Red Hat Security AdvisoryRHSA-2026:1334
glibc security update
Released 2026-01-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) glibc-devel-2.39-58.el10_1.7, glibc-doc-2.39-58.el10_1.7, glibc-locale-source-2.39-58.el10_1.7 +1
- Red Hat Enterprise Linux BaseOS (v. 10) glibc-2.39-58.el10_1.7, glibc-all-langpacks-2.39-58.el10_1.7, glibc-common-2.39-58.el10_1.7 +47
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) glibc-benchtests-2.39-58.el10_1.7, glibc-nss-devel-2.39-58.el10_1.7, glibc-static-2.39-58.el10_1.7 +2
Fixes 2 records
Priority HIGH 72
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00618 · Published 2026-01-15 · Partial fix CWE-908
Priority LOW 39
Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00386 · Published 2026-01-14 · Partial fix CWE-190
