Red Hat Security Advisory

RHSA-2026:33226

glibc security, bug fix, and enhancement update

Released 2026-06-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) glibc-devel-2.34-272.el9_8, glibc-doc-2.34-272.el9_8, glibc-headers-2.34-272.el9_8 +2
Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-272.el9_8, glibc-all-langpacks-2.34-272.el9_8, glibc-common-2.34-272.el9_8 +47
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glibc-benchtests-2.34-272.el9_8, glibc-nss-devel-2.34-272.el9_8, glibc-static-2.34-272.el9_8 +2

Fixes 1 record

TI-2026-04772 CVE-2026-5450 · GHSA-v898-xg3c-w4rj

scanf %mc off-by-one heap buffer overflow

HIGH 82

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2026-04-20 Partial fix CWE-122