The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780995582 advisory.

  - The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer     fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing     TSIG records. (CVE-2026-5435)

  - Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version     2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in     a one byte heap buffer overflow. (CVE-2026-5450)

  - Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has     overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or     earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in     unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character     pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the     regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer     (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not     initialized and hence points to NULL. The buffer under-read requires a special situation where the input     character encoding is such that there are overlaps between single byte representations and multibyte     representations in that encoding, resulting in spurious matches. The spurious match case is not possible     in the standard Unicode character sets. (CVE-2026-5928)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1780995582)

critical Nessus Plugin ID 360733

Version 1.2