Red Hat Security AdvisoryRHSA-2026:4772
glibc security update
Released 2026-03-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-251.el8_10.31, glibc-utils-2.28-251.el8_10.31
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-251.el8_10.31, glibc-all-langpacks-2.28-251.el8_10.31, glibc-common-2.28-251.el8_10.31 +47
- Red Hat Enterprise Linux CRB (v. 8) glibc-benchtests-2.28-251.el8_10.31, glibc-nss-devel-2.28-251.el8_10.31, glibc-static-2.28-251.el8_10.31 +1
Fixes 2 records
Priority HIGH 72
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00618 · Published 2026-01-15 · Partial fix CWE-908
Priority LOW 39
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2026-01-20 · Partial fix CWE-908
