Skip to content
OpenAdvisories
Medium ALSA-2026:96087 4 CVEs

Moderate: glibc security update

Published Nov 9, 2026 · Updated Nov 10, 2026

Ecosystem: AlmaLinux

Summary

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: nscd stack overflow leads to degraded DNS resolution (CVE-2026-89092)
* glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration (CVE-2026-8674)
* glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader (CVE-2026-86805)
* glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow. (CVE-2026-95818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 214

ReleasePackageFixed in
AlmaLinux · 8 compat-libpthread-nonshared 2.28-251.el8_10.53
AlmaLinux · 8 glibc 2.28-251.el8_10.53
AlmaLinux · 8 glibc-all-langpacks 2.28-251.el8_10.53
AlmaLinux · 8 glibc-benchtests 2.28-251.el8_10.53
AlmaLinux · 8 glibc-common 2.28-251.el8_10.53
AlmaLinux · 8 glibc-devel 2.28-251.el8_10.53
AlmaLinux · 8 glibc-doc 2.28-251.el8_10.53
AlmaLinux · 8 glibc-gconv-extra 2.28-251.el8_10.53
AlmaLinux · 8 glibc-headers 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-aa 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-af 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-agr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ak 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-am 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-an 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-anp 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ar 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-as 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ast 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ayc 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-az 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-be 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bem 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ber 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bg 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bhb 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bho 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bo 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-br 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-brx 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-bs 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-byn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ca 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ce 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-chr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-cmn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-crh 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-cs 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-csb 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-cv 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-cy 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-da 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-de 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-doi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-dsb 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-dv 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-dz 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-el 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-en 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-eo 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-es 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-et 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-eu 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fa 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ff 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fil 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fo 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fur 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-fy 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ga 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-gd 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-gez 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-gl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-gu 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-gv 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ha 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hak 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-he 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hif 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hne 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hsb 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ht 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hu 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-hy 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ia 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-id 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ig 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ik 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-is 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-it 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-iu 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ja 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ka 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-kab 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-kk 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-kl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-km 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-kn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ko 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-kok 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ks 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ku 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-kw 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ky 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lb 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lg 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-li 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lij 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ln 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lo 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lt 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lv 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-lzh 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mag 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mai 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mfe 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mg 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mhr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-miq 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mjw 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mk 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ml 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mni 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ms 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-mt 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-my 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nan 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nb 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nds 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ne 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nhn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-niu 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-nso 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-oc 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-om 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-or 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-os 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-pa 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-pap 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-pl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ps 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-pt 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-quz 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-raj 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ro 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ru 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-rw 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sa 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sah 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sat 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sc 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sd 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-se 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sgs 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-shn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-shs 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-si 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sid 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sk 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sm 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-so 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sq 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ss 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-st 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sv 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-sw 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-szl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ta 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tcy 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-te 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tg 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-th 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-the 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ti 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tig 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tk 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tl 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tn 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-to 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tpi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tr 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ts 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-tt 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ug 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-uk 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-unm 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ur 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-uz 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-ve 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-vi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-wa 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-wae 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-wal 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-wo 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-xh 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-yi 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-yo 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-yue 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-yuw 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-zh 2.28-251.el8_10.53
AlmaLinux · 8 glibc-langpack-zu 2.28-251.el8_10.53
AlmaLinux · 8 glibc-locale-source 2.28-251.el8_10.53
AlmaLinux · 8 glibc-minimal-langpack 2.28-251.el8_10.53
AlmaLinux · 8 glibc-nss-devel 2.28-251.el8_10.53
AlmaLinux · 8 glibc-static 2.28-251.el8_10.53
AlmaLinux · 8 glibc-utils 2.28-251.el8_10.53
AlmaLinux · 8 libnsl 2.28-251.el8_10.53
AlmaLinux · 8 nscd 2.28-251.el8_10.53
AlmaLinux · 8 nss_db 2.28-251.el8_10.53
AlmaLinux · 8 nss_hesiod 2.28-251.el8_10.53

Vulnerabilities 4

  • Medium 6.3
    CVE-2026-86805

    AT_SECURE programs may load attacker-controlled code via $ORIGIN

    A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DT_RPATH for setuid/setgid (AT_SECURE) progr…

    The GNU C Library glibc glibc eglibc Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2026-8674

    Assertion failure in the DNS stub resolver with a long search domain

    Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which abor…

    The GNU C Library glibc glibc eglibc Debian Ubuntu Azure Linux Wolfi
  • Medium 4.2
    CVE-2026-89092

    Stack overflow in nscd due to unbounded alloca use

    The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that h…

    The GNU C Library glibc glibc eglibc Debian Ubuntu Azure Linux Wolfi
  • Low 3.6
    CVE-2026-95818

    AT_SECURE program buffer overflow via $ORIGIN processing

    A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH begi…

    The GNU C Library glibc glibc eglibc Debian Ubuntu Azure Linux Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-8674
  • report
    https://access.redhat.com/security/cve/CVE-2026-86805
  • report
    https://access.redhat.com/security/cve/CVE-2026-89092
  • report
    https://access.redhat.com/security/cve/CVE-2026-95818
  • report
    https://bugzilla.redhat.com/2531725
  • report
    https://bugzilla.redhat.com/2536382
  • report
    https://bugzilla.redhat.com/2538209
  • report
    https://bugzilla.redhat.com/2538306
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-96087.html