Red Hat Security Advisory

RHSA-2023:5453

glibc security update

Released 2023-10-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) glibc-devel-2.34-60.el9_2.7, glibc-doc-2.34-60.el9_2.7, glibc-headers-2.34-60.el9_2.7 +2
Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-60.el9_2.7, glibc-all-langpacks-2.34-60.el9_2.7, glibc-common-2.34-60.el9_2.7 +47
Red Hat Enterprise Linux CRB (v. 9) glibc-benchtests-2.34-60.el9_2.7, glibc-nss-devel-2.34-60.el9_2.7, glibc-static-2.34-60.el9_2.7 +2

TI-2023-04522 CVE-2023-4911 · GHSA-m77w-6vjw-wh2f

CRITICAL 93KEV

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.63769 Published 2023-10-03 Fixed in 2.39, 2.28-225.el8_8.6 +5 CWE-122

TI-2023-04175 CVE-2023-4527 · GHSA-hmf7-f8gf-8f4p

LOW 32

A flaw was found in glibc.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01669 Published 2023-09-18 Fixed in 2.28-225.el8_8.6, 2.34-60.el9_2.7 CWE-121

TI-2023-04430 CVE-2023-4813 · GHSA-qx6j-g797-jg9r

LOW 30

A flaw has been identified in glibc.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01926 Published 2023-09-12 Partial fix · 2.28-225.el8_8.6, 2.28-189.8.el8_6 +1 CWE-416

TI-2023-04423 CVE-2023-4806 · GHSA-5f52-v49r-796w

LOW 30

A flaw has been identified in glibc.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01606 Published 2023-09-18 Partial fix · 2.28-225.el8_8.6, 2.28-189.8.el8_6 +1 CWE-416