Red Hat Security Advisory

RHSA-2025:9336

glibc security update

Released 2025-06-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) glibc-benchtests-2.34-100.el9_4.12, glibc-nss-devel-2.34-100.el9_4.12, glibc-static-2.34-100.el9_4.12 +2
Red Hat Enterprise Linux AppStream EUS (v.9.4) glibc-devel-2.34-100.el9_4.12, glibc-doc-2.34-100.el9_4.12, glibc-headers-2.34-100.el9_4.12 +2
Red Hat Enterprise Linux BaseOS EUS (v.9.4) glibc-2.34-100.el9_4.12, glibc-all-langpacks-2.34-100.el9_4.12, glibc-common-2.34-100.el9_4.12 +47

Fixes 1 record

TI-2025-04297 CVE-2025-4802 · GHSA-8mm9-c4mg-vfjh

Untrusted search path in GNU glibc

LOW 37

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlo…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00593 Published 2025-05-16 Partial fix · 2.39 CWE-426