[CLSA-2026:1794325726] glibc: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-10 15:49:02 UTC
Description:
- CVE-2026-84243: gettext loads message catalogs from arbitrary paths via LANGUAGE directory traversal - CVE-2026-95818, CVE-2026-86805: open the normalized $ORIGIN rpath in AT_SECURE programs - CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache - CVE-2026-5450: fix one-byte heap overflow in scanf %mc
CVEs fixed:
Updated packages:
  • glibc-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:76afcbc1a7add0f99c82fcfb7428cb34bad863c5b24907d25bc4218639984976
  • glibc-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:bb25819a917e98ab1e1b88a8406a18d2191822c7b631d7d9c8047dcaf8f57486
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:5931e635db19990e0b607144d35f5b33715c0e84d7d9907a068023e84fbe975c
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:b2512e2eeecd4a18ee1d5fec32bb7583a60787ebacdb87f3776b6707c87fc797
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:f93c190c21de0a1299cb60a7cd160e8baae7988a7c494b28333115c52c0760f2
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:3c6ade1f813e8a8cc7e36d496ecc3e898295da2f32b9a01cd3d0ea8b24815c1d
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:95bedad969b50745d27cf1273c007ab0025914fb4a82da105e81bf13a1415411
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:4fbcd42bf7256c39e59ac10a15fc97a4a7b6e85fc853f08bdda8a9bacc386b5a
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:030b7dc86ee754e147f5a9e57b263096847531e416541a302ad90f8ac20c8305
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:2733f27e787eac1b8366d9bb3b0537785f4139f6fafd04aacf52aa633a1fe888
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:917b71a13dd9e840a026a7d9bf697b284e0707dbf4a6f4945a4a885debf09d4e
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:db1ec5cfebc274bdf9e32b736b3d8117494da94955707c6d2341cd06e7850804
  • nscd-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:6c63f1e5d336b784a18fa6c959a28bda88214b17a614eba37ed3ae4266c6da3d
  • nscd-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:0d00f44315a5514e03351463d383d02a94f954bcc505baa572732c9100bc461c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.