Red Hat Security AdvisoryRHSA-2023:5476
glibc security update
Released 2023-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.6) glibc-benchtests-2.28-189.6.el8_6, glibc-nss-devel-2.28-189.6.el8_6, glibc-static-2.28-189.6.el8_6 +1
- Red Hat Enterprise Linux AppStream EUS (v.8.6) compat-libpthread-nonshared-2.28-189.6.el8_6, glibc-utils-2.28-189.6.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) glibc-2.28-189.6.el8_6, glibc-all-langpacks-2.28-189.6.el8_6, glibc-common-2.28-189.6.el8_6 +47
- Red Hat Virtualization 4 Hypervisor for RHEL 8 glibc-devel-2.28-189.6.el8_6, glibc-headers-2.28-189.6.el8_6
Fixes 1 record
Priority CRITICAL 93KEV
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.63769 · Published 2023-10-03 · Fixed in 2.39, 2.28-225.el8_8.6 +5 CWE-122
