Moderate Vulnerability in glibc: Security Update Required
Summary
RLSA-2026:84753: Moderate: glibc security update. Affects glibc versions < 0:2.39-145.el10_2. Fixed in 0:2.39-145.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The glibc (GNU C Library) is a core component of Linux systems, providing essential libraries for C programming, POSIX threads, and standard math operations. It is critical for the functioning of various applications and services on the system. The glibc package is widely used across different Linux distributions, including Rocky Linux, and is integral to system stability and performance.
Vulnerability Detail
The glibc package has been identified with several vulnerabilities that could lead to denial of service (DoS) and heap buffer overflow. Specifically, CVE-2026-77117 and CVE-2026-80489 detail non-progress DoS issues in character encoding conversions, while CVE-2026-18374 describes a heap buffer overflow that can be exploited through an attacker-controlled fopen mode string. Additionally, CVE-2026-8674 presents a DoS risk via long search domains in the DNS stub resolver configuration. These vulnerabilities can compromise system stability and security, making it imperative to address them promptly.
How To Fix
Minimum fixed version
0:2.39-145.el10_2
This is the first release that contains the fix.
sudo dnf update glibcTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can limit the use of affected functionalities, such as avoiding the use of specific character encoding conversions that are known to be vulnerable until the package is updated.
Conclusion
The glibc security update addresses critical vulnerabilities that could impact system stability and security. It is crucial to update to the latest patched version to mitigate these risks. Regular monitoring and updates are essential for maintaining a secure environment.
See every vulnerability recorded for glibc →
FAQ
glibc, or GNU C Library, is a standard library for the C programming language that provides essential functionalities for system operations and application development.
The vulnerabilities can lead to denial of service attacks, causing applications to become unresponsive, and heap buffer overflows, which can potentially allow attackers to execute arbitrary code.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit the Vulert playground at Vulert Scanner to check your application without needing to sign up.
The CVSS score for the vulnerabilities in glibc is 5.9, indicating a moderate severity level.
It is recommended to regularly check for and apply updates to your packages to ensure that you are protected against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for glibc.
