Red Hat Security AdvisoryRHSA-2023:5454
glibc security update
Released 2023-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) glibc-benchtests-2.34-28.el9_0.4, glibc-nss-devel-2.34-28.el9_0.4, glibc-static-2.34-28.el9_0.4 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.0) glibc-devel-2.34-28.el9_0.4, glibc-doc-2.34-28.el9_0.4, glibc-headers-2.34-28.el9_0.4 +2
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) glibc-2.34-28.el9_0.4, glibc-all-langpacks-2.34-28.el9_0.4, glibc-common-2.34-28.el9_0.4 +47
Fixes 1 record
Priority CRITICAL 93KEV
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.63769 · Published 2023-10-03 · Fixed in 2.39, 2.28-225.el8_8.6 +5 CWE-122
