[CLSA-2026:1794272615] glibc: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 15:53:26 UTC
Description:
- CVE-2026-84243: gettext loads message catalogs from arbitrary paths via LANGUAGE directory traversal - CVE-2026-95818, CVE-2026-86805: open the normalized $ORIGIN rpath in AT_SECURE programs - CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache - CVE-2026-5450: fix one-byte heap overflow in scanf %mc
CVEs fixed:
Updated packages:
  • glibc-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:b7296c0944cd9c7d8fee31c7b01070c67c16a7109d3650a45e1011e9b56998c7
  • glibc-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:628ec9cc8e6b0dbfa77723bb91db2b4f78a6a940ab0fc7a23b7022591ae977cb
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:e39f75bb470ca5e86c566f9742866047a771b6ecc6f1d2b9ce1b618a50906f9c
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:971ca7eb7a0d78c0fbce3595b137cb4c3d31296086ecab52e020603f4de9622a
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:0e669ca35256db556eb9b0aba8dc9079f4476adb4a62b8177e2ae01ae33c77b9
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:d9cff59057e45c468096545bf0b4a3c5cfd50e0705c9e0f3b426902b85329710
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:56ec91781796a1d288062edb4b62656bf7d899a742bb74f666f0aeaeea7121fb
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:d462440eef3831c951ff1da74e2a84103a3229222ceb3649a722f12f1be50a36
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:eedd9caa9796dfdb7e36f245d416d917b2226b13a11cd536f8572a0d4c37aff3
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:b7dc03fd7ee91fabeec347c8dbbf6336e8e78a50960996a32bbef0a86cd6dd54
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:190eaf44f374a3b16a3d31ce05e3b4f9bedcb637614f71c58b05202ef2746a00
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:5ebec669e5a0e6438697c5b442acc3fd2213ab24c897619cb36a49b55f183121
  • nscd-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:d9c96142c9dd9e079ce684989431be9d1fe64dd706974a1af5d0b457e30c99e5
  • nscd-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:fa3b01f9f681b90d05d16f55a0e0127727b870aac8c9253d92262c7d36702f4d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.