Red Hat Security Advisory

RHSA-2026:18139

glibc security update

Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) glibc-devel-2.39-113.el10, glibc-doc-2.39-113.el10, glibc-locale-source-2.39-113.el10 +1
Red Hat Enterprise Linux BaseOS (v. 10) glibc-2.39-113.el10, glibc-all-langpacks-2.39-113.el10, glibc-common-2.39-113.el10 +47
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) glibc-benchtests-2.39-113.el10, glibc-nss-devel-2.39-113.el10, glibc-static-2.39-113.el10 +2

Fixes 1 record

TI-2025-13956 CVE-2025-15281 · GHSA-qg56-4cfq-w9w3

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

LOW 39

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2026-01-20 Partial fix CWE-908