Red Hat Product Errata RHSA-2026:33226 - Security Advisory Issued: 2026-06-29 Updated: 2026-06-29 RHSA-2026:33226 - Security Advisory Overview Updated Packages Synopsis Moderate: glibc security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): glibc: counter overflow in __wcsmbs_clone_conv if setlocale is called (JIRA:RHEL-145156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2459853 - CVE-2026-5450 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width CVEs CVE-2026-5450 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM glibc-2.34-272.el9_8.src.rpm SHA-256: 74304489b43f5dcfc68a75554bc7a0b65e8f09aa4ab719161ade3fa46d56cbb8 x86_64 glibc-2.34-272.el9_8.i686.rpm SHA-256: e08f8418d17d0eed104cf48d70887bf05f7f365d130974db86e7b66da0305154 glibc-2.34-272.el9_8.x86_64.rpm SHA-256: d59c7006e4a76b6543be7fb04cd701cc341fd667198f86006a8e766923a9985b glibc-all-langpacks-2.34-272.el9_8.x86_64.rpm SHA-256: 81cce5ebb0a55a9e79e3af038531b121eee70d2d7de83771b2607f4b057be2eb glibc-benchtests-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: 688cfd89198675c3d2e5dc527cc6fdce498cb2e5fae3d67c3949177fe74e6941 glibc-benchtests-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: 688cfd89198675c3d2e5dc527cc6fdce498cb2e5fae3d67c3949177fe74e6941 glibc-benchtests-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: 620ae79e0cdee555b12ce4e3328387ae095ec0071fb86efe1fdbfc70229ffced glibc-benchtests-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: 620ae79e0cdee555b12ce4e3328387ae095ec0071fb86efe1fdbfc70229ffced glibc-common-2.34-272.el9_8.x86_64.rpm SHA-256: aff0f291115fdf9e8ae8e683ba2a2a75c17e9e00dab7bc0441482b3c18a964fa glibc-common-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: 4c4d9e88de348d18a158e6ea233f3af2a8309df86f5aa07fbe4a9182e0b42f0f glibc-common-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: 4c4d9e88de348d18a158e6ea233f3af2a8309df86f5aa07fbe4a9182e0b42f0f glibc-common-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: 2e18510c267b4615043a2c6a83fc6c799e4f1a8ef099ca31eb5565de6c173ac2 glibc-common-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: 2e18510c267b4615043a2c6a83fc6c799e4f1a8ef099ca31eb5565de6c173ac2 glibc-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: 1499f1c3437a6223b5f4181216d14157753b3c32fdedcd87d63e362d2a2a0901 glibc-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: 1499f1c3437a6223b5f4181216d14157753b3c32fdedcd87d63e362d2a2a0901 glibc-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: 90a6c586c202a19e15ccb93f34b61fc36ebd3dd50046c0795eb1739cf4653760 glibc-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: 90a6c586c202a19e15ccb93f34b61fc36ebd3dd50046c0795eb1739cf4653760 glibc-debugsource-2.34-272.el9_8.i686.rpm SHA-256: f8dc2d2710044d694c5cb1eac056b44b8392a7d6eebe098259516680149c756f glibc-debugsource-2.34-272.el9_8.i686.rpm SHA-256: f8dc2d2710044d694c5cb1eac056b44b8392a7d6eebe098259516680149c756f glibc-debugsource-2.34-272.el9_8.x86_64.rpm SHA-256: 26e17a12f726ecf5f2bb289864d223986a0d13a432fbbd4da6c5e9c241bab057 glibc-debugsource-2.34-272.el9_8.x86_64.rpm SHA-256: 26e17a12f726ecf5f2bb289864d223986a0d13a432fbbd4da6c5e9c241bab057 glibc-devel-2.34-272.el9_8.i686.rpm SHA-256: 26ae6a6e1caaf17d94705f35a46b9e0a4051033c24b9fbb63e7eca4fba95dcee glibc-devel-2.34-272.el9_8.x86_64.rpm SHA-256: 528edd253ccac17373c82bad04064a554ee18986a9362860be4d804ff1239825 glibc-doc-2.34-272.el9_8.noarch.rpm SHA-256: f6c70b6ede1309bf826e13198bbfa48fb8cf8741753e2ab15ead8de222937a8f glibc-gconv-extra-2.34-272.el9_8.i686.rpm SHA-256: 5c8ea161963fcb8e9ebed96a851a5b9b8f628b5cc78dc2b47b4cbc4d918f3ac0 glibc-gconv-extra-2.34-272.el9_8.x86_64.rpm SHA-256: 40fdcb2ae1516a486c521e3de2ccb071c39b60074757f1e45b1ce7e2ecd5158e glibc-gconv-extra-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: f79dacd7ea34220434ebdfd4e62c6a2c4c401523eea4d7907214c355560cba45 glibc-gconv-extra-debuginfo-2.34-272.el9_8.i686.rpm SHA-256: f79dacd7ea34220434ebdfd4e62c6a2c4c401523eea4d7907214c355560cba45 glibc-gconv-extra-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: bcd2fa1072c9a5e38ba1f6b4dc49b39dcda0bc2d4d78d0396711fefb8148215d glibc-gconv-extra-debuginfo-2.34-272.el9_8.x86_64.rpm SHA-256: bcd2fa1072c9a5e38ba1f6b4dc49b39dcda0bc2d4d78d0396711fefb8148215d glibc-headers-2.34-272.el9_8.x86_64.rpm SHA-256: 11533070a0fa0133c3184295df9666ddbf5352e1bb748a1e5d7c97da6853cff5 glibc-langpack-aa-2.34-272.el9_8.x86_64.rpm SHA-256: e64fa6ded0a1687b919163465dbdd801ac2ee5d4ccf392a82d3b891fd27d1c1d glibc-langpack-af-2.34-272.el9_8.x86_64.rpm SHA-256: cc58a32764dfd8dfc906238f0bc8e8813bb611850b465373b4c9ba73bab1d7d2 glibc-langpack-agr-2.34-272.el9_8.x86_64.rpm SHA-256: 2108b7156f1fb30cd98a8707d294ae892c56e1ee945e9059b9850b19789c1430 glibc-langpack-ak-2.34-272.el9_8.x86_64.rpm SHA-256: bc0f93bb9d874a08661a042592fb6c8d79a27ef17453f2a6ae9384f4237e02fc glibc-langpack-am-2.34-272.el9_8.x86_64.rpm SHA-256: be45a77eff3cadb099aff9f1bc998bca499ffdb77e6c3dc0c44432f2bef4eaa0 glibc-langpack-an-2.34-272.el9_8.x86_64.rpm SHA-256: 180e9042ca6e5be6c64ec853600b0b9db7bb8671d2ba6988f31e13ff8bef1d25 glibc-langpack-anp-2.34-272.el9_8.x86_64.rpm SHA-256: 2ecfc6d44e129a0b444cde533c29558e74861bd2fa39912a1ea6955325a53216 glibc-langpack-ar-2.34-272.el9_8.x86_64.rpm SHA-256: 3fa2ef58b54fe2ad21e074cd1dbd396443e8e8721e1bff72c5d7426cdf2e73d7 glibc-langpack-as-2.34-272.el9_8.x86_64.rpm SHA-256: 6094d64f4605216aa2e2492e743d8968b3c7ff901f581f4e65c843df6d93bc3e glibc-langpack-ast-2.34-272.el9_8.x86_64.rpm SHA-256: c035abe6c70c8772329dfa27712889354ea8b2abe3cbb4559add0cc8d451e3a7 glibc-langpack-ayc-2.34-272.el9_8.x86_64.rpm SHA-256: 5aa45d4f60a73066ea5016ed2b1da95aa715ca8f29bbd528362de42f6052b2ab glibc-langpack-az-2.34-272.el9_8.x86_64.rpm SHA-256: 8cb14b1c871b729470ce2e2b4ca2edf2d5ae76e5abe035d6d6bdea7fd3c49afc glibc-langpack-be-2.34-272.el9_8.x86_64.rpm SHA-256: 70313ad3657757f51442628c5b0c9d5f175d34b2d10cb22cd3797ed3433c8533 glibc-langpack-bem-2.34-272.el9_8.x86_64.rpm SHA-256: 4056df1012fb005551bf17c42e89e70bde03fd3ce71e2624ec0ddebf2becce8e glibc-langpack-ber-2.34-272.el9_8.x86_64.rpm SHA-256: f6f4f94b2a59285aac7314e41ae0c25b5830283a493eb4451cd6062298a21ed3 glibc-langpack-bg-2.34-272.el9_8.x86_64.rpm SHA-256: 040693d60df622f91d58ff4701f48aa555617ac845e856254bbecc93a0cd9d87 glibc-langpack-bhb-2.34-272.el9_8.x86_64.rpm SHA-256: 2ae80e0c8ac3885a9c1ce0b08637098bff0aadcab78a8a5fd879b079a3211ec1 glibc-langpack-bho-2.34-272.el9_8.x86_64.rpm SHA-256: dd4eb16d0acb283f628ff8a60c907b3c97179c3270b153e064e867dc9122fc9f glibc-langpack-bi-2.34-272.el9_8.x86_64.rpm SHA-256: 0ec4da89fed393c9a35e6b58adb29298e234c65705426518130cd6378a66d9f7 glibc-langpack-bn-2.34-272.el9_8.x86_64.rpm SHA-256: bd50c743fde061d258cdb368ca21e9356ac678663637dcdc5485f2bba5c6ab06 glibc-langpack-bo-2.34-272.el9_8.x86_64.rpm SHA-256: 7cd1879238c01bb87dacb3a465b557f47b5e7ca0aae6fbe674cddea82d02a5e3 glibc-langpack-br-2.34-272.el9_8.x86_64.rpm SHA-256: ffb9241665f00ff049b929a7fe53238d8e5748f43ca39353726acf0e4a397381 glibc-langpack-brx-2.34-272.el9_8.x