Red Hat Security Advisory

RHSA-2026:2786

glibc security update

Released 2026-02-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-231.el9_7.10
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glibc-static-2.34-231.el9_7.10

Fixes 3 records

TI-2026-00692 CVE-2026-0915 · GHSA-xp56-6525-9chf

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

HIGH 72

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00618 Published 2026-01-15 Partial fix CWE-908

TI-2026-00642 CVE-2026-0861 · GHSA-5pf6-63v3-88hw

Integer overflow in memalign leads to heap corruption

LOW 39

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00386 Published 2026-01-14 Partial fix CWE-190

TI-2025-13956 CVE-2025-15281 · GHSA-qg56-4cfq-w9w3

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

LOW 39

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2026-01-20 Partial fix CWE-908