Red Hat Product Errata RHSA-2026:33092 - Security Advisory Issued: 2026-06-29 Updated: 2026-06-29 RHSA-2026:33092 - Security Advisory Overview Updated Packages Synopsis Moderate: glibc security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glibc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): Backport Zen5 IFUNC changes to prefer AVX512/EVEX?512 string implementations on RHEL 10 [rhel-10] (JIRA:RHEL-174869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2459853 - CVE-2026-5450 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width CVEs CVE-2026-5450 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM glibc-2.39-126.el10_2.src.rpm SHA-256: b6f9dae29dd93bec0debc26e7fc243f9a0b47696d840d70d739447e12e1e226f x86_64 glibc-2.39-126.el10_2.x86_64.rpm SHA-256: 758caa64942e66d9c902cf574a2d681271d9b5acf7ab9d4762e41f961ad4987e glibc-all-langpacks-2.39-126.el10_2.x86_64.rpm SHA-256: 99606c479a41389237c90cf4f9c07a3cb25aa87d8c619d27872d050f54f7500f glibc-benchtests-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: 7a554163556b943019b67a00e1e75c407297a041fbe526c4221e1cb782a62f39 glibc-benchtests-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: 7a554163556b943019b67a00e1e75c407297a041fbe526c4221e1cb782a62f39 glibc-common-2.39-126.el10_2.x86_64.rpm SHA-256: b8c5d31097662a733ea36443b4ba474717cbac0a402781620b0d4ab400dc8bc6 glibc-common-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: 2e8997a86ebf5142d58c35c99012088fd272891dbdf251d6aab227a74ab26f77 glibc-common-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: 2e8997a86ebf5142d58c35c99012088fd272891dbdf251d6aab227a74ab26f77 glibc-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: 47c8e784b946c4e5f6b3d2c26a677f817cee564469b8c2ade016adb0f9d6fbf3 glibc-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: 47c8e784b946c4e5f6b3d2c26a677f817cee564469b8c2ade016adb0f9d6fbf3 glibc-debugsource-2.39-126.el10_2.x86_64.rpm SHA-256: 80ac1c8315ffad1a9b193516b32d023d432426f45a16a71a97ce5c85acbf87e1 glibc-debugsource-2.39-126.el10_2.x86_64.rpm SHA-256: 80ac1c8315ffad1a9b193516b32d023d432426f45a16a71a97ce5c85acbf87e1 glibc-devel-2.39-126.el10_2.x86_64.rpm SHA-256: b605f67bd7fa18826e2ee552ff41c8116f9ac35feaacf25e749b6e6f85d629b2 glibc-doc-2.39-126.el10_2.noarch.rpm SHA-256: 71641406088c18b863d5bf1d6adce3bfe188c9155606e1ccadcc428213326515 glibc-gconv-extra-2.39-126.el10_2.x86_64.rpm SHA-256: eb59630aef4136fee602e65d04c56b6b4c97d43138c1aec06bbedf7f2128e21c glibc-gconv-extra-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: f3ef1ac80021387a6a6cb64d7544459ebc635342e5e7a769ee7a9dda0b90e94c glibc-gconv-extra-debuginfo-2.39-126.el10_2.x86_64.rpm SHA-256: f3ef1ac80021387a6a6cb64d7544459ebc635342e5e7a769ee7a9dda0b90e94c glibc-langpack-aa-2.39-126.el10_2.x86_64.rpm SHA-256: a98229567fff1a9635ec7195fd571db490d864ca2e82e403dd010b7c92e4f4d0 glibc-langpack-af-2.39-126.el10_2.x86_64.rpm SHA-256: 0b6c8b6e591d642f660f320d1a52cf95c8cd441be0a0a77a85a817379ca69eeb glibc-langpack-agr-2.39-126.el10_2.x86_64.rpm SHA-256: 2b35f96cbcb7bdfc45c1b29894b8b454e2d0bab2248d2f34a47628621392ca87 glibc-langpack-ak-2.39-126.el10_2.x86_64.rpm SHA-256: d3622e80ad1e7297a099e2e9d6cf249d462661197cb52c92a1520dded5a8903b glibc-langpack-am-2.39-126.el10_2.x86_64.rpm SHA-256: 4f469abeb9528992360eb650f3e066dda91fa8f2968380bb21310f8c4348ebd0 glibc-langpack-an-2.39-126.el10_2.x86_64.rpm SHA-256: 22a86d66c5d3b7e147403a2c731d76f3812e3df9bf0f2e644878ce6181eabbec glibc-langpack-anp-2.39-126.el10_2.x86_64.rpm SHA-256: 5e5955d2c83f897f77a288016308808887576d619fd123036b65181fce82e5ed glibc-langpack-ar-2.39-126.el10_2.x86_64.rpm SHA-256: b7eeb29d427ca8225560fc3ab8ecd3f62e332ec47d28d893c158c4245383c032 glibc-langpack-as-2.39-126.el10_2.x86_64.rpm SHA-256: dbadc7ea0305cda2428619cd8f9fa85723c4d5d44a92aa3edff1f461928b2801 glibc-langpack-ast-2.39-126.el10_2.x86_64.rpm SHA-256: 4023d11a84329dbb49bdab7161227c7cf23301b7617f5706dbf42d88e94d247f glibc-langpack-ayc-2.39-126.el10_2.x86_64.rpm SHA-256: 500b487847d4b6e1d8dab4d979352582334b1ba9bbe49ce71943bdeda8bd27d8 glibc-langpack-az-2.39-126.el10_2.x86_64.rpm SHA-256: 9999a64e8ebfd49f315bfa52c9fae23656d1b49ec6502ff7b2b29c57289c9fd8 glibc-langpack-be-2.39-126.el10_2.x86_64.rpm SHA-256: f1289ea13a9caa3556e75be75dae7be6a05ca73a1ff5916e6842e0f1fd2b5592 glibc-langpack-bem-2.39-126.el10_2.x86_64.rpm SHA-256: dc42ced5a13d6890bcd767148938779e3decb8053243dc430873e5375ad62412 glibc-langpack-ber-2.39-126.el10_2.x86_64.rpm SHA-256: 78fad187d40b5ca15e2b9893d811ababa00592a6c4824a33131a27114bbe6697 glibc-langpack-bg-2.39-126.el10_2.x86_64.rpm SHA-256: aca5b6f9e617303d59cc03aaab8cb767702df64d6241c22586df40a6ab26a5f6 glibc-langpack-bhb-2.39-126.el10_2.x86_64.rpm SHA-256: 6eb0315eb84b169cac40ef860f4a5104c8794b395d54d57eebcf6ba53b99a55d glibc-langpack-bho-2.39-126.el10_2.x86_64.rpm SHA-256: 03e5a49e704c5bafd53c13b9ec5c9b817409cb3dcb8205ede9d26bdfed001841 glibc-langpack-bi-2.39-126.el10_2.x86_64.rpm SHA-256: 312b251edb5a98f16b328d9c20cee2709ee26e8c7414004551d0e81fb391a98f glibc-langpack-bn-2.39-126.el10_2.x86_64.rpm SHA-256: 2cfeb696f95a08dea5bd7285cbc1dbfde29ff8c3562122637a73c61432665d56 glibc-langpack-bo-2.39-126.el10_2.x86_64.rpm SHA-256: 0f186c9b7933d6018969aac2fde81468312bdce2c1fe4ac51068c93f993f1a5b glibc-langpack-br-2.39-126.el10_2.x86_64.rpm SHA-256: efdb93445132a5786fbc309e03ea414a11fb139b4951e258df47ca32bde21951 glibc-langpack-brx-2.39-126.el10_2.x86_64.rpm SHA-256: 65647d6376c602d2fb4e16d57aab1acbb3709ff35f673cc431c7cd3f01e9dff1 glibc-langpack-bs-2.39-126.el10_2.x86_64.rpm SHA-256: 8c9175b884e390dc3570082f15924a809cde1fede0774b11dec2ce0bcb80cd2b glibc-langpack-byn-2.39-126.el10_2.x86_64.rpm SHA-256: 98b3ee22be2a7806eac19621507bc88ea618180747257ca6c3d9e692f6984ae3 glibc-langpack-ca-2.39-126.el10_2.x86_64.rpm SHA-256: feea8abf62809f650ce29550865a7b953d13ed55e39d0630687bbc2a8be79505 glibc-langpack-ce-2.39-126.el10_2.x86_64.rpm SHA-256: 059e279ccddcb4829c177fffe9a2aa6d098e4a230f574f5f348ec45b39754a98 glibc-langpack-chr-2.39-126.el10_2.x86_64.rpm SHA-256: cb4fbecb18de7ff32daf867fe9749e0a61fd29ecfc5d3919d8eb7e7086d57d69 glibc-langpack-ckb-2.39-126.el10_2.x86_64.rpm SHA-256: 79279ff82bab77f592dfcaaf87a42e1abe269b9327c0f017ec91c741dcb0ad12 glibc-langpack-cmn-2.39-126.el10_2.x86_64.rpm SHA-256: c442f52d80fdd93137695df86cbead9936c52fca16ffd4dbbb5d853a94499bb7 glibc-langpack-crh-2.39-126.el10_2.x86_64.rpm SHA-256: 4f2c161b9e6d99b371862057d1ca81cfc3babad282ec8d642e7eeefb0cb52fa0 glibc-langpack-cs-2.39-126.el10_2.x86_64.rpm SHA-256: d1b26f6c27512d124a610bde2be34bd084b6e9ff7f1061399c76cfd3a3d48999 glibc-langpack-csb-2.39-126.el10_2.x86_64.rpm SHA-256: 2aa1e279077d5098783c40286e8b9252679a86de9f08f29e634dd2fcfde8f061 glibc-langpack-cv-2.39-126.el10_2.x86_64.rpm SHA-256: 208491d6a4f8c2c5a3a37866cb854ea527749398c16a4aef8ebe9f27e9d3dc88 glibc-langpack-cy-2.39-126.el10_2.x86_64.rpm SHA-256: c3319a6670b5a50b485795bb3f230cb1643cf86301a84db64f9590fd619a8ee6 glibc-langpack-da-2.39-126.el10_2.x86_64.rpm SHA-256: 3b53209