How to determine if my CentOS 8 is vulnerable to CVE-2019-18348
You are on the right track following the Red Hat Service Advisory. The same package that resolves CVE/RHSA upstream will be released for CentOS. Sometimes it is not available as quickly. There is a build for glibc-2.28-72.el8.x86_64.rpm
for CentOS 8, but it doesn't look like it's made it into the repositories yet.
https://koji.mbox.centos.org/koji/buildinfo?buildID=4751
It doesn't help you when the repository metadata isn't aware of a CVE, yet. But, you may want to get familiar with security options to dnf
if you'll be running CentOS systems.
DNF(8) DNF DNF(8)
NAME
dnf - DNF Command Reference
...
--cve=<cves>
Includes packages that fix a CVE (Common Vulnerabilities and Exposures) ID (http://cve.mitre.org/about/), Eg. CVE-2201-0123. Applicable for install,
repoquery, updateinfo, and upgrade command.
...
--security
Includes packages that provides a fix for security issue. Applicable for upgrade command.
Ex:
dnf updateinfo list --cve=CVE-2016-10739