[CLSA-2026:1794272487] glibc: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 14:50:34 UTC
Description:
- CVE-2026-84243: gettext loads message catalogs from arbitrary paths via LANGUAGE directory traversal - CVE-2026-95818, CVE-2026-86805: open the normalized $ORIGIN rpath in AT_SECURE programs - CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache - CVE-2026-5450: fix one-byte heap overflow in scanf %mc
CVEs fixed:
Updated packages:
  • glibc-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:755680c24f1b0ed2c5901c2ff48ad0a9e43243b89a7cc044bd75cd97639d04bf
  • glibc-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:4a69fc41889e70ac028da1a7fc0a7af5f2e43a8eded97ea122a0ad9367718307
  • glibc-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:687ed5d10b2ea69d8019aabeb6d891e2dcddc63c748f120eefeaf5a5083dca1c
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:2b03df1e399c8490ebe46288b714d2abe6d42a64fa6e30c892c2a43c97a4f81d
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:6b86ba9cbfa7a4277d86daf3ee67d7a1e4ab68ee99706680ad036069c008bdec
  • glibc-common-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:afb4bfe5c58acdbbaf6f1cd213da538a958ffba2298dbcdbceb93996a5094860
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:7ea82a575f07eef1ff6050d8234b99c7a236b9b18e793a90abc376a56265a0de
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:6df53dd6e1802fd88c3a44d9e1cd0afcb164a72be6be62e9f12026a9263f3354
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:73975992711c51b0c00d0174f4a9e44fc229447213c31ec830973af50c24a6f3
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:605e5b11afc7671be97090fd4298968cf7fb1071da6a28fcbc116ab9e00cbc09
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:739dcab275c300b108f5327409912091ac45bb9c55df4d6b886273bd764bb975
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:e8104c1338e87df7b142ed7e40da1f39ea6b1c3d25d23efed41c5be4c55647a7
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:5172d2a3448fbaf4e28886ac6eb89a15b04310ce9957149b8d8809c13763e749
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:61baf8e2fd455612080740ba490ba05809c89a230b44285788edc2b32ea6b19a
  • glibc-static-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:1ea08e907fa44dda0166b37d0cb6171870cc226e2a4ec79c01faf9534e187fc3
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:ebd8cadd02673185102ae13539b8f540fa4b85ecaeafbee4d3c2db18d2c329fd
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:ef120b4df4802862ce746c5e41e07f9dbe63db1ff4de5d14f3e46ecd33ab76c8
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:a402f44654400b235cca6b7b8736786a19b5c2d271603a7bdc9f2dfc3af02a30
  • nscd-2.17-326.el7_9.99.tuxcare.els5.aarch64.rpm
    sha:be4737168bdc82fa0088858f4a9f04547a5d6a50ab249823b5181d5a39a55910
  • nscd-2.17-326.el7_9.99.tuxcare.els5.i686.rpm
    sha:d310b9cc2cb7ace32c3ec008b454131c9b445f569bf53488e123b640da48ff96
  • nscd-2.17-326.el7_9.99.tuxcare.els5.x86_64.rpm
    sha:6366cd36c9c709eacdc6a0f90953511f8d6a35864a1eb1bb74955dfdd4848c46
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.