Critical Security Advisory: glibc Package Vulnerability and Update
Summary
RHSA-2026:84753: Red Hat Security Advisory: glibc security update. Affects glibc-benchtests-debuginfo versions < 0:2.39-145.el10_2. Fixed in 0:2.39-145.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The GNU C Library (glibc) is a core component of the Linux operating system, providing essential functionalities for system calls and basic operations. It is widely used across various applications and services, making its security paramount. The glibc package is integral for system stability and performance, and vulnerabilities within it can lead to severe security risks.
Vulnerability Detail
The glibc package has been identified with multiple vulnerabilities, including CVE-2026-18374, CVE-2026-77117, CVE-2026-80489, and CVE-2026-8674. These vulnerabilities can potentially allow attackers to execute arbitrary code, leading to unauthorized access and system compromise. The vulnerabilities stem from improper handling of certain inputs, which can be exploited to manipulate memory and execute malicious payloads.
How To Fix
Minimum fixed version
0:2.39-145.el10_2
This is the first release that contains the fix.
sudo dnf update glibc-benchtests-debuginfoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit access to the affected services or applications that rely on glibc until the package is updated. This can be done by modifying firewall rules or disabling specific services.
Conclusion
The vulnerabilities in the glibc package pose significant risks to systems relying on this core library. It is crucial to update to the patched version to mitigate these risks and ensure system security. Regular monitoring and updates are essential for maintaining a secure environment.
See every vulnerability recorded for glibc-benchtests-debuginfo →
FAQ
glibc is the GNU C Library, a critical component of the Linux operating system that provides essential functionalities for system calls and basic operations.
The vulnerabilities can lead to arbitrary code execution, unauthorized access, and system compromise, posing significant risks to system integrity.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
The CVSS score of the vulnerabilities in glibc is 5.9, indicating a moderate level of risk.
It is recommended to regularly check for updates to glibc and other critical packages, ideally as part of a routine maintenance schedule.
Related vulnerabilities
Recent vulnerabilities recorded for glibc-benchtests-debuginfo.
