Buffer overflow in GNU C Library (glibc) - CVE-2025-0395

Vulnerability identifier: #VU103687

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-0395

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when the assert() function fails. A remote attacker can trigger memory corruption and perform a denial of service (DoS) attack.

GNU C Library (glibc)
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
Gentoo Linux
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Micro
SUSE Linux Micro Extras
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Development Tools Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
IBM Concert Software
Netcool Operations Insight
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Submariner
Multicluster GlobalHub
Red Hat Advanced Cluster Management for Kubernetes
APEX Cloud Platform for Red Hat OpenShift
IBM MQ Operator
Red Hat OpenShift Dev Spaces
OpenShift Logging
Dell Secure Connect Gateway
PowerProtect Data Manager
Red Hat build of Keycloak
Guardium Data Security Center (GDSC)
IBM Cloud Pak for Watson AIOps
Robotic Process Automation for Cloud Pak
APEX Cloud Platform for Microsoft Azure
Storage Resource Manager
SmartFabric OS10
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libc6 (Ubuntu package)
glibc-devel-static
glibc-debuginfo
glibc-devel
glibc-debugsource
glibc-info
glibc-html
glibc-i18ndata
glibc-debuginfo-32bit
glibc-locale-32bit
glibc-devel-32bit
nscd-debuginfo
glibc-locale-debuginfo
glibc-32bit
glibc-profile
glibc-locale-debuginfo-32bit
glibc-locale
glibc-profile-32bit
glibc-devel-debuginfo
nscd
glibc
glibc-devel-debuginfo-32bit
glibc (Red Hat package)
glibc-langpack-ml
glibc-langpack-mk
glibc-langpack-mjw
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lg
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-or
glibc-langpack-ne
glibc-langpack-ga
glibc-langpack-om
glibc-langpack-oc
glibc-langpack-nso
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-nl
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-mn
glibc-langpack-nds
glibc-langpack-nb
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-ms
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-he
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-id
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-fa
glibc-langpack-kk
glibc-langpack-ky
glibc-langpack-kw
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-lb
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-tt
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-wal
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-locale-source
glibc-doc
nss_hesiod
nss_db
libnsl
glibc-utils
glibc-static
glibc-nss-devel
glibc-minimal-langpack
glibc-langpack-the
glibc-langpack-zu
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-ru
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sa
glibc-langpack-rw
glibc-langpack-shs
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-quz
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-ss
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-st
glibc-langpack-os
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-sl
glibc-langpack-sk
glibc-langpack-sid
glibc-langpack-si
glibc-langpack-an
glibc-langpack-bo
glibc-langpack-bn
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-ber
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-fur
glibc-langpack-am
glibc-langpack-ak
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-headers
glibc-gconv-extra
glibc-common
glibc-benchtests
glibc-all-langpacks
compat-libpthread-nonshared
glibc-langpack-fy
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-fr
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-dsb
glibc-langpack-de
glibc-langpack-doi
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-cs
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-devel-static-32bit
glibc-32bit-debuginfo
glibc-lang
glibc-profile-64bit
glibc-utils-debuginfo
glibc-utils-src-debugsource
glibc-extra-debuginfo
glibc-devel-32bit-debuginfo
glibc-locale-base-32bit
glibc-utils-32bit
glibc-utils-32bit-debuginfo
glibc-locale-base-32bit-debuginfo
glibc-utils-64bit-debuginfo
glibc-locale-base-64bit-debuginfo
glibc-devel-64bit-debuginfo
glibc-devel-static-64bit
glibc-utils-64bit
glibc-64bit-debuginfo
glibc-64bit
glibc-devel-64bit
glibc-locale-base-64bit
glibc-extra
glibc-locale-base
glibc-locale-base-debuginfo
glibc-help
nss_modules
glibc-locale-archive
glibc-debugutils
libnsl1-64bit-debuginfo
libnsl1-64bit
libnsl1
libnsl1-debuginfo
libnsl1-32bit
libnsl1-32bit-debuginfo
sys-libs/glibc
glibc-gconv-modules-extra-debuginfo
glibc-gconv-modules-extra
Dell EMC NetWorker vProxy
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
SmartFabric Manager
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Red Hat OpenShift GitOps
Dell EMC Storage Monitoring and Reporting (SMR)
Red Hat Ceph Storage
IBM CICS TX Advanced
IBM App Connect Enterprise

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.41
IBM Concert Software - update to 2.0.0
Netcool Operations Insight - update to 1.6.15
Guardium Data Security Center (GDSC) - update to 3.7.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.0
IBM Cloud Pak for Watson AIOps - update to 4.10.0
IBM Qradar SIEM - update to 7.5.0 Update Pack 12 IF02
Dell EMC NetWorker vProxy - addressed in versions 19.11.0.6, 19.12.0.2
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.21, 23.0.20.3
libc6 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.31-0ubuntu9.17, 2.35-0ubuntu3.9, 2.39-0ubuntu8.4, 2.40-1ubuntu3.1
Submariner - addressed in versions 0.17.6, 0.18.5
Red Hat OpenShift Serverless - update to 1
Multicluster GlobalHub - update to 1.2.3
SmartFabric Manager - update to 1.3.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
OpenShift API for Data Protection (OADP) - update to 1.4.5
Migration Toolkit for Containers - update to 1.8.7
Red Hat OpenShift GitOps - update to 1.16.1
Multicluster Engine for Kubernetes - addressed in versions 2.4.9, 2.5.9, 2.6.7
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.9.9, 2.10.8, 2.11.7
glibc-devel-static - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-debuginfo - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
glibc-devel - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
glibc-debugsource - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
glibc-info - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-html - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-i18ndata - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-debuginfo-32bit - update to 2.22-114.40.1
glibc-locale-32bit - update to 2.22-114.40.1
glibc-devel-32bit - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
nscd-debuginfo - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-debuginfo - update to 2.22-114.40.1
glibc-32bit - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-profile - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-debuginfo-32bit - update to 2.22-114.40.1
glibc-locale - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
glibc-profile-32bit - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-devel-debuginfo - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
nscd - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1
glibc - addressed in versions 2.22-114.40.1, 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
glibc-devel-debuginfo-32bit - update to 2.22-114.40.1
glibc (Red Hat package) - addressed in versions 2.28-251.el8_10.16, 2.34-28.el9_0.8, 2.34-100.el9_4.10, 2.34-125.el9_5.8
glibc-langpack-ml - update to 2.28-251.0.2
glibc-langpack-mk - update to 2.28-251.0.2
glibc-langpack-mjw - update to 2.28-251.0.2
glibc-langpack-miq - update to 2.28-251.0.2
glibc-langpack-mi - update to 2.28-251.0.2
glibc-langpack-mhr - update to 2.28-251.0.2
glibc-langpack-mg - update to 2.28-251.0.2
glibc-langpack-mfe - update to 2.28-251.0.2
glibc-langpack-mai - update to 2.28-251.0.2
glibc-langpack-mag - update to 2.28-251.0.2
glibc-langpack-lzh - update to 2.28-251.0.2
glibc-langpack-lg - update to 2.28-251.0.2
glibc-langpack-lv - update to 2.28-251.0.2
glibc-langpack-lt - update to 2.28-251.0.2
glibc-langpack-lo - update to 2.28-251.0.2
glibc-langpack-ln - update to 2.28-251.0.2
glibc-langpack-lij - update to 2.28-251.0.2
glibc-langpack-li - update to 2.28-251.0.2
glibc-langpack-or - update to 2.28-251.0.2
glibc-langpack-ne - update to 2.28-251.0.2
glibc-langpack-ga - update to 2.28-251.0.2
glibc-langpack-om - update to 2.28-251.0.2
glibc-langpack-oc - update to 2.28-251.0.2
glibc-langpack-nso - update to 2.28-251.0.2
glibc-langpack-nr - update to 2.28-251.0.2
glibc-langpack-nn - update to 2.28-251.0.2
glibc-langpack-nl - update to 2.28-251.0.2
glibc-langpack-niu - update to 2.28-251.0.2
glibc-langpack-nhn - update to 2.28-251.0.2
glibc-langpack-mn - update to 2.28-251.0.2
glibc-langpack-nds - update to 2.28-251.0.2
glibc-langpack-nb - update to 2.28-251.0.2
glibc-langpack-nan - update to 2.28-251.0.2
glibc-langpack-my - update to 2.28-251.0.2
glibc-langpack-mt - update to 2.28-251.0.2
glibc-langpack-ms - update to 2.28-251.0.2
glibc-langpack-mr - update to 2.28-251.0.2
glibc-langpack-mni - update to 2.28-251.0.2
glibc-langpack-he - update to 2.28-251.0.2
glibc-langpack-ia - update to 2.28-251.0.2
glibc-langpack-hy - update to 2.28-251.0.2
glibc-langpack-hu - update to 2.28-251.0.2
glibc-langpack-ht - update to 2.28-251.0.2
glibc-langpack-hsb - update to 2.28-251.0.2
glibc-langpack-hr - update to 2.28-251.0.2
glibc-langpack-hne - update to 2.28-251.0.2
glibc-langpack-hif - update to 2.28-251.0.2
glibc-langpack-hi - update to 2.28-251.0.2
glibc-langpack-id - update to 2.28-251.0.2
glibc-langpack-hak - update to 2.28-251.0.2
glibc-langpack-ha - update to 2.28-251.0.2
glibc-langpack-gv - update to 2.28-251.0.2
glibc-langpack-gu - update to 2.28-251.0.2
glibc-langpack-gl - update to 2.28-251.0.2
glibc-langpack-gez - update to 2.28-251.0.2
glibc-langpack-gd - update to 2.28-251.0.2
glibc-langpack-fa - update to 2.28-251.0.2
glibc-langpack-kk - update to 2.28-251.0.2
glibc-langpack-ky - update to 2.28-251.0.2
glibc-langpack-kw - update to 2.28-251.0.2
glibc-langpack-ku - update to 2.28-251.0.2
glibc-langpack-ks - update to 2.28-251.0.2
glibc-langpack-kok - update to 2.28-251.0.2
glibc-langpack-ko - update to 2.28-251.0.2
glibc-langpack-kn - update to 2.28-251.0.2
glibc-langpack-km - update to 2.28-251.0.2
glibc-langpack-kl - update to 2.28-251.0.2
glibc-langpack-lb - update to 2.28-251.0.2
glibc-langpack-kab - update to 2.28-251.0.2
glibc-langpack-ka - update to 2.28-251.0.2
glibc-langpack-ja - update to 2.28-251.0.2
glibc-langpack-iu - update to 2.28-251.0.2
glibc-langpack-it - update to 2.28-251.0.2
glibc-langpack-is - update to 2.28-251.0.2
glibc-langpack-ik - update to 2.28-251.0.2
glibc-langpack-ig - update to 2.28-251.0.2
glibc-langpack-tt - update to 2.28-251.0.2
glibc-langpack-wae - update to 2.28-251.0.2
glibc-langpack-wa - update to 2.28-251.0.2
glibc-langpack-vi - update to 2.28-251.0.2
glibc-langpack-ve - update to 2.28-251.0.2
glibc-langpack-uz - update to 2.28-251.0.2
glibc-langpack-ur - update to 2.28-251.0.2
glibc-langpack-unm - update to 2.28-251.0.2
glibc-langpack-uk - update to 2.28-251.0.2
glibc-langpack-ug - update to 2.28-251.0.2
glibc-langpack-wal - update to 2.28-251.0.2
glibc-langpack-ts - update to 2.28-251.0.2
glibc-langpack-tr - update to 2.28-251.0.2
glibc-langpack-tpi - update to 2.28-251.0.2
glibc-langpack-to - update to 2.28-251.0.2
glibc-langpack-tn - update to 2.28-251.0.2
glibc-langpack-tl - update to 2.28-251.0.2
glibc-langpack-tk - update to 2.28-251.0.2
glibc-langpack-tig - update to 2.28-251.0.2
glibc-langpack-ti - update to 2.28-251.0.2
glibc-locale-source - update to 2.28-251.0.2
glibc-doc - update to 2.28-251.0.2
nss_hesiod - update to 2.28-251.0.2
nss_db - update to 2.28-251.0.2
nscd - update to 2.28-251.0.2
libnsl - update to 2.28-251.0.2
glibc-utils - update to 2.28-251.0.2
glibc-static - update to 2.28-251.0.2
glibc-nss-devel - update to 2.28-251.0.2
glibc-minimal-langpack - update to 2.28-251.0.2
glibc-langpack-the - update to 2.28-251.0.2
glibc-langpack-zu - update to 2.28-251.0.2
glibc-langpack-zh - update to 2.28-251.0.2
glibc-langpack-yuw - update to 2.28-251.0.2
glibc-langpack-yue - update to 2.28-251.0.2
glibc-langpack-yo - update to 2.28-251.0.2
glibc-langpack-yi - update to 2.28-251.0.2
glibc-langpack-xh - update to 2.28-251.0.2
glibc-langpack-wo - update to 2.28-251.0.2
glibc-langpack-ru - update to 2.28-251.0.2
glibc-langpack-shn - update to 2.28-251.0.2
glibc-langpack-sgs - update to 2.28-251.0.2
glibc-langpack-se - update to 2.28-251.0.2
glibc-langpack-sd - update to 2.28-251.0.2
glibc-langpack-sc - update to 2.28-251.0.2
glibc-langpack-sat - update to 2.28-251.0.2
glibc-langpack-sah - update to 2.28-251.0.2
glibc-langpack-sa - update to 2.28-251.0.2
glibc-langpack-rw - update to 2.28-251.0.2
glibc-langpack-shs - update to 2.28-251.0.2
glibc-langpack-ro - update to 2.28-251.0.2
glibc-langpack-raj - update to 2.28-251.0.2
glibc-langpack-quz - update to 2.28-251.0.2
glibc-langpack-pt - update to 2.28-251.0.2
glibc-langpack-ps - update to 2.28-251.0.2
glibc-langpack-pl - update to 2.28-251.0.2
glibc-langpack-pap - update to 2.28-251.0.2
glibc-langpack-pa - update to 2.28-251.0.2
glibc-langpack-ss - update to 2.28-251.0.2
glibc-langpack-th - update to 2.28-251.0.2
glibc-langpack-tg - update to 2.28-251.0.2
glibc-langpack-te - update to 2.28-251.0.2
glibc-langpack-tcy - update to 2.28-251.0.2
glibc-langpack-ta - update to 2.28-251.0.2
glibc-langpack-szl - update to 2.28-251.0.2
glibc-langpack-sw - update to 2.28-251.0.2
glibc-langpack-sv - update to 2.28-251.0.2
glibc-langpack-st - update to 2.28-251.0.2
glibc-langpack-os - update to 2.28-251.0.2
glibc-langpack-sr - update to 2.28-251.0.2
glibc-langpack-sq - update to 2.28-251.0.2
glibc-langpack-so - update to 2.28-251.0.2
glibc-langpack-sm - update to 2.28-251.0.2
glibc-langpack-sl - update to 2.28-251.0.2
glibc-langpack-sk - update to 2.28-251.0.2
glibc-langpack-sid - update to 2.28-251.0.2
glibc-langpack-si - update to 2.28-251.0.2
glibc-langpack-an - update to 2.28-251.0.2
glibc-langpack-bo - update to 2.28-251.0.2
glibc-langpack-bn - update to 2.28-251.0.2
glibc-langpack-bi - update to 2.28-251.0.2
glibc-langpack-bho - update to 2.28-251.0.2
glibc-langpack-bhb - update to 2.28-251.0.2
glibc-langpack-bg - update to 2.28-251.0.2
glibc-langpack-ber - update to 2.28-251.0.2
glibc-langpack-bem - update to 2.28-251.0.2
glibc-langpack-be - update to 2.28-251.0.2
glibc-langpack-az - update to 2.28-251.0.2
glibc-langpack-ayc - update to 2.28-251.0.2
glibc-langpack-ast - update to 2.28-251.0.2
glibc-langpack-as - update to 2.28-251.0.2
glibc-langpack-ar - update to 2.28-251.0.2
glibc-langpack-anp - update to 2.28-251.0.2
glibc-langpack-fur - update to 2.28-251.0.2
glibc-langpack-am - update to 2.28-251.0.2
glibc-langpack-ak - update to 2.28-251.0.2
glibc-langpack-agr - update to 2.28-251.0.2
glibc-langpack-af - update to 2.28-251.0.2
glibc-langpack-aa - update to 2.28-251.0.2
glibc-headers - update to 2.28-251.0.2
glibc-gconv-extra - update to 2.28-251.0.2
glibc-devel - update to 2.28-251.0.2
glibc-common - update to 2.28-251.0.2
glibc-benchtests - update to 2.28-251.0.2
glibc-all-langpacks - update to 2.28-251.0.2
glibc - update to 2.28-251.0.2
compat-libpthread-nonshared - update to 2.28-251.0.2
glibc-langpack-fy - update to 2.28-251.0.2
glibc-langpack-brx - update to 2.28-251.0.2
glibc-langpack-br - update to 2.28-251.0.2
glibc-langpack-fr - update to 2.28-251.0.2
glibc-langpack-fo - update to 2.28-251.0.2
glibc-langpack-fil - update to 2.28-251.0.2
glibc-langpack-fi - update to 2.28-251.0.2
glibc-langpack-ff - update to 2.28-251.0.2
glibc-langpack-eu - update to 2.28-251.0.2
glibc-langpack-et - update to 2.28-251.0.2
glibc-langpack-es - update to 2.28-251.0.2
glibc-langpack-eo - update to 2.28-251.0.2
glibc-langpack-en - update to 2.28-251.0.2
glibc-langpack-el - update to 2.28-251.0.2
glibc-langpack-dz - update to 2.28-251.0.2
glibc-langpack-dv - update to 2.28-251.0.2
glibc-langpack-dsb - update to 2.28-251.0.2
glibc-langpack-de - update to 2.28-251.0.2
glibc-langpack-doi - update to 2.28-251.0.2
glibc-langpack-bs - update to 2.28-251.0.2
glibc-langpack-byn - update to 2.28-251.0.2
glibc-langpack-ca - update to 2.28-251.0.2
glibc-langpack-ce - update to 2.28-251.0.2
glibc-langpack-chr - update to 2.28-251.0.2
glibc-langpack-cmn - update to 2.28-251.0.2
glibc-langpack-crh - update to 2.28-251.0.2
glibc-langpack-cs - update to 2.28-251.0.2
glibc-langpack-csb - update to 2.28-251.0.2
glibc-langpack-cv - update to 2.28-251.0.2
glibc-langpack-cy - update to 2.28-251.0.2
glibc-langpack-da - update to 2.28-251.0.2
glibc-devel-static-32bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-32bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-lang - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-profile-64bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils-src-debugsource - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-extra-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-devel-32bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-base-32bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils-32bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils-32bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils-64bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-base-64bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-devel-64bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-devel-static-64bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-utils-64bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-64bit-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-64bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-devel-64bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-base-64bit - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-extra - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc-locale-base - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1, 2.40-160000.3.1
glibc-locale-base-debuginfo - addressed in versions 2.31-150300.92.1, 2.38-150600.14.23.1
glibc - update to 2.38-54
glibc-help - update to 2.38-54
nss_modules - update to 2.38-54
nscd - update to 2.38-54
libnsl - update to 2.38-54
glibc-nss-devel - update to 2.38-54
glibc-locale-source - update to 2.38-54
glibc-locale-archive - update to 2.38-54
glibc-devel - update to 2.38-54
glibc-debugutils - update to 2.38-54
glibc-debugsource - update to 2.38-54
glibc-debuginfo - update to 2.38-54
glibc-common - update to 2.38-54
glibc-all-langpacks - update to 2.38-54
libnsl1-64bit-debuginfo - update to 2.38-150600.14.23.1
libnsl1-64bit - update to 2.38-150600.14.23.1
libnsl1 - update to 2.38-150600.14.23.1
libnsl1-debuginfo - update to 2.38-150600.14.23.1
libnsl1-32bit - update to 2.38-150600.14.23.1
libnsl1-32bit-debuginfo - update to 2.38-150600.14.23.1
glibc - addressed in versions 2.39-37.fc40, 2.40-21.fc41
sys-libs/glibc - update to 2.40-r8
glibc-gconv-modules-extra-debuginfo - update to 2.40-160000.3.1
glibc-gconv-modules-extra - update to 2.40-160000.3.1
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
IBM MQ Operator - addressed in versions 3.2.12, 3.5.3, 9.4.2.1-r2
Red Hat OpenShift Dev Spaces - update to 3.21.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4, 4.14.18, 4.15.14, 4.17.7
Red Hat OpenShift Container Platform - addressed in versions 4.12.76, 4.13.58, 4.14.51, 4.14.52, 4.15.50, 4.16.40, 4.17.28, 4.18.12, 4.18.13
Storage Resource Manager - addressed in versions 5.0.2.2, 5.1.0.0
Dell EMC Storage Monitoring and Reporting (SMR) - addressed in versions 5.0.2.2, 5.1.0.0
OpenShift Logging - addressed in versions 5.8.20, 5.9.14
Dell Secure Connect Gateway - update to 5.28.00.14
Red Hat Ceph Storage - update to 7.1
IBM CICS TX Advanced - update to 10.1.0.0 ifix37
SmartFabric OS10 - update to 10.6.0.3
IBM App Connect Enterprise - addressed in versions 12.0.12, 12.12.0
PowerProtect Data Manager - update to 19.19.0-15
Red Hat build of Keycloak - update to 26.0.11

• https://sourceware.org/bugzilla/show_bug.cgi?id=32582
• https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001
• https://sourceware.org/pipermail/libc-announce/2025/000044.html
• https://www.openwall.com/lists/oss-security/2025/01/22/4
• http://www.openwall.com/lists/oss-security/2025/01/22/4
• http://www.openwall.com/lists/oss-security/2025/01/23/2

• Denial of service in GNU C Library
• Ubuntu update for glibc
• Fedora 41 update for glibc
• Fedora 40 update for glibc
• Ubuntu update for glibc
• SUSE update for glibc
• SUSE update for glibc
• SUSE update for glibc
• openEuler update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Anolis OS update for glibc
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Multiple vulnerabilities in Dell PowerProtect Data Manager
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat build of Keycloak 26.0
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Submariner 0.18
• Gentoo update for glibc
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Networking OS10
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM MQ Operator
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.9
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Dell SmartFabric Manager update for third-party components
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Multicluster GlobalHub 1.2
• Multiple vulnerabilities in Submariner 0.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.4
• Dell EMC NetWorker vProxy update for third-party components
• Multiple vulnerabilities in IBM Concert Software
• IBM Robotic Process Automation for Cloud Pak update for GNU C Library
• Multiple vulnerabilities in Netcool Operations Insight
• SUSE update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.21