[CLSA-2026:1794006085] glibc: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-06 23:01:38 UTC
Description:
- CVE-2026-84243: gettext loads message catalogs from arbitrary paths via LANGUAGE directory traversal - CVE-2026-95818, CVE-2026-86805: open the normalized $ORIGIN rpath in AT_SECURE programs - CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache - CVE-2026-5450: fix one-byte heap overflow in scanf %mc
CVEs fixed:
Updated packages:
  • glibc-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:75db5c9d3cfa6d99f92dcea6e588f28277624373e3244a2ac58ac136f0dd3cb4
  • glibc-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:670b6edfaba118b6be214884a9768c33baf2ad4ffdb855cf336f36f6ad866199
  • glibc-common-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:818ba0e7601107ec9f88c2567f4e69dbdba0bd227dea27c1ac5e354bc96f8977
  • glibc-common-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:41c6c304678f42a03e7a302921579a112cad1074ca512eed7cd0928d2acfe7d7
  • glibc-devel-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:ff84ae944bea331ad1bca58a62427e6af78d8f1f79f8c3b2f11ac98c9b992d11
  • glibc-devel-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:4219780be3243a0375b1b5b3cbb464a16e8fe05c39da3620fd4f7b932ac92e64
  • glibc-headers-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:66ade0c2de4b08835732109135622e936a5b5d04336ed892de220d4a92a06621
  • glibc-headers-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:09d4d53c1e74bec04870c9246b2576de33015d4259b1499da3656f52dd451c65
  • glibc-static-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:2659b2a6eeb55462d9b21b40b046b23a6b64de8ef4c986d8b8ea765cab5118a9
  • glibc-static-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:5dca2018f360e97cd93a6fee712902c3ec8d39bc2d6a4327908bb86b06b211d1
  • glibc-utils-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:c3cf898ba4ec46b197df13fd0a6f53ecc24e061302402cecf8cd61702ad831a4
  • glibc-utils-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:34e6e9f370956f07ec0ae67c4dea1bb5a86d59f19599f4a6803c158489dd1723
  • nscd-2.17-326.0.11.el7_9.3.tuxcare.els3.i686.rpm
    sha:97dde78e8b5349ed44588cbcda562eb5456afc6318c52f2786884e5f031dbbb6
  • nscd-2.17-326.0.11.el7_9.3.tuxcare.els3.x86_64.rpm
    sha:74f3262896334d5ad867081181b93dd2f3626312cf82de6a48c5fa7087986305
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.