Red Hat Security Advisory

RHSA-2026:20597

glibc security update

Released 2026-05-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) glibc-devel-2.34-270.el9_8, glibc-doc-2.34-270.el9_8, glibc-headers-2.34-270.el9_8 +2
Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-270.el9_8, glibc-all-langpacks-2.34-270.el9_8, glibc-common-2.34-270.el9_8 +47
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glibc-benchtests-2.34-270.el9_8, glibc-nss-devel-2.34-270.el9_8, glibc-static-2.34-270.el9_8 +2

Fixes 3 records

TI-2026-03505 CVE-2026-4046 · GHSA-g7c4-wv7q-gcc6

iconv crash due to assertion failure with untrusted input

HIGH 72

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an applicat…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00389 Published 2026-03-30 Partial fix CWE-617

TI-2026-03848 CVE-2026-4437 · GHSA-m5wq-r4r4-4qrh

gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

LOW 39

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2026-03-20 Partial fix CWE-125

TI-2026-03849 CVE-2026-4438 · GHSA-935r-rfch-9mr7

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

LOW 24

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned t…

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00314 Published 2026-03-20 Partial fix CWE-20