- What: Red Hat releases a security update for glibc
- Impact: Red Hat Enterprise Linux users need to apply the update to address moderate-severity vulnerabilities
Red Hat Product Errata RHSA-2026:36643 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36643 - Security Advisory Overview Updated Packages Synopsis Moderate: glibc security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glibc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2459853 - CVE-2026-5450 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width CVEs CVE-2026-5450 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 SRPM glibc-2.28-151.el8_4.6.src.rpm SHA-256: 86af3b55a5b0dfec48bf1e26c19bdb5fcf8b4ae8f257cff6a31c0789277f0374 x86_64 compat-libpthread-nonshared-2.28-151.el8_4.6.x86_64.rpm SHA-256: b4a9889af280fdeb7a407c7e048585f19b8d86b8b2345791fe30f39d64a48f5f glibc-2.28-151.el8_4.6.i686.rpm SHA-256: b2005752ef7bae5e4dc54ffd0e4129b3fa9bfd7897bf7316d32d1a1fd83ff155 glibc-2.28-151.el8_4.6.x86_64.rpm SHA-256: f01fcfaf775aa3633fadbda5b2bd60a369deb46ff46f2309b5a99a62e25746c3 glibc-all-langpacks-2.28-151.el8_4.6.x86_64.rpm SHA-256: 438a2a61f5e344816c57ecf5d532372d952ddf9e75b366e3e20a10973c0d5e2a glibc-common-2.28-151.el8_4.6.x86_64.rpm SHA-256: a7ab4f91e095346d5c2fb21f2c24adb54a6a03b043a6c3dbc002dbd19483adc9 glibc-debuginfo-2.28-151.el8_4.6.i686.rpm SHA-256: beb689e716f58e4ed493aac0b50036143f1a165bb7781122ce031952826fe5f4 glibc-debuginfo-2.28-151.el8_4.6.x86_64.rpm SHA-256: 70268cb7e674d56491e4c8f176bc1ee9740383dc0c495546401dc41e258c38a0 glibc-debuginfo-2.28-151.el8_4.6.x86_64.rpm SHA-256: 70268cb7e674d56491e4c8f176bc1ee9740383dc0c495546401dc41e258c38a0 glibc-debuginfo-common-2.28-151.el8_4.6.i686.rpm SHA-256: 50e43995c117f0519be7d7d83844b0161f08cfd5e1395ee613be08af92876c6c glibc-debuginfo-common-2.28-151.el8_4.6.x86_64.rpm SHA-256: ae032304f8bc070249f98ecee1914013756815781f0774f4f76e6fb1f566318f glibc-debuginfo-common-2.28-151.el8_4.6.x86_64.rpm SHA-256: ae032304f8bc070249f98ecee1914013756815781f0774f4f76e6fb1f566318f glibc-devel-2.28-151.el8_4.6.i686.rpm SHA-256: 6978c8547b8c09c262c43b89867a7ccd1929590f851e07ec7f01fe1b63b77a1a glibc-devel-2.28-151.el8_4.6.x86_64.rpm SHA-256: 7dd247717d98903b44bfa1aed9bfe26417b63d6a5390f94ecc24ae53e47d15e2 glibc-headers-2.28-151.el8_4.6.i686.rpm SHA-256: eb7f9af38f4d03f1d0ef3540bb64de56b21349d1e94c2da15ea1a15901d44c00 glibc-headers-2.28-151.el8_4.6.x86_64.rpm SHA-256: ef90b8f7254b83e6742b9dd78b596db5424cf0c58899e64e514b1292dadb403d glibc-langpack-aa-2.28-151.el8_4.6.x86_64.rpm SHA-256: 542fd75a8e702daa26b14e8101b74196e44dec62ef98d4c04b78b8d30cb5f623 glibc-langpack-af-2.28-151.el8_4.6.x86_64.rpm SHA-256: 2bd58d4d6fd2019d7a49b92ff5a5d6dbd08e2c891af35cb7d40b9b2e0ee0cfa9 glibc-langpack-agr-2.28-151.el8_4.6.x86_64.rpm SHA-256: 1a287967e7977b6cd07771fe04c67ca4eea13defbab90b54f2649b8a05344855 glibc-langpack-ak-2.28-151.el8_4.6.x86_64.rpm SHA-256: 92f8061295ac3859fe4d0aa1696a4f5b494b2b9b767825e585dae521ac664e14 glibc-langpack-am-2.28-151.el8_4.6.x86_64.rpm SHA-256: 3bb6a2a098586cf81684ae3c86d879a6a9a2b9b24d57c00a29de779c8efc31a7 glibc-langpack-an-2.28-151.el8_4.6.x86_64.rpm SHA-256: 6d266da6d86f9cdb4fab909817085e7865be58f84f144d2d19ac80878c0eb92c glibc-langpack-anp-2.28-151.el8_4.6.x86_64.rpm SHA-256: 811a590fd3c2e1c8a90c96d1ec1f7ceb2f924ceb68c4ed0bc2beb76a285bc277 glibc-langpack-ar-2.28-151.el8_4.6.x86_64.rpm SHA-256: 339391e24709ee4512defee85dd588c57873d72efc1a319877af86e23aa74b79 glibc-langpack-as-2.28-151.el8_4.6.x86_64.rpm SHA-256: c394f428c4c33c17651df2103c6612572d759193948c80adfa3cfdd3f8966379 glibc-langpack-ast-2.28-151.el8_4.6.x86_64.rpm SHA-256: 8a681b23f01aa646878c53bf85a1f74e4f8945e150aff734e7a0b41bd4d9d8d6 glibc-langpack-ayc-2.28-151.el8_4.6.x86_64.rpm SHA-256: cf5578c7fb7dcb5c13f5240eeaca81aa5eebe7042f4b04fdd25a9f9196f18643 glibc-langpack-az-2.28-151.el8_4.6.x86_64.rpm SHA-256: 5318f9ce1b26622de6b03142321b8673e94ab152e3b303329a5b2a81346bfe4f glibc-langpack-be-2.28-151.el8_4.6.x86_64.rpm SHA-256: 1baeecc9b610e9c2ef7051d66b263fd670937366de37b28839c1ce1bc364a02d glibc-langpack-bem-2.28-151.el8_4.6.x86_64.rpm SHA-256: ebcad793dc0c7fe718e416ab864845ef86f287faee8dd96f473292a5cca46a30 glibc-langpack-ber-2.28-151.el8_4.6.x86_64.rpm SHA-256: 9195f19cd08a72d931456a6779569209698be0034074a152cf43fc775762ac25 glibc-langpack-bg-2.28-151.el8_4.6.x86_64.rpm SHA-256: e283d5109bfd32675cb11d27093a11e4afee03e102032684882a116be865d413 glibc-langpack-bhb-2.28-151.el8_4.6.x86_64.rpm SHA-256: eb5970d15d26e4c5a6288a6c11f99e8dc628ae6b9004183202f9f2ed92a0e735 glibc-langpack-bho-2.28-151.el8_4.6.x86_64.rpm SHA-256: ba7d50d5d0c303a9775f4786e95f29591283ef0c062956e1c0586873196200c9 glibc-langpack-bi-2.28-151.el8_4.6.x86_64.rpm SHA-256: 4920a43579e0c349039551e31770107346624b5711fc2581b260b2e6f2ebaf6a glibc-langpack-bn-2.28-151.el8_4.6.x86_64.rpm SHA-256: 35099a90ec158ea6057743629c366435d31a8c5c04f5d38cbf32e2d49e2df262 glibc-langpack-bo-2.28-151.el8_4.6.x86_64.rpm SHA-256: 9ecce5708e86e134810f867c923d897fa6957e753548595f8a7ffc488543fa6f glibc-langpack-br-2.28-151.el8_4.6.x86_64.rpm SHA-256: 22db837ae844645c16254cc32a2e46803ccb533ad066259b3d8e1e81382dd2b6 glibc-langpack-brx-2.28-151.el8_4.6.x86_64.rpm SHA-256: 3a51d97cfaa96186136fc8592a257b289431f8b798f7315799ff1d6f3f9ae744 glibc-langpack-bs-2.28-151.el8_4.6.x86_64.rpm SHA-256: 65c28ca98553ab832212b2969e8551ad3630b6e011d61e2dcf078117edea1ad4 glibc-langpack-byn-2.28-151.el8_4.6.x86_64.rpm SHA-256: 45cfde198869c3bec2ca34756d7de07c5f3629b101c2524d906906af5f2f3322 glibc-langpack-ca-2.28-151.el8_4.6.x86_64.rpm SHA-256: 4895985e12ff35630698e7ae37b3386083b35989076f8fc73a8721829b540108 glibc-langpack-ce-2.28-151.el8_4.6.x86_64.rpm SHA-256: cad0f4dd79c075d21a0f0ffa7712221f8cab3c2ec7c4ba78f564c2ec7516b010 glibc-langpack-chr-2.28-151.el8_4.6.x86_64.rpm SHA-256: 9c1b18bc116c1c7f3b27a88e9f028b30c91d44bc00a33b4a38d9422f6c3486ee glibc-langpack-cmn-2.28-151.el8_4.6.x86_64.rpm SHA-256: f6dbd6250aaa941a4fbe2d4920f863a8f90329c766855d7f0183c11107530571 glibc-langpack-crh-2.28-151.el8_4.6.x86_64.rpm SHA-256: 602e78fd714c5d24c0edd05b149e4a7e14b48b88ac4511ab963f3bfc729871d9 glibc-langpack-cs-2.28-151.el8_4.6.x86_64.rpm SHA-256: 5deedb9afcb7c81e9b0c5c676cf652ba5ad759892fc3a19cd811426936f821e0 glibc-langpack-csb-2.28-151.el8_4.6.x86_64.rpm SHA-256: 1179eb82a91144bf7227d9d016baca005c6077cebecf56ffdc2a5b1182d1b2a1 glibc-langpack-cv-2.28-151.el8_4.6.x86_64.rpm SHA-256: aa56a16697a9b9ca12efe81a01c0815c59eab9788c18f04dc9e495ecc0749082 glibc-langpack-cy-2.28-151.el8_4.6.x86_64.rpm SHA-256: 61e5db1ef79ad255bb555ad5c137d947c12cd1d30227a08382dd49b25bcd7a59 glibc-langpack-da-2.28-151.el8_4.6.x86_64.rpm SHA-256: 2048b5ec7e4f0c30643a534ded5bcd3fe44604432a7c6dfe68fbb2a45c230d05 glibc-langpack-de-2.28-151.el8_4.6.x86_64.rpm SHA-256: ffcfa80fb42212334acdd3cb904359905147f330e5c61774f93a5bc09033533d glibc-langpack-doi-2.28-151.el8_4.6.x86_64.rpm SHA-256: 9f2fad3c16d5354e2c37541819145dd64937a1a1e07ce7effb1eab83c1b6e2b5 glibc-langpack-dsb-2.28-151.el8_4.6.x86_64.rpm SHA-256: 60c8c904c1dc69e485d53d4f9ab804d241a97e20a8b9bfc39e8e2e5db802678c glibc-langpack-dv-2.28-151.el8_4.6.x86_64.rpm SHA-256: 20a221500369fd65db3e4dda9470d2858e9513435a3ca769b6586db4d63c9a71 glibc-langpack-dz-2.28-151.el8_4.6.x86_64.rpm SHA-256: cba1523d5bd8c060ebc25ba46b0f5177cce2f254adbc547aa848a02dc1250441 glibc-langpack-el-2.28-151.el8_4.6.x86_64.rpm SHA-256: 29cd9e8416338d2f88c2888ea34dceffd62b1d9f927915829f0b567b8e32b4d2 glibc-langpack-en-2.28-151.el8_4.6.x86_64.rpm SHA-256: 01286d2f985a477971491f998ade7a953250ef02bf40e320f71dd68449c2cd6a glibc-langpack-eo-2.28-151.el8_4.6.x86_64.rpm SHA-256: 169018b7908902f5854e4861570d0d3750e245a5dc5df3e24999383c58c0fbe9 glibc-langpack-es-2.28-151.el8_4.6.x86_64.rpm SHA-256: 39d9a93353fa5069c238e1dc93833fc73a228047ba718d2fe974d1ec4f89d1b2 glibc-langpack-et-2.28-151.el8_4.6.x86_64.rpm SHA-256: d396467caf0ba68ecf707bd7747845c2404a9516c78e15f3aaf6c23cc1ed552a glibc-langpack-eu-2.28-151.el8_4.6.x86_64.rpm SHA-256: 4d489c42c27e31f6bee9df736534d69ccb8b924722f47bfbf3395c667666c873 glibc-langpack-fa-2.28-151.el8_4.6.x86_64.rpm SHA-256: d5ba9b23f8b59b02404653fdb8fc636e4d89dcabc9e09dcf38e11de795073cba glibc-langpack-ff-2.28-151.el8_4.6.x86_64.rpm SHA-256: 4919455e6a6639568fdd8af5e7291ab01ae6b3c22276f2aae5a4461ef9973a04 glibc-langpack-fi-2.28-151.el8_4.6.x86_64.rpm SHA-256: 746589f828a6a659023e2680511ce69cf66184297a1e859b3c7baebb2961b158 glibc-langpack-fil-2.28-151.el8_4.6.x86_64.rpm SHA-256: 275a29e5253e4fd786fce15f63e455cb1f71643