Red Hat Product Errata RHSA-2026:37396 - Security Advisory Issued: 2026-07-09 Updated: 2026-07-09 RHSA-2026:37396 - Security Advisory Overview Updated Packages Synopsis Moderate: compat-glibc security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for compat-glibc is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This package contains stub shared libraries and static libraries from Red Hat Enterprise Linux 6. To compile and link against these compatibility libraries, use gcc -fgnu89-inline \ I /usr/lib/ppc-redhat-linux6E/include \ B /usr/lib/ppc-redhat-linux6E/lib/ Security Fix(es): glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Fixes BZ - 2459853 - CVE-2026-5450 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width CVEs CVE-2026-5450 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM compat-glibc-2.12-4.el7_9.1.src.rpm SHA-256: e12d0b514307b8906cc4077f179c0a29eaaf5104aa700e2a320b280d9f542c68 x86_64 compat-glibc-2.12-4.el7_9.1.x86_64.rpm SHA-256: d12bc481fc2c20387a6844e1e390def07ec13de31ed2bbf90067cefb8054769a compat-glibc-headers-2.12-4.el7_9.1.x86_64.rpm SHA-256: bd16de1e161259a2420d286e0c0a38108d6764c641d7c38f1a5ec920155820fc Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM compat-glibc-2.12-4.el7_9.1.src.rpm SHA-256: e12d0b514307b8906cc4077f179c0a29eaaf5104aa700e2a320b280d9f542c68 s390x compat-glibc-2.12-4.el7_9.1.s390x.rpm SHA-256: c4e94042640eb3171df7895fbba570f43611c91bef4b230cf82b05943b8b42c5 compat-glibc-headers-2.12-4.el7_9.1.s390x.rpm SHA-256: 126d6006aee4a5b6cdafec38b9b3edc37e73c219eb983ace12ac80891d0145f6 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM compat-glibc-2.12-4.el7_9.1.src.rpm SHA-256: e12d0b514307b8906cc4077f179c0a29eaaf5104aa700e2a320b280d9f542c68 ppc64 compat-glibc-2.12-4.el7_9.1.ppc64.rpm SHA-256: 18776b58fe3bfc19040da033e1ce0d82d2ed221349264ad6929528da28283347 compat-glibc-headers-2.12-4.el7_9.1.ppc64.rpm SHA-256: 0def8e3250bee0202537a3afe63cdb0d52ffd1b6200c777814e8301802efd180 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .