Untrusted search path in GNU C Library (glibc) - CVE-2025-4802

Vulnerability identifier: #VU109844

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-4802

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted LD_LIBRARY_PATH environment variable. A local user can use the LD_LIBRARY_PATH environment variable to point to a malicious binary and execute arbitrary code with escalated privileges.

The vulnerability affects statically linked setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

GNU C Library (glibc)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Observability with Instana
Netcool Operations Insight
Oracle Communications Cloud Native Core Binding Support Function
Service Interconnect
Splunk Operator for Kubernetes Add-on
Red Hat Advanced Cluster Security for Kubernetes
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
Gentoo Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - AUS
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Basesystem Module
Development Tools Module
openSUSE Leap
Ubuntu
openEuler
Guardium Data Security Center (GDSC)
DataStage on Cloud Pak for Data
IBM Qradar SIEM
IBM DataPower Gateway
Red Hat OpenShift Container Platform
Oracle Communications Cloud Native Core Console
Oracle Communications Cloud Native Core Policy
Red Hat OpenShift Serverless
OpenShift API for Data Protection (OADP)
glibc (Red Hat package)
glibc (Ubuntu package)
glibc-langpack-iu
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-kw
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-mag
glibc-langpack-mn
glibc-langpack-ml
glibc-langpack-mk
glibc-langpack-mjw
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-hr
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-lg
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-dv
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-fo
glibc-langpack-dsb
glibc-langpack-doi
glibc-langpack-de
glibc-langpack-da
glibc-langpack-cy
glibc-langpack-cv
glibc-langpack-csb
glibc-langpack-cs
glibc-langpack-crh
glibc-langpack-cmn
glibc-langpack-gez
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-he
glibc-langpack-br
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-chr
glibc-langpack-gd
glibc-langpack-byn
glibc-langpack-brx
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-fur
glibc-langpack-bs
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-fr
glibc-langpack-tk
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-uz
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-zh
glibc-doc
nss_hesiod
nss_db
nscd
libnsl
glibc-utils
glibc-static
glibc-nss-devel
glibc-minimal-langpack
glibc-locale-source
glibc-langpack-zu
glibc-langpack-st
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-nn
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-os
glibc-langpack-or
glibc-langpack-om
glibc-langpack-oc
glibc-langpack-nso
glibc-langpack-nr
glibc-langpack-quz
glibc-langpack-nl
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-nb
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-ms
glibc-langpack-mr
glibc-langpack-sgs
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-sl
glibc-langpack-sk
glibc-langpack-sid
glibc-langpack-si
glibc-langpack-shs
glibc-langpack-shn
glibc-langpack-mni
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sa
glibc-langpack-rw
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-bn
glibc-langpack-bo
compat-libpthread-nonshared
glibc
glibc-all-langpacks
glibc-benchtests
glibc-common
glibc-devel
glibc-gconv-extra
glibc-headers
glibc-langpack-aa
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-ak
glibc-langpack-am
glibc-langpack-an
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-ber
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-bem
glibc-locale-base-32bit
glibc-32bit-debuginfo
glibc-devel-static-32bit
glibc-32bit
glibc-devel-32bit
glibc-utils-32bit
glibc-locale-base-32bit-debuginfo
glibc-devel-32bit-debuginfo
glibc-profile-32bit
glibc-utils-32bit-debuginfo
glibc-64bit
glibc-devel-64bit-debuginfo
glibc-utils-64bit-debuginfo
glibc-64bit-debuginfo
glibc-profile-64bit
glibc-locale-base-64bit-debuginfo
glibc-devel-static-64bit
glibc-locale-base-64bit
glibc-devel-64bit
glibc-utils-64bit
glibc-extra
glibc-devel-debuginfo
glibc-devel-static
glibc-locale
glibc-debuginfo
glibc-locale-base
glibc-locale-base-debuginfo
glibc-debugsource
glibc-profile
glibc-info
glibc-utils-src-debugsource
glibc-utils-debuginfo
nscd-debuginfo
glibc-extra-debuginfo
glibc-i18ndata
glibc-html
glibc-lang
glibc-compat-2.17
glibc-debugutils
glibc-locale-archive
nss_modules
glibc-help
libnsl1-64bit-debuginfo
libnsl1-64bit
libnsl1-debuginfo
libnsl1
libnsl1-32bit
libnsl1-32bit-debuginfo
sys-libs/glibc
Red Hat Ceph Storage
IBM CICS TX Advanced
IBM CICS TX Standard

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.39
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.1
IBM Observability with Instana - update to 1.0.298
Netcool Operations Insight - update to 1.6.15
Guardium Data Security Center (GDSC) - update to 3.8.1
DataStage on Cloud Pak for Data - update to 5.2.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 13
IBM DataPower Gateway - update to 10.6.6.0
Red Hat OpenShift Serverless - update to 1
OpenShift API for Data Protection (OADP) - addressed in versions 1.3.7, 1.4.5
Service Interconnect - update to 1.4
glibc (Red Hat package) - addressed in versions 2.17-292.el7_7.3, 2.17-326.el7_9.5, 2.34-168.el9_6.19
glibc (Ubuntu package) - addressed in versions 2.27-3ubuntu1.6+esm5, 2.31-0ubuntu9.18, 2.35-0ubuntu3.10
glibc-langpack-iu - update to 2.28-251.0.2
glibc-langpack-ku - update to 2.28-251.0.2
glibc-langpack-ks - update to 2.28-251.0.2
glibc-langpack-kok - update to 2.28-251.0.2
glibc-langpack-ko - update to 2.28-251.0.2
glibc-langpack-kn - update to 2.28-251.0.2
glibc-langpack-km - update to 2.28-251.0.2
glibc-langpack-kl - update to 2.28-251.0.2
glibc-langpack-kk - update to 2.28-251.0.2
glibc-langpack-kab - update to 2.28-251.0.2
glibc-langpack-ka - update to 2.28-251.0.2
glibc-langpack-ja - update to 2.28-251.0.2
glibc-langpack-kw - update to 2.28-251.0.2
glibc-langpack-it - update to 2.28-251.0.2
glibc-langpack-is - update to 2.28-251.0.2
glibc-langpack-ik - update to 2.28-251.0.2
glibc-langpack-ig - update to 2.28-251.0.2
glibc-langpack-id - update to 2.28-251.0.2
glibc-langpack-ia - update to 2.28-251.0.2
glibc-langpack-hy - update to 2.28-251.0.2
glibc-langpack-hu - update to 2.28-251.0.2
glibc-langpack-ht - update to 2.28-251.0.2
glibc-langpack-hsb - update to 2.28-251.0.2
glibc-langpack-mag - update to 2.28-251.0.2
glibc-langpack-mn - update to 2.28-251.0.2
glibc-langpack-ml - update to 2.28-251.0.2
glibc-langpack-mk - update to 2.28-251.0.2
glibc-langpack-mjw - update to 2.28-251.0.2
glibc-langpack-miq - update to 2.28-251.0.2
glibc-langpack-mi - update to 2.28-251.0.2
glibc-langpack-mhr - update to 2.28-251.0.2
glibc-langpack-mg - update to 2.28-251.0.2
glibc-langpack-mfe - update to 2.28-251.0.2
glibc-langpack-mai - update to 2.28-251.0.2
glibc-langpack-hr - update to 2.28-251.0.2
glibc-langpack-lzh - update to 2.28-251.0.2
glibc-langpack-lv - update to 2.28-251.0.2
glibc-langpack-lt - update to 2.28-251.0.2
glibc-langpack-lo - update to 2.28-251.0.2
glibc-langpack-ln - update to 2.28-251.0.2
glibc-langpack-lij - update to 2.28-251.0.2
glibc-langpack-li - update to 2.28-251.0.2
glibc-langpack-lg - update to 2.28-251.0.2
glibc-langpack-lb - update to 2.28-251.0.2
glibc-langpack-ky - update to 2.28-251.0.2
glibc-langpack-dv - update to 2.28-251.0.2
glibc-langpack-fil - update to 2.28-251.0.2
glibc-langpack-fi - update to 2.28-251.0.2
glibc-langpack-ff - update to 2.28-251.0.2
glibc-langpack-fa - update to 2.28-251.0.2
glibc-langpack-eu - update to 2.28-251.0.2
glibc-langpack-et - update to 2.28-251.0.2
glibc-langpack-es - update to 2.28-251.0.2
glibc-langpack-eo - update to 2.28-251.0.2
glibc-langpack-en - addressed in versions 2.28-251.0.2, 2.38-8
glibc-langpack-el - update to 2.28-251.0.2
glibc-langpack-dz - update to 2.28-251.0.2
glibc-langpack-fo - update to 2.28-251.0.2
glibc-langpack-dsb - update to 2.28-251.0.2
glibc-langpack-doi - update to 2.28-251.0.2
glibc-langpack-de - update to 2.28-251.0.2
glibc-langpack-da - update to 2.28-251.0.2
glibc-langpack-cy - update to 2.28-251.0.2
glibc-langpack-cv - update to 2.28-251.0.2
glibc-langpack-csb - update to 2.28-251.0.2
glibc-langpack-cs - update to 2.28-251.0.2
glibc-langpack-crh - update to 2.28-251.0.2
glibc-langpack-cmn - update to 2.28-251.0.2
glibc-langpack-gez - update to 2.28-251.0.2
glibc-langpack-hne - update to 2.28-251.0.2
glibc-langpack-hif - update to 2.28-251.0.2
glibc-langpack-hi - update to 2.28-251.0.2
glibc-langpack-he - update to 2.28-251.0.2
glibc-langpack-br - update to 2.28-251.0.2
glibc-langpack-hak - update to 2.28-251.0.2
glibc-langpack-ha - update to 2.28-251.0.2
glibc-langpack-gv - update to 2.28-251.0.2
glibc-langpack-gu - update to 2.28-251.0.2
glibc-langpack-gl - update to 2.28-251.0.2
glibc-langpack-chr - update to 2.28-251.0.2
glibc-langpack-gd - update to 2.28-251.0.2
glibc-langpack-byn - update to 2.28-251.0.2
glibc-langpack-brx - update to 2.28-251.0.2
glibc-langpack-ga - update to 2.28-251.0.2
glibc-langpack-fy - update to 2.28-251.0.2
glibc-langpack-fur - update to 2.28-251.0.2
glibc-langpack-bs - update to 2.28-251.0.2
glibc-langpack-ca - update to 2.28-251.0.2
glibc-langpack-ce - update to 2.28-251.0.2
glibc-langpack-fr - update to 2.28-251.0.2
glibc-langpack-tk - update to 2.28-251.0.2
glibc-langpack-ur - update to 2.28-251.0.2
glibc-langpack-unm - update to 2.28-251.0.2
glibc-langpack-uk - update to 2.28-251.0.2
glibc-langpack-ug - update to 2.28-251.0.2
glibc-langpack-tt - update to 2.28-251.0.2
glibc-langpack-ts - update to 2.28-251.0.2
glibc-langpack-tr - update to 2.28-251.0.2
glibc-langpack-tpi - update to 2.28-251.0.2
glibc-langpack-to - update to 2.28-251.0.2
glibc-langpack-tn - update to 2.28-251.0.2
glibc-langpack-tl - update to 2.28-251.0.2
glibc-langpack-uz - update to 2.28-251.0.2
glibc-langpack-tig - update to 2.28-251.0.2
glibc-langpack-ti - update to 2.28-251.0.2
glibc-langpack-the - update to 2.28-251.0.2
glibc-langpack-th - update to 2.28-251.0.2
glibc-langpack-tg - update to 2.28-251.0.2
glibc-langpack-te - update to 2.28-251.0.2
glibc-langpack-tcy - update to 2.28-251.0.2
glibc-langpack-ta - update to 2.28-251.0.2
glibc-langpack-szl - update to 2.28-251.0.2
glibc-langpack-sw - update to 2.28-251.0.2
glibc-langpack-sv - update to 2.28-251.0.2
glibc-langpack-zh - addressed in versions 2.28-251.0.2, 2.38-8
glibc-doc - addressed in versions 2.28-251.0.2, 2.38-8
nss_hesiod - addressed in versions 2.28-251.0.2, 2.38-8
nss_db - addressed in versions 2.28-251.0.2, 2.38-8
nscd - update to 2.28-251.0.2
libnsl - addressed in versions 2.28-251.0.2, 2.38-8
glibc-utils - addressed in versions 2.28-251.0.2, 2.38-8
glibc-static - addressed in versions 2.28-251.0.2, 2.38-8
glibc-nss-devel - addressed in versions 2.28-251.0.2, 2.38-8
glibc-minimal-langpack - addressed in versions 2.28-251.0.2, 2.38-8
glibc-locale-source - addressed in versions 2.28-251.0.2, 2.38-8
glibc-langpack-zu - update to 2.28-251.0.2
glibc-langpack-st - update to 2.28-251.0.2
glibc-langpack-yuw - update to 2.28-251.0.2
glibc-langpack-yue - update to 2.28-251.0.2
glibc-langpack-yo - update to 2.28-251.0.2
glibc-langpack-yi - update to 2.28-251.0.2
glibc-langpack-xh - update to 2.28-251.0.2
glibc-langpack-wo - update to 2.28-251.0.2
glibc-langpack-wal - update to 2.28-251.0.2
glibc-langpack-wae - update to 2.28-251.0.2
glibc-langpack-wa - update to 2.28-251.0.2
glibc-langpack-vi - update to 2.28-251.0.2
glibc-langpack-ve - update to 2.28-251.0.2
glibc-langpack-nn - update to 2.28-251.0.2
glibc-langpack-pt - update to 2.28-251.0.2
glibc-langpack-ps - update to 2.28-251.0.2
glibc-langpack-pl - update to 2.28-251.0.2
glibc-langpack-pap - update to 2.28-251.0.2
glibc-langpack-pa - update to 2.28-251.0.2
glibc-langpack-os - update to 2.28-251.0.2
glibc-langpack-or - update to 2.28-251.0.2
glibc-langpack-om - update to 2.28-251.0.2
glibc-langpack-oc - update to 2.28-251.0.2
glibc-langpack-nso - update to 2.28-251.0.2
glibc-langpack-nr - update to 2.28-251.0.2
glibc-langpack-quz - update to 2.28-251.0.2
glibc-langpack-nl - update to 2.28-251.0.2
glibc-langpack-niu - update to 2.28-251.0.2
glibc-langpack-nhn - update to 2.28-251.0.2
glibc-langpack-ne - update to 2.28-251.0.2
glibc-langpack-nds - update to 2.28-251.0.2
glibc-langpack-nb - update to 2.28-251.0.2
glibc-langpack-nan - update to 2.28-251.0.2
glibc-langpack-my - update to 2.28-251.0.2
glibc-langpack-mt - update to 2.28-251.0.2
glibc-langpack-ms - update to 2.28-251.0.2
glibc-langpack-mr - update to 2.28-251.0.2
glibc-langpack-sgs - update to 2.28-251.0.2
glibc-langpack-ss - update to 2.28-251.0.2
glibc-langpack-sr - update to 2.28-251.0.2
glibc-langpack-sq - update to 2.28-251.0.2
glibc-langpack-so - update to 2.28-251.0.2
glibc-langpack-sm - update to 2.28-251.0.2
glibc-langpack-sl - update to 2.28-251.0.2
glibc-langpack-sk - update to 2.28-251.0.2
glibc-langpack-sid - update to 2.28-251.0.2
glibc-langpack-si - update to 2.28-251.0.2
glibc-langpack-shs - update to 2.28-251.0.2
glibc-langpack-shn - update to 2.28-251.0.2
glibc-langpack-mni - update to 2.28-251.0.2
glibc-langpack-se - update to 2.28-251.0.2
glibc-langpack-sd - update to 2.28-251.0.2
glibc-langpack-sc - update to 2.28-251.0.2
glibc-langpack-sat - update to 2.28-251.0.2
glibc-langpack-sah - update to 2.28-251.0.2
glibc-langpack-sa - update to 2.28-251.0.2
glibc-langpack-rw - update to 2.28-251.0.2
glibc-langpack-ru - update to 2.28-251.0.2
glibc-langpack-ro - update to 2.28-251.0.2
glibc-langpack-raj - update to 2.28-251.0.2
glibc-langpack-bn - update to 2.28-251.0.2
glibc-langpack-bo - update to 2.28-251.0.2
compat-libpthread-nonshared - addressed in versions 2.28-251.0.2, 2.38-8
glibc - addressed in versions 2.28-251.0.2, 2.38-8
glibc-all-langpacks - addressed in versions 2.28-251.0.2, 2.38-8
glibc-benchtests - addressed in versions 2.28-251.0.2, 2.38-8
glibc-common - addressed in versions 2.28-251.0.2, 2.38-8
glibc-devel - addressed in versions 2.28-251.0.2, 2.38-8
glibc-gconv-extra - addressed in versions 2.28-251.0.2, 2.38-8
glibc-headers - update to 2.28-251.0.2
glibc-langpack-aa - update to 2.28-251.0.2
glibc-langpack-af - update to 2.28-251.0.2
glibc-langpack-agr - update to 2.28-251.0.2
glibc-langpack-ak - update to 2.28-251.0.2
glibc-langpack-am - update to 2.28-251.0.2
glibc-langpack-an - update to 2.28-251.0.2
glibc-langpack-ar - update to 2.28-251.0.2
glibc-langpack-anp - update to 2.28-251.0.2
glibc-langpack-bi - update to 2.28-251.0.2
glibc-langpack-bho - update to 2.28-251.0.2
glibc-langpack-bhb - update to 2.28-251.0.2
glibc-langpack-bg - update to 2.28-251.0.2
glibc-langpack-ber - update to 2.28-251.0.2
glibc-langpack-be - update to 2.28-251.0.2
glibc-langpack-az - update to 2.28-251.0.2
glibc-langpack-ayc - update to 2.28-251.0.2
glibc-langpack-ast - update to 2.28-251.0.2
glibc-langpack-as - update to 2.28-251.0.2
glibc-langpack-bem - update to 2.28-251.0.2
glibc-locale-base-32bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-32bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-static-32bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-32bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-32bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils-32bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-32bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-profile-32bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils-32bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-64bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-64bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils-64bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-64bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-profile-64bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-locale-base-64bit-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-static-64bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-locale-base-64bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-64bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils-64bit - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-extra - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel-static - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-locale - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-devel - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-locale-base - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-locale-base-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-debugsource - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-profile - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-info - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils-src-debugsource - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
nscd - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
nscd-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-extra-debuginfo - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-utils - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-i18ndata - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-html - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-lang - addressed in versions 2.31-150300.95.1, 2.38-150600.14.32.1
glibc-nss-devel - update to 2.34-167
glibc-all-langpacks - update to 2.34-167
glibc-common - update to 2.34-167
glibc-compat-2.17 - update to 2.34-167
glibc-debuginfo - update to 2.34-167
glibc-debugsource - update to 2.34-167
glibc-debugutils - update to 2.34-167
glibc-devel - update to 2.34-167
glibc-locale-archive - update to 2.34-167
glibc-locale-source - update to 2.34-167
libnsl - update to 2.34-167
nscd - update to 2.34-167
nss_modules - update to 2.34-167
glibc-help - update to 2.34-167
glibc - update to 2.34-167
libnsl1-64bit-debuginfo - update to 2.38-150600.14.32.1
libnsl1-64bit - update to 2.38-150600.14.32.1
libnsl1-debuginfo - update to 2.38-150600.14.32.1
libnsl1 - update to 2.38-150600.14.32.1
libnsl1-32bit - update to 2.38-150600.14.32.1
libnsl1-32bit-debuginfo - update to 2.38-150600.14.32.1
sys-libs/glibc - update to 2.41-r5
Splunk Operator for Kubernetes Add-on - update to 3.0.0
Red Hat Advanced Cluster Security for Kubernetes - update to 4.7.5
Red Hat OpenShift Container Platform - addressed in versions 4.14.53, 4.15.53, 4.16.44, 4.16.45, 4.18.19, 4.19.2, 4.19.4
Red Hat Ceph Storage - addressed in versions 7.1, 8.1
IBM CICS TX Advanced - update to 11.1.0.0 ifix33
IBM CICS TX Standard - update to 11.1.0.0 ifix34

• http://www.openwall.com/lists/oss-security/2025/05/16/7
• http://www.openwall.com/lists/oss-security/2025/05/17/2
• https://sourceware.org/bugzilla/show_bug.cgi?id=32976
• https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e
• https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2025-0002

• Untrusted search path in GNU C Library
• SUSE update for glibc
• Ubuntu update for glibc
• SUSE update for glibc
• SUSE update for glibc
• openEuler update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Anolis OS update for glibc
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• Multiple vulnerabilities in Service Interconnect 1
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for glibc
• Red Hat Enterprise Linux 7 update for glibc
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Anolis OS update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Console
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.7
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• IBM DataStage on Cloud Pak for Data update for GNU C Library
• Gentoo update for glibc
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Splunk Operator for Kubernetes Add-on update for third-party components
• Multiple vulnerabilities in Netcool Operations Insight
• IBM DataPower Gateway update for GNU C Library
• Multiple vulnerabilities in Red Hat OpenShift Serverless