Red Hat Security Advisory

RHSA-2024:0033

Red Hat Virtualization Host 4.4.z SP 1 security update

Released 2024-01-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL 8-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host-4.5.3-10.el8ev, redhat-release-virtualization-host-content-4.5.3-10.el8ev, redhat-virtualization-host-image-update-placeholder-4.5.3-10.el8ev
Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202312060823_8.6, redhat-virtualization-host-image-update-4.5.3-202312060823_8.6

TI-2023-04522 CVE-2023-4911 · GHSA-m77w-6vjw-wh2f

CRITICAL 93KEV

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.63769 Published 2023-10-03 Fixed in 2.39, 2.28-225.el8_8.6 +5 CWE-122