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes be…

  • High 7.3

    Potential buffer overflow in ns_sprintrrf TSIG handling path

    The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

  • Medium 6.5

    Buffer overread in ns_printrrf with corrupted RDATA field

    The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allo…

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-5435
  • report
    https://access.redhat.com/security/cve/CVE-2026-5928
  • report
    https://access.redhat.com/security/cve/CVE-2026-6238
  • report
    https://bugzilla.redhat.com/2459854
  • report
    https://bugzilla.redhat.com/2463465
  • report
    https://bugzilla.redhat.com/2463539
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-42952.html