Red Hat Security Advisory

RHSA-2026:42733

glibc security update

Released 2026-07-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-251.el8_10.40, glibc-utils-2.28-251.el8_10.40
Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-251.el8_10.40, glibc-all-langpacks-2.28-251.el8_10.40, glibc-common-2.28-251.el8_10.40 +47
Red Hat Enterprise Linux CRB (v. 8) glibc-benchtests-2.28-251.el8_10.40, glibc-nss-devel-2.28-251.el8_10.40, glibc-static-2.28-251.el8_10.40 +1

Fixes 3 records

TI-2026-05203 CVE-2026-5928 · GHSA-829p-mc9m-7xhr

Potential buffer under-read in ungetwc

HIGH 72

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, ma…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00369 Published 2026-04-20 Partial fix CWE-127

TI-2026-04758 CVE-2026-5435 · GHSA-32rw-r8mp-pw42

Potential buffer overflow in ns_sprintrrf TSIG handling path

LOW 38

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG rec…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00237 Published 2026-04-28 Partial fix CWE-787

TI-2026-05472 CVE-2026-6238 · GHSA-h8wx-jcwq-g3cp

Buffer overread in ns_printrrf with corrupted RDATA field

LOW 35

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LO…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00358 Published 2026-04-28 Fixed CWE-126