Use of uninitialized resource in GNU C Library (glibc) - CVE-2025-15281

Vulnerability identifier: #VU122300

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-15281

CWE-ID: CWE-908

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to usage of uninitialized resources when calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND. A remote attacker can pass specially crafted data to the application, trigger an uninitialized usage of resources and crash the application. 

GNU C Library (glibc)
InfoSphere Data Replication for z/OS Remote Source
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Micro Extras
SUSE Linux Micro
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Anolis OS
Basesystem Module
Development Tools Module
openSUSE Leap
Ubuntu
openEuler
Fedora
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Red Hat build of Keycloak
glibc-devel
glibc-32bit
glibc-debuginfo-32bit
glibc-locale-32bit
glibc-devel-debuginfo-32bit
glibc-devel-32bit
glibc-profile-32bit
glibc-locale-debuginfo-32bit
glibc-info
glibc-html
glibc-i18ndata
nscd-debuginfo
glibc-debugsource
glibc-devel-debuginfo
glibc
glibc-locale
glibc-profile
nscd
glibc-devel-static
glibc-locale-debuginfo
glibc-debuginfo
glibc (Ubuntu package)
glibc-all-langpacks
glibc-benchtests
glibc-common
glibc-compat-2.17
glibc-debugutils
glibc-locale-source
glibc-nss-devel
libnsl
nss_modules
glibc-help
glibc-langpack-ca (Red Hat package)
glibc-langpack-bs (Red Hat package)
glibc-langpack-cv (Red Hat package)
glibc-langpack-cs (Red Hat package)
glibc-langpack-csb (Red Hat package)
glibc-langpack-eu (Red Hat package)
glibc-langpack-brx (Red Hat package)
glibc-langpack-bo (Red Hat package)
glibc-langpack-bn (Red Hat package)
glibc-langpack-bi (Red Hat package)
glibc-langpack-bho (Red Hat package)
glibc-langpack-bg (Red Hat package)
glibc-langpack-cy (Red Hat package)
glibc-langpack-de (Red Hat package)
glibc-langpack-doi (Red Hat package)
nss_db (Red Hat package)
libnsl (Red Hat package)
glibc-langpack-es (Red Hat package)
glibc-langpack-et (Red Hat package)
glibc-langpack-an (Red Hat package)
glibc-langpack-fi (Red Hat package)
glibc-langpack-fil (Red Hat package)
glibc-langpack-fo (Red Hat package)
glibc-langpack-af (Red Hat package)
glibc-langpack-kw (Red Hat package)
nss_hesiod-debuginfo (Red Hat package)
glibc-langpack-se (Red Hat package)
glibc-langpack-mhr (Red Hat package)
glibc-langpack-ky (Red Hat package)
glibc-langpack-fur (Red Hat package)
glibc-langpack-fa (Red Hat package)
glibc-all-langpacks-debuginfo (Red Hat package)
glibc-benchtests-debuginfo (Red Hat package)
glibc-debugsource (Red Hat package)
glibc-langpack-aa (Red Hat package)
glibc-langpack-ber (Red Hat package)
glibc-langpack-agr (Red Hat package)
glibc-langpack-ak (Red Hat package)
glibc-langpack-am (Red Hat package)
glibc-langpack-fr (Red Hat package)
glibc-langpack-anp (Red Hat package)
glibc-langpack-ast (Red Hat package)
glibc-langpack-ayc (Red Hat package)
glibc-langpack-az (Red Hat package)
glibc-langpack-be (Red Hat package)
glibc-langpack-bem (Red Hat package)
glibc-langpack-sd (Red Hat package)
glibc-utils (Red Hat package)
libnsl-debuginfo (Red Hat package)
glibc-langpack-ar (Red Hat package)
glibc-langpack-as (Red Hat package)
glibc-langpack-br (Red Hat package)
glibc-langpack-byn (Red Hat package)
glibc-langpack-da (Red Hat package)
glibc-langpack-dsb (Red Hat package)
glibc-langpack-gv (Red Hat package)
glibc-langpack-ha (Red Hat package)
glibc-langpack-hi (Red Hat package)
glibc-langpack-lo (Red Hat package)
glibc-langpack-pl (Red Hat package)
glibc-langpack-sah (Red Hat package)
glibc-minimal-langpack (Red Hat package)
glibc-langpack-th (Red Hat package)
glibc-langpack-unm (Red Hat package)
nscd (Red Hat package)
nscd-debuginfo (Red Hat package)
nss_db-debuginfo (Red Hat package)
glibc-common-debuginfo (Red Hat package)
glibc-debuginfo (Red Hat package)
glibc-gconv-extra-debuginfo (Red Hat package)
glibc-langpack-bhb (Red Hat package)
glibc-langpack-ff (Red Hat package)
glibc-langpack-hif (Red Hat package)
glibc-langpack-lzh (Red Hat package)
glibc-langpack-mg (Red Hat package)
glibc-langpack-the (Red Hat package)
glibc-langpack-pt (Red Hat package)
glibc-langpack-gez (Red Hat package)
glibc-langpack-gl (Red Hat package)
glibc-langpack-gu (Red Hat package)
glibc-langpack-hak (Red Hat package)
glibc-langpack-he (Red Hat package)
glibc-langpack-ks (Red Hat package)
glibc-langpack-ku (Red Hat package)
glibc-langpack-lb (Red Hat package)
glibc-langpack-lt (Red Hat package)
glibc-langpack-lv (Red Hat package)
glibc-langpack-mag (Red Hat package)
glibc-langpack-mai (Red Hat package)
glibc-langpack-mfe (Red Hat package)
glibc-langpack-ps (Red Hat package)
glibc-langpack-ti (Red Hat package)
glibc-langpack-quz (Red Hat package)
glibc-langpack-sat (Red Hat package)
glibc-langpack-sc (Red Hat package)
glibc-langpack-te (Red Hat package)
glibc-langpack-tg (Red Hat package)
glibc-langpack-ug (Red Hat package)
glibc-langpack-uk (Red Hat package)
glibc-langpack-ur (Red Hat package)
glibc-langpack-uz (Red Hat package)
glibc-langpack-ve (Red Hat package)
glibc-langpack-vi (Red Hat package)
glibc-langpack-wa (Red Hat package)
glibc-locale-source (Red Hat package)
glibc-langpack-am
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-an
glibc-langpack-ber
glibc-langpack-ak
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-headers
glibc-gconv-extra
glibc-langpack-bs
glibc-langpack-csb
glibc-langpack-cs
glibc-langpack-crh
glibc-langpack-cmn
glibc-langpack-chr
glibc-langpack-ce
glibc-langpack-ca
glibc-langpack-byn
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-bo
glibc-langpack-bn
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-or
glibc-langpack-nhn
glibc-langpack-niu
glibc-langpack-nl
glibc-langpack-nn
glibc-langpack-nr
glibc-langpack-nso
glibc-langpack-oc
glibc-langpack-om
glibc-langpack-ne
glibc-langpack-os
glibc-langpack-pap
glibc-langpack-pl
glibc-langpack-ps
glibc-langpack-pt
glibc-langpack-quz
glibc-langpack-raj
glibc-langpack-ro
glibc-langpack-mn
compat-libpthread-nonshared
glibc-langpack-mi
glibc-langpack-miq
glibc-langpack-mjw
glibc-langpack-mk
glibc-langpack-ml
glibc-langpack-cv
glibc-langpack-mni
glibc-langpack-mr
glibc-langpack-ms
glibc-langpack-mt
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-nb
glibc-langpack-nds
glibc-langpack-iu
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-ks
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-lo
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-ht
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-lg
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-kw
glibc-langpack-ku
glibc-langpack-en
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-fo
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-dsb
glibc-langpack-doi
glibc-langpack-de
glibc-langpack-da
glibc-langpack-cy
glibc-langpack-gv
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-he
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-pa
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-fur
glibc-langpack-fr
glibc-langpack-tpi
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-wa
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-zu
glibc-doc
nss_hesiod
nss_db
glibc-utils
glibc-static
glibc-minimal-langpack
glibc-langpack-rw
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-ru
glibc-langpack-tcy
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-st
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-sl
glibc-langpack-sid
glibc-langpack-sk
glibc-langpack-sa
glibc-langpack-sah
glibc-langpack-sat
glibc-langpack-sc
glibc-langpack-sd
glibc-langpack-sgs
glibc-langpack-shn
glibc-langpack-shs
glibc-langpack-si
glibc-langpack-se
glibc-utils-debuginfo
glibc-lang
glibc-locale-base-32bit
glibc-extra
glibc-locale-base
glibc-extra-debuginfo
glibc-utils-src-debugsource
glibc-locale-base-debuginfo
glibc-locale-base-32bit-debuginfo
glibc-locale-base-64bit
glibc-devel-static-64bit
glibc-profile-64bit
glibc-locale-base-64bit-debuginfo
glibc-64bit-debuginfo
glibc-utils-64bit
glibc-utils-64bit-debuginfo
glibc-devel-64bit-debuginfo
glibc-64bit
glibc-devel-64bit
glibc-utils-32bit-debuginfo
glibc-utils-32bit
glibc-devel-static-32bit
glibc-devel-32bit-debuginfo
glibc-32bit-debuginfo
glibc-locale-archive
glibc (Red Hat package)
libnsl1
libnsl1-debuginfo
libnsl1-32bit-debuginfo
libnsl1-32bit
libnsl1-64bit-debuginfo
libnsl1-64bit
glibc-gconv-modules-extra
glibc-gconv-modules-extra-debuginfo

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.43
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 2
glibc-devel - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-32bit - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-debuginfo-32bit - update to 2.22-114.43.1
glibc-locale-32bit - update to 2.22-114.43.1
glibc-devel-debuginfo-32bit - update to 2.22-114.43.1
glibc-devel-32bit - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-profile-32bit - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-debuginfo-32bit - update to 2.22-114.43.1
glibc-info - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-html - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-i18ndata - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
nscd-debuginfo - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-debugsource - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-devel-debuginfo - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-locale - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-profile - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
nscd - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-static - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-debuginfo - update to 2.22-114.43.1
glibc-debuginfo - addressed in versions 2.22-114.43.1, 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc (Ubuntu package) - addressed in versions 2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13, 2.39-0ubuntu8.7, 2.42-0ubuntu3.1
glibc - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-all-langpacks - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-benchtests - update to 2.28-122
glibc-common - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-compat-2.17 - addressed in versions 2.28-122, 2.34-174
glibc-debuginfo - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-debugsource - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-debugutils - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-devel - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-locale-source - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-nss-devel - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
libnsl - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
nscd - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
nss_modules - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-help - addressed in versions 2.28-122, 2.34-174, 2.38-88, 2.38-92
glibc-langpack-ca (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bs (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-cv (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-cs (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-csb (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-eu (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-brx (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bn (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bi (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bho (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bg (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-cy (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-de (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-doi (Red Hat package) - update to 2.28-251.el8_10.31
nss_db (Red Hat package) - update to 2.28-251.el8_10.31
libnsl (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-es (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-et (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-an (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-fi (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-fil (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-fo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-af (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-kw (Red Hat package) - update to 2.28-251.el8_10.31
nss_hesiod-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-se (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-mhr (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ky (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-fur (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-fa (Red Hat package) - update to 2.28-251.el8_10.31
glibc-all-langpacks-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-benchtests-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-debugsource (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-aa (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ber (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-agr (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ak (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-am (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-fr (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-anp (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ast (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ayc (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-az (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-be (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bem (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-sd (Red Hat package) - update to 2.28-251.el8_10.31
glibc-utils (Red Hat package) - update to 2.28-251.el8_10.31
libnsl-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ar (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-as (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-br (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-byn (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-da (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-dsb (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-gv (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ha (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-hi (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-lo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-pl (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-sah (Red Hat package) - update to 2.28-251.el8_10.31
glibc-minimal-langpack (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-th (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-unm (Red Hat package) - update to 2.28-251.el8_10.31
nscd (Red Hat package) - update to 2.28-251.el8_10.31
nscd-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
nss_db-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-common-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-gconv-extra-debuginfo (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-bhb (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ff (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-hif (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-lzh (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-mg (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-the (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-pt (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-gez (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-gl (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-gu (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-hak (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-he (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ks (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ku (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-lb (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-lt (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-lv (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-mag (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-mai (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-mfe (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ps (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ti (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-quz (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-sat (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-sc (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-te (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-tg (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ug (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-uk (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ur (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-uz (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-ve (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-vi (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-wa (Red Hat package) - update to 2.28-251.el8_10.31
glibc-locale-source (Red Hat package) - update to 2.28-251.el8_10.31
glibc-langpack-am - update to 2.28-251.0.2
glibc-langpack-bem - update to 2.28-251.0.2
glibc-langpack-be - update to 2.28-251.0.2
glibc-langpack-az - update to 2.28-251.0.2
glibc-langpack-ayc - update to 2.28-251.0.2
glibc-langpack-ast - update to 2.28-251.0.2
glibc-langpack-as - update to 2.28-251.0.2
glibc-langpack-ar - update to 2.28-251.0.2
glibc-langpack-anp - update to 2.28-251.0.2
glibc-langpack-an - update to 2.28-251.0.2
glibc-langpack-ber - update to 2.28-251.0.2
glibc-langpack-ak - update to 2.28-251.0.2
glibc-langpack-agr - update to 2.28-251.0.2
glibc-langpack-af - update to 2.28-251.0.2
glibc-langpack-aa - update to 2.28-251.0.2
glibc-headers - update to 2.28-251.0.2
glibc-gconv-extra - addressed in versions 2.28-251.0.2, 2.38-17
glibc-devel - addressed in versions 2.28-251.0.2, 2.38-17
glibc-common - addressed in versions 2.28-251.0.2, 2.38-17
glibc-langpack-bs - update to 2.28-251.0.2
glibc-langpack-csb - update to 2.28-251.0.2
glibc-langpack-cs - update to 2.28-251.0.2
glibc-langpack-crh - update to 2.28-251.0.2
glibc-langpack-cmn - update to 2.28-251.0.2
glibc-langpack-chr - update to 2.28-251.0.2
glibc-langpack-ce - update to 2.28-251.0.2
glibc-langpack-ca - update to 2.28-251.0.2
glibc-langpack-byn - update to 2.28-251.0.2
glibc-benchtests - addressed in versions 2.28-251.0.2, 2.38-17
glibc-langpack-brx - update to 2.28-251.0.2
glibc-langpack-br - update to 2.28-251.0.2
glibc-langpack-bo - update to 2.28-251.0.2
glibc-langpack-bn - update to 2.28-251.0.2
glibc-langpack-bi - update to 2.28-251.0.2
glibc-langpack-bho - update to 2.28-251.0.2
glibc-langpack-bhb - update to 2.28-251.0.2
glibc-langpack-bg - update to 2.28-251.0.2
glibc-langpack-or - update to 2.28-251.0.2
glibc-langpack-nhn - update to 2.28-251.0.2
glibc-langpack-niu - update to 2.28-251.0.2
glibc-langpack-nl - update to 2.28-251.0.2
glibc-langpack-nn - update to 2.28-251.0.2
glibc-langpack-nr - update to 2.28-251.0.2
glibc-langpack-nso - update to 2.28-251.0.2
glibc-langpack-oc - update to 2.28-251.0.2
glibc-langpack-om - update to 2.28-251.0.2
glibc-langpack-ne - update to 2.28-251.0.2
glibc-langpack-os - update to 2.28-251.0.2
glibc-langpack-pap - update to 2.28-251.0.2
glibc-langpack-pl - update to 2.28-251.0.2
glibc-langpack-ps - update to 2.28-251.0.2
glibc-langpack-pt - update to 2.28-251.0.2
glibc-langpack-quz - update to 2.28-251.0.2
glibc-langpack-raj - update to 2.28-251.0.2
glibc-langpack-ro - update to 2.28-251.0.2
glibc-langpack-mn - update to 2.28-251.0.2
glibc-all-langpacks - addressed in versions 2.28-251.0.2, 2.38-17
glibc - addressed in versions 2.28-251.0.2, 2.38-17
compat-libpthread-nonshared - addressed in versions 2.28-251.0.2, 2.38-17
glibc-langpack-mi - update to 2.28-251.0.2
glibc-langpack-miq - update to 2.28-251.0.2
glibc-langpack-mjw - update to 2.28-251.0.2
glibc-langpack-mk - update to 2.28-251.0.2
glibc-langpack-ml - update to 2.28-251.0.2
glibc-langpack-cv - update to 2.28-251.0.2
glibc-langpack-mni - update to 2.28-251.0.2
glibc-langpack-mr - update to 2.28-251.0.2
glibc-langpack-ms - update to 2.28-251.0.2
glibc-langpack-mt - update to 2.28-251.0.2
glibc-langpack-my - update to 2.28-251.0.2
glibc-langpack-nan - update to 2.28-251.0.2
glibc-langpack-nb - update to 2.28-251.0.2
glibc-langpack-nds - update to 2.28-251.0.2
glibc-langpack-iu - update to 2.28-251.0.2
glibc-langpack-kok - update to 2.28-251.0.2
glibc-langpack-ko - update to 2.28-251.0.2
glibc-langpack-kn - update to 2.28-251.0.2
glibc-langpack-km - update to 2.28-251.0.2
glibc-langpack-kl - update to 2.28-251.0.2
glibc-langpack-kk - update to 2.28-251.0.2
glibc-langpack-kab - update to 2.28-251.0.2
glibc-langpack-ka - update to 2.28-251.0.2
glibc-langpack-ja - update to 2.28-251.0.2
glibc-langpack-ks - update to 2.28-251.0.2
glibc-langpack-it - update to 2.28-251.0.2
glibc-langpack-is - update to 2.28-251.0.2
glibc-langpack-ik - update to 2.28-251.0.2
glibc-langpack-ig - update to 2.28-251.0.2
glibc-langpack-id - update to 2.28-251.0.2
glibc-langpack-ia - update to 2.28-251.0.2
glibc-langpack-hy - update to 2.28-251.0.2
glibc-langpack-hu - update to 2.28-251.0.2
glibc-langpack-lo - update to 2.28-251.0.2
glibc-langpack-mhr - update to 2.28-251.0.2
glibc-langpack-mg - update to 2.28-251.0.2
glibc-langpack-mfe - update to 2.28-251.0.2
glibc-langpack-mai - update to 2.28-251.0.2
glibc-langpack-mag - update to 2.28-251.0.2
glibc-langpack-lzh - update to 2.28-251.0.2
glibc-langpack-lv - update to 2.28-251.0.2
glibc-langpack-lt - update to 2.28-251.0.2
glibc-langpack-ht - update to 2.28-251.0.2
glibc-langpack-ln - update to 2.28-251.0.2
glibc-langpack-lij - update to 2.28-251.0.2
glibc-langpack-li - update to 2.28-251.0.2
glibc-langpack-lg - update to 2.28-251.0.2
glibc-langpack-lb - update to 2.28-251.0.2
glibc-langpack-ky - update to 2.28-251.0.2
glibc-langpack-kw - update to 2.28-251.0.2
glibc-langpack-ku - update to 2.28-251.0.2
glibc-langpack-en - addressed in versions 2.28-251.0.2, 2.38-17
glibc-langpack-fil - update to 2.28-251.0.2
glibc-langpack-fi - update to 2.28-251.0.2
glibc-langpack-ff - update to 2.28-251.0.2
glibc-langpack-fa - update to 2.28-251.0.2
glibc-langpack-eu - update to 2.28-251.0.2
glibc-langpack-et - update to 2.28-251.0.2
glibc-langpack-es - update to 2.28-251.0.2
glibc-langpack-eo - update to 2.28-251.0.2
glibc-langpack-fo - update to 2.28-251.0.2
glibc-langpack-el - update to 2.28-251.0.2
glibc-langpack-dz - update to 2.28-251.0.2
glibc-langpack-dv - update to 2.28-251.0.2
glibc-langpack-dsb - update to 2.28-251.0.2
glibc-langpack-doi - update to 2.28-251.0.2
glibc-langpack-de - update to 2.28-251.0.2
glibc-langpack-da - update to 2.28-251.0.2
glibc-langpack-cy - update to 2.28-251.0.2
glibc-langpack-gv - update to 2.28-251.0.2
glibc-langpack-hsb - update to 2.28-251.0.2
glibc-langpack-hr - update to 2.28-251.0.2
glibc-langpack-hne - update to 2.28-251.0.2
glibc-langpack-hif - update to 2.28-251.0.2
glibc-langpack-hi - update to 2.28-251.0.2
glibc-langpack-he - update to 2.28-251.0.2
glibc-langpack-hak - update to 2.28-251.0.2
glibc-langpack-ha - update to 2.28-251.0.2
glibc-langpack-pa - update to 2.28-251.0.2
glibc-langpack-gu - update to 2.28-251.0.2
glibc-langpack-gl - update to 2.28-251.0.2
glibc-langpack-gez - update to 2.28-251.0.2
glibc-langpack-gd - update to 2.28-251.0.2
glibc-langpack-ga - update to 2.28-251.0.2
glibc-langpack-fy - update to 2.28-251.0.2
glibc-langpack-fur - update to 2.28-251.0.2
glibc-langpack-fr - update to 2.28-251.0.2
glibc-langpack-tpi - update to 2.28-251.0.2
glibc-langpack-vi - update to 2.28-251.0.2
glibc-langpack-ve - update to 2.28-251.0.2
glibc-langpack-uz - update to 2.28-251.0.2
glibc-langpack-ur - update to 2.28-251.0.2
glibc-langpack-unm - update to 2.28-251.0.2
glibc-langpack-uk - update to 2.28-251.0.2
glibc-langpack-ug - update to 2.28-251.0.2
glibc-langpack-tt - update to 2.28-251.0.2
glibc-langpack-ts - update to 2.28-251.0.2
glibc-langpack-tr - update to 2.28-251.0.2
glibc-langpack-wa - update to 2.28-251.0.2
glibc-langpack-to - update to 2.28-251.0.2
glibc-langpack-tn - update to 2.28-251.0.2
glibc-langpack-tl - update to 2.28-251.0.2
glibc-langpack-tk - update to 2.28-251.0.2
glibc-langpack-tig - update to 2.28-251.0.2
glibc-langpack-ti - update to 2.28-251.0.2
glibc-langpack-the - update to 2.28-251.0.2
glibc-langpack-th - update to 2.28-251.0.2
glibc-langpack-tg - update to 2.28-251.0.2
glibc-langpack-te - update to 2.28-251.0.2
glibc-langpack-zu - update to 2.28-251.0.2
glibc-doc - addressed in versions 2.28-251.0.2, 2.38-17
nss_hesiod - addressed in versions 2.28-251.0.2, 2.38-17
nss_db - addressed in versions 2.28-251.0.2, 2.38-17
nscd - update to 2.28-251.0.2
libnsl - addressed in versions 2.28-251.0.2, 2.38-17
glibc-utils - addressed in versions 2.28-251.0.2, 2.38-17
glibc-static - addressed in versions 2.28-251.0.2, 2.38-17
glibc-nss-devel - addressed in versions 2.28-251.0.2, 2.38-17
glibc-minimal-langpack - addressed in versions 2.28-251.0.2, 2.38-17
glibc-locale-source - addressed in versions 2.28-251.0.2, 2.38-17
glibc-langpack-rw - update to 2.28-251.0.2
glibc-langpack-zh - addressed in versions 2.28-251.0.2, 2.38-17
glibc-langpack-yuw - update to 2.28-251.0.2
glibc-langpack-yue - update to 2.28-251.0.2
glibc-langpack-yo - update to 2.28-251.0.2
glibc-langpack-yi - update to 2.28-251.0.2
glibc-langpack-xh - update to 2.28-251.0.2
glibc-langpack-wo - update to 2.28-251.0.2
glibc-langpack-wal - update to 2.28-251.0.2
glibc-langpack-wae - update to 2.28-251.0.2
glibc-langpack-ru - update to 2.28-251.0.2
glibc-langpack-tcy - update to 2.28-251.0.2
glibc-langpack-ta - update to 2.28-251.0.2
glibc-langpack-szl - update to 2.28-251.0.2
glibc-langpack-sw - update to 2.28-251.0.2
glibc-langpack-sv - update to 2.28-251.0.2
glibc-langpack-st - update to 2.28-251.0.2
glibc-langpack-ss - update to 2.28-251.0.2
glibc-langpack-sr - update to 2.28-251.0.2
glibc-langpack-sq - update to 2.28-251.0.2
glibc-langpack-so - update to 2.28-251.0.2
glibc-langpack-sm - update to 2.28-251.0.2
glibc-langpack-sl - update to 2.28-251.0.2
glibc-langpack-sid - update to 2.28-251.0.2
glibc-langpack-sk - update to 2.28-251.0.2
glibc-langpack-sa - update to 2.28-251.0.2
glibc-langpack-sah - update to 2.28-251.0.2
glibc-langpack-sat - update to 2.28-251.0.2
glibc-langpack-sc - update to 2.28-251.0.2
glibc-langpack-sd - update to 2.28-251.0.2
glibc-langpack-sgs - update to 2.28-251.0.2
glibc-langpack-shn - update to 2.28-251.0.2
glibc-langpack-shs - update to 2.28-251.0.2
glibc-langpack-si - update to 2.28-251.0.2
glibc-langpack-se - update to 2.28-251.0.2
glibc-utils-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-lang - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-extra - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-extra-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-src-debugsource - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-static-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-profile-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-static-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-archive - addressed in versions 2.34-174, 2.38-88, 2.38-92
glibc (Red Hat package) - update to 2.34-231.el9_7.10
libnsl1 - update to 2.38-150600.14.40.1
libnsl1-debuginfo - update to 2.38-150600.14.40.1
libnsl1-32bit-debuginfo - update to 2.38-150600.14.40.1
libnsl1-32bit - update to 2.38-150600.14.40.1
libnsl1-64bit-debuginfo - update to 2.38-150600.14.40.1
libnsl1-64bit - update to 2.38-150600.14.40.1
glibc-gconv-modules-extra - update to 2.40-160000.3.1
glibc-gconv-modules-extra-debuginfo - update to 2.40-160000.3.1
glibc - update to 2.42-9.fc43
Red Hat build of Keycloak - update to 26.2.14

• https://sourceware.org/bugzilla/show_bug.cgi?id=33814
• http://www.openwall.com/lists/oss-security/2026/01/20/3

• Multiple vulnerabilities in GNU C Library (glibc)
• Fedora 43 update for glibc
• openEuler 20.03 LTS SP4 update for glibc
• openEuler 24.03 LTS SP3 update for glibc
• SUSE update for glibc
• SUSE update for glibc
• Ubuntu update for glibc
• Anolis OS update for glibc
• openEuler 24.03 LTS SP2 update for glibc
• openEuler 24.03 LTS SP1 update for glibc
• openEuler 24.03 LTS update for glibc
• openEuler 22.03 LTS SP4 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in Red Hat build of Keycloak 26.2
• SUSE update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Anolis OS update for glibc
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• IBM InfoSphere Data Replication for z/OS Remote Source update for glibc