Red Hat Security AdvisoryRHSA-2026:95618
glibc security update
Released 2026-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) glibc-devel-2.34-284.el9_8.4, glibc-doc-2.34-284.el9_8.4, glibc-headers-2.34-284.el9_8.4 +2
- Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-284.el9_8.4, glibc-all-langpacks-2.34-284.el9_8.4, glibc-common-2.34-284.el9_8.4 +47
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glibc-benchtests-2.34-284.el9_8.4, glibc-nss-devel-2.34-284.el9_8.4, glibc-static-2.34-284.el9_8.4 +2
Fixes 4 records
Priority LOW 29
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges.
CVSS 3.1MEDIUM 6.3· Local · Low privileges · User interaction · EPSS 0.00097 · Published 2026-09-22 · Partial fix · 2.45 CWE-367
Priority LOW 24
Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 res…
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00315 · Published 2026-09-17 · Partial fix CWE-617
Priority LOW 19
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system.
CVSS 3.1MEDIUM 4.2· Adjacent network · No auth · No interaction · EPSS 0.0024 · Published 2026-09-11 · Partial fix · 2.45 CWE-789
Priority LOW 16
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs.
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00102 · Published 2026-09-22 · Partial fix · 2.45 CWE-121
THREATIST.IORead the docs