Off-by-one in GNU C Library (glibc) - CVE-2021-3999

Vulnerability identifier: #VU61293

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3999

CWE-ID: CWE-193

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to an off-by-one error glibc getcwd() function. A remote attacker can pass specially crafted input to the application that is using the affected library version, trigger an off-by-one error and execute arbitrary code on the target system.

GNU C Library (glibc)
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
Ubuntu
Fedora
SIMATIC S7-1500 TM MFP - BIOS
cflinuxfs3
Db2 Rest
Cloud Pak for Network Automation
EMC ECS
CloudLink
Data Lakehouse
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
IBM Elastic Storage System
IBM MQ Operator
Netcool Operations Insight
IBM Cloud Transformation Advisor
Red Hat OpenShift GitOps
IBM Integrated Analytics System
Cloud Pak for Security (CP4S)
RecoverPoint for Virtual Machines
IBM Qradar SIEM
IBM Cloud Pak System
Red Hat OpenShift Serverless
IBM Supplied MQ Advanced Queue Manager Container images
Migration Toolkit for Containers
glibc-debugsource
glibc-debuginfo-32bit
glibc
glibc-devel
glibc-i18ndata
glibc-debuginfo
glibc-profile-32bit
glibc-locale-32bit
glibc-devel-32bit
glibc-32bit
nscd
glibc-profile
glibc-locale
glibc-info
glibc-html
glibc-devel-debuginfo
glibc-devel-debuginfo-32bit
glibc-locale-debuginfo
glibc-locale-debuginfo-32bit
nscd-debuginfo
glibc-devel-static
glibc-utils-src-debugsource
glibc-32bit-debuginfo
glibc-devel-32bit-debuginfo
glibc-locale-base-32bit
glibc-locale-base-32bit-debuginfo
glibc-utils-debuginfo
glibc-extra
glibc-extra-debuginfo
glibc-locale-base
glibc-locale-base-debuginfo
glibc-utils
libc6 (Ubuntu package)
glibc (Red Hat package)
glibc-langpack-ms
glibc-langpack-mag
glibc-langpack-mai
glibc-langpack-mfe
glibc-langpack-mg
glibc-langpack-mhr
glibc-langpack-mi
glibc-langpack-miq
glibc-langpack-mjw
glibc-langpack-mk
glibc-langpack-ml
glibc-langpack-mn
glibc-langpack-mni
glibc-langpack-mr
glibc-langpack-lzh
glibc-langpack-mt
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-nb
glibc-langpack-nds
glibc-langpack-ne
glibc-langpack-nhn
glibc-langpack-niu
glibc-langpack-nl
glibc-langpack-nn
glibc-langpack-nr
glibc-langpack-nso
glibc-langpack-kok
glibc-langpack-ig
glibc-langpack-ik
glibc-langpack-is
glibc-langpack-it
glibc-langpack-iu
glibc-langpack-ja
glibc-langpack-ka
glibc-langpack-kab
glibc-langpack-kk
glibc-langpack-kl
glibc-langpack-km
glibc-langpack-kn
glibc-langpack-ko
glibc-langpack-oc
glibc-langpack-ks
glibc-langpack-ku
glibc-langpack-kw
glibc-langpack-ky
glibc-langpack-lb
glibc-langpack-lg
glibc-langpack-li
glibc-langpack-lij
glibc-langpack-ln
glibc-langpack-lo
glibc-langpack-lt
glibc-langpack-lv
glibc-langpack-th
glibc-langpack-sm
glibc-langpack-so
glibc-langpack-sq
glibc-langpack-sr
glibc-langpack-ss
glibc-langpack-st
glibc-langpack-sv
glibc-langpack-sw
glibc-langpack-szl
glibc-langpack-ta
glibc-langpack-tcy
glibc-langpack-te
glibc-langpack-tg
glibc-langpack-sl
glibc-langpack-the
glibc-langpack-ti
glibc-langpack-tig
glibc-langpack-tk
glibc-langpack-tl
glibc-langpack-tn
glibc-langpack-to
glibc-langpack-tpi
glibc-langpack-tr
glibc-langpack-ts
glibc-langpack-tt
glibc-langpack-ug
glibc-langpack-rw
glibc-langpack-om
glibc-langpack-or
glibc-langpack-os
glibc-langpack-pa
glibc-langpack-pap
glibc-langpack-pl
glibc-langpack-ps
glibc-langpack-pt
glibc-langpack-quz
glibc-langpack-raj
glibc-langpack-ro
glibc-langpack-ru
glibc-langpack-id
glibc-langpack-sa
glibc-langpack-sah
glibc-langpack-sat
glibc-langpack-sc
glibc-langpack-sd
glibc-langpack-se
glibc-langpack-sgs
glibc-langpack-shn
glibc-langpack-shs
glibc-langpack-si
glibc-langpack-sid
glibc-langpack-sk
glibc-langpack-as
glibc-all-langpacks
glibc-common
glibc-headers
glibc-langpack-aa
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-ak
glibc-langpack-am
glibc-langpack-an
glibc-langpack-anp
glibc-langpack-ar
glibc-langpack-ast
glibc-langpack-ayc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
glibc-langpack-bg
glibc-langpack-bhb
glibc-langpack-bho
glibc-langpack-bi
glibc-langpack-bn
glibc-langpack-bo
glibc-langpack-xh
nss_db
libnsl
glibc-minimal-langpack
glibc-locale-source
glibc-langpack-zu
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-ia
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
compat-libpthread-nonshared
glibc-langpack-gv
glibc-langpack-ff
glibc-langpack-fi
glibc-langpack-fil
glibc-langpack-fo
glibc-langpack-fr
glibc-langpack-fur
glibc-langpack-fy
glibc-langpack-ga
glibc-langpack-gd
glibc-langpack-gez
glibc-langpack-gl
glibc-langpack-gu
glibc-langpack-brx
glibc-langpack-ha
glibc-langpack-hak
glibc-langpack-he
glibc-langpack-hi
glibc-langpack-hif
glibc-langpack-hne
glibc-langpack-hr
glibc-langpack-hsb
glibc-langpack-ht
glibc-langpack-hu
glibc-langpack-hy
glibc-langpack-eu
glibc-langpack-br
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-cs
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-de
glibc-langpack-fa
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-dsb
glibc-langpack-doi
glibc-langpack-da
glibc-lang
sys-libs/glibc

Install updates from vendor's website.

GNU C Library (glibc) - addressed in versions 2.35, 2.35.9000
cflinuxfs3 - update to 0.275.0
Data Lakehouse - update to 1.1.0.0
Red Hat OpenShift GitOps - addressed in versions 1.2.3, 1.3.6, 1.4.4
Cloud Pak for Security (CP4S) - update to 1.10.7.0
IBM Cloud Pak System - update to 2.3.3.5
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.8, 2.4.3
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.0.8
Dell Secure Connect Gateway - update to 5.12.00.10
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
IBM Elastic Storage System - update to 6.1.4.0
IBM Qradar SIEM - addressed in versions 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2
Red Hat OpenShift Serverless - update to 1
Db2 Rest - update to 1.0.0.304
IBM Integrated Analytics System - update to 1.0.30.0
IBM MQ Operator - addressed in versions 1.3.3, 1.8.0
Migration Toolkit for Containers - addressed in versions 1.5.4, 1.7.1
Netcool Operations Insight - update to 1.6.6
Cloud Pak for Network Automation - update to 2.6.4
glibc-debugsource - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-debuginfo-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-i18ndata - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-debuginfo - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-profile-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-locale-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-devel-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
nscd - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-profile - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-info - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-html - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-devel-debuginfo - addressed in versions 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel-debuginfo-32bit - addressed in versions 2.22-114.19.1, 2.22-119.1
glibc-locale-debuginfo - addressed in versions 2.22-114.19.1, 2.22-119.1
glibc-locale-debuginfo-32bit - addressed in versions 2.22-114.19.1, 2.22-119.1
nscd-debuginfo - addressed in versions 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel-static - addressed in versions 2.22-114.19.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-utils-src-debugsource - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-32bit-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel-32bit-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base-32bit - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-utils-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-extra - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-extra-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-utils - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
libc6 (Ubuntu package) - addressed in versions 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2, 2.230ubuntu11.3+esm1
glibc (Red Hat package) - update to 2.28-164.el8_5.3
glibc-langpack-ms - update to 2.28-164.0.1
glibc-langpack-mag - update to 2.28-164.0.1
glibc-langpack-mai - update to 2.28-164.0.1
glibc-langpack-mfe - update to 2.28-164.0.1
glibc-langpack-mg - update to 2.28-164.0.1
glibc-langpack-mhr - update to 2.28-164.0.1
glibc-langpack-mi - update to 2.28-164.0.1
glibc-langpack-miq - update to 2.28-164.0.1
glibc-langpack-mjw - update to 2.28-164.0.1
glibc-langpack-mk - update to 2.28-164.0.1
glibc-langpack-ml - update to 2.28-164.0.1
glibc-langpack-mn - update to 2.28-164.0.1
glibc-langpack-mni - update to 2.28-164.0.1
glibc-langpack-mr - update to 2.28-164.0.1
glibc-langpack-lzh - update to 2.28-164.0.1
glibc-langpack-mt - update to 2.28-164.0.1
glibc-langpack-my - update to 2.28-164.0.1
glibc-langpack-nan - update to 2.28-164.0.1
glibc-langpack-nb - update to 2.28-164.0.1
glibc-langpack-nds - update to 2.28-164.0.1
glibc-langpack-ne - update to 2.28-164.0.1
glibc-langpack-nhn - update to 2.28-164.0.1
glibc-langpack-niu - update to 2.28-164.0.1
glibc-langpack-nl - update to 2.28-164.0.1
glibc-langpack-nn - update to 2.28-164.0.1
glibc-langpack-nr - update to 2.28-164.0.1
glibc-langpack-nso - update to 2.28-164.0.1
glibc-langpack-kok - update to 2.28-164.0.1
glibc-langpack-ig - update to 2.28-164.0.1
glibc-langpack-ik - update to 2.28-164.0.1
glibc-langpack-is - update to 2.28-164.0.1
glibc-langpack-it - update to 2.28-164.0.1
glibc-langpack-iu - update to 2.28-164.0.1
glibc-langpack-ja - update to 2.28-164.0.1
glibc-langpack-ka - update to 2.28-164.0.1
glibc-langpack-kab - update to 2.28-164.0.1
glibc-langpack-kk - update to 2.28-164.0.1
glibc-langpack-kl - update to 2.28-164.0.1
glibc-langpack-km - update to 2.28-164.0.1
glibc-langpack-kn - update to 2.28-164.0.1
glibc-langpack-ko - update to 2.28-164.0.1
glibc-langpack-oc - update to 2.28-164.0.1
glibc-langpack-ks - update to 2.28-164.0.1
glibc-langpack-ku - update to 2.28-164.0.1
glibc-langpack-kw - update to 2.28-164.0.1
glibc-langpack-ky - update to 2.28-164.0.1
glibc-langpack-lb - update to 2.28-164.0.1
glibc-langpack-lg - update to 2.28-164.0.1
glibc-langpack-li - update to 2.28-164.0.1
glibc-langpack-lij - update to 2.28-164.0.1
glibc-langpack-ln - update to 2.28-164.0.1
glibc-langpack-lo - update to 2.28-164.0.1
glibc-langpack-lt - update to 2.28-164.0.1
glibc-langpack-lv - update to 2.28-164.0.1
glibc-langpack-th - update to 2.28-164.0.1
glibc-langpack-sm - update to 2.28-164.0.1
glibc-langpack-so - update to 2.28-164.0.1
glibc-langpack-sq - update to 2.28-164.0.1
glibc-langpack-sr - update to 2.28-164.0.1
glibc-langpack-ss - update to 2.28-164.0.1
glibc-langpack-st - update to 2.28-164.0.1
glibc-langpack-sv - update to 2.28-164.0.1
glibc-langpack-sw - update to 2.28-164.0.1
glibc-langpack-szl - update to 2.28-164.0.1
glibc-langpack-ta - update to 2.28-164.0.1
glibc-langpack-tcy - update to 2.28-164.0.1
glibc-langpack-te - update to 2.28-164.0.1
glibc-langpack-tg - update to 2.28-164.0.1
glibc-langpack-sl - update to 2.28-164.0.1
glibc-langpack-the - update to 2.28-164.0.1
glibc-langpack-ti - update to 2.28-164.0.1
glibc-langpack-tig - update to 2.28-164.0.1
glibc-langpack-tk - update to 2.28-164.0.1
glibc-langpack-tl - update to 2.28-164.0.1
glibc-langpack-tn - update to 2.28-164.0.1
glibc-langpack-to - update to 2.28-164.0.1
glibc-langpack-tpi - update to 2.28-164.0.1
glibc-langpack-tr - update to 2.28-164.0.1
glibc-langpack-ts - update to 2.28-164.0.1
glibc-langpack-tt - update to 2.28-164.0.1
glibc-langpack-ug - update to 2.28-164.0.1
glibc-langpack-rw - update to 2.28-164.0.1
glibc-langpack-om - update to 2.28-164.0.1
glibc-langpack-or - update to 2.28-164.0.1
glibc-langpack-os - update to 2.28-164.0.1
glibc-langpack-pa - update to 2.28-164.0.1
glibc-langpack-pap - update to 2.28-164.0.1
glibc-langpack-pl - update to 2.28-164.0.1
glibc-langpack-ps - update to 2.28-164.0.1
glibc-langpack-pt - update to 2.28-164.0.1
glibc-langpack-quz - update to 2.28-164.0.1
glibc-langpack-raj - update to 2.28-164.0.1
glibc-langpack-ro - update to 2.28-164.0.1
glibc-langpack-ru - update to 2.28-164.0.1
glibc-langpack-id - update to 2.28-164.0.1
glibc-langpack-sa - update to 2.28-164.0.1
glibc-langpack-sah - update to 2.28-164.0.1
glibc-langpack-sat - update to 2.28-164.0.1
glibc-langpack-sc - update to 2.28-164.0.1
glibc-langpack-sd - update to 2.28-164.0.1
glibc-langpack-se - update to 2.28-164.0.1
glibc-langpack-sgs - update to 2.28-164.0.1
glibc-langpack-shn - update to 2.28-164.0.1
glibc-langpack-shs - update to 2.28-164.0.1
glibc-langpack-si - update to 2.28-164.0.1
glibc-langpack-sid - update to 2.28-164.0.1
glibc-langpack-sk - update to 2.28-164.0.1
glibc-langpack-as - update to 2.28-164.0.1
glibc-all-langpacks - update to 2.28-164.0.1
glibc-common - update to 2.28-164.0.1
glibc-devel - update to 2.28-164.0.1
glibc-headers - update to 2.28-164.0.1
glibc-langpack-aa - update to 2.28-164.0.1
glibc-langpack-af - update to 2.28-164.0.1
glibc-langpack-agr - update to 2.28-164.0.1
glibc-langpack-ak - update to 2.28-164.0.1
glibc-langpack-am - update to 2.28-164.0.1
glibc-langpack-an - update to 2.28-164.0.1
glibc-langpack-anp - update to 2.28-164.0.1
glibc-langpack-ar - update to 2.28-164.0.1
glibc - update to 2.28-164.0.1
glibc-langpack-ast - update to 2.28-164.0.1
glibc-langpack-ayc - update to 2.28-164.0.1
glibc-langpack-az - update to 2.28-164.0.1
glibc-langpack-be - update to 2.28-164.0.1
glibc-langpack-bem - update to 2.28-164.0.1
glibc-langpack-ber - update to 2.28-164.0.1
glibc-langpack-bg - update to 2.28-164.0.1
glibc-langpack-bhb - update to 2.28-164.0.1
glibc-langpack-bho - update to 2.28-164.0.1
glibc-langpack-bi - update to 2.28-164.0.1
glibc-langpack-bn - update to 2.28-164.0.1
glibc-langpack-bo - update to 2.28-164.0.1
glibc-langpack-xh - update to 2.28-164.0.1
nss_db - update to 2.28-164.0.1
nscd - update to 2.28-164.0.1
libnsl - update to 2.28-164.0.1
glibc-utils - update to 2.28-164.0.1
glibc-minimal-langpack - update to 2.28-164.0.1
glibc-locale-source - update to 2.28-164.0.1
glibc-langpack-zu - update to 2.28-164.0.1
glibc-langpack-zh - update to 2.28-164.0.1
glibc-langpack-yuw - update to 2.28-164.0.1
glibc-langpack-yue - update to 2.28-164.0.1
glibc-langpack-yo - update to 2.28-164.0.1
glibc-langpack-yi - update to 2.28-164.0.1
glibc-langpack-ia - update to 2.28-164.0.1
glibc-langpack-wo - update to 2.28-164.0.1
glibc-langpack-wal - update to 2.28-164.0.1
glibc-langpack-wae - update to 2.28-164.0.1
glibc-langpack-wa - update to 2.28-164.0.1
glibc-langpack-vi - update to 2.28-164.0.1
glibc-langpack-ve - update to 2.28-164.0.1
glibc-langpack-uz - update to 2.28-164.0.1
glibc-langpack-ur - update to 2.28-164.0.1
glibc-langpack-unm - update to 2.28-164.0.1
glibc-langpack-uk - update to 2.28-164.0.1
compat-libpthread-nonshared - update to 2.28-164.0.1
glibc-langpack-gv - update to 2.28-164.0.1
glibc-langpack-ff - update to 2.28-164.0.1
glibc-langpack-fi - update to 2.28-164.0.1
glibc-langpack-fil - update to 2.28-164.0.1
glibc-langpack-fo - update to 2.28-164.0.1
glibc-langpack-fr - update to 2.28-164.0.1
glibc-langpack-fur - update to 2.28-164.0.1
glibc-langpack-fy - update to 2.28-164.0.1
glibc-langpack-ga - update to 2.28-164.0.1
glibc-langpack-gd - update to 2.28-164.0.1
glibc-langpack-gez - update to 2.28-164.0.1
glibc-langpack-gl - update to 2.28-164.0.1
glibc-langpack-gu - update to 2.28-164.0.1
glibc-langpack-brx - update to 2.28-164.0.1
glibc-langpack-ha - update to 2.28-164.0.1
glibc-langpack-hak - update to 2.28-164.0.1
glibc-langpack-he - update to 2.28-164.0.1
glibc-langpack-hi - update to 2.28-164.0.1
glibc-langpack-hif - update to 2.28-164.0.1
glibc-langpack-hne - update to 2.28-164.0.1
glibc-langpack-hr - update to 2.28-164.0.1
glibc-langpack-hsb - update to 2.28-164.0.1
glibc-langpack-ht - update to 2.28-164.0.1
glibc-langpack-hu - update to 2.28-164.0.1
glibc-langpack-hy - update to 2.28-164.0.1
glibc-langpack-eu - update to 2.28-164.0.1
glibc-langpack-br - update to 2.28-164.0.1
glibc-langpack-bs - update to 2.28-164.0.1
glibc-langpack-byn - update to 2.28-164.0.1
glibc-langpack-ca - update to 2.28-164.0.1
glibc-langpack-ce - update to 2.28-164.0.1
glibc-langpack-chr - update to 2.28-164.0.1
glibc-langpack-cmn - update to 2.28-164.0.1
glibc-langpack-crh - update to 2.28-164.0.1
glibc-langpack-cs - update to 2.28-164.0.1
glibc-langpack-csb - update to 2.28-164.0.1
glibc-langpack-cv - update to 2.28-164.0.1
glibc-langpack-cy - update to 2.28-164.0.1
glibc-langpack-de - update to 2.28-164.0.1
glibc-langpack-fa - update to 2.28-164.0.1
glibc-langpack-et - update to 2.28-164.0.1
glibc-langpack-es - update to 2.28-164.0.1
glibc-langpack-eo - update to 2.28-164.0.1
glibc-langpack-en - update to 2.28-164.0.1
glibc-langpack-el - update to 2.28-164.0.1
glibc-langpack-dz - update to 2.28-164.0.1
glibc-langpack-dv - update to 2.28-164.0.1
glibc-langpack-dsb - update to 2.28-164.0.1
glibc-langpack-doi - update to 2.28-164.0.1
glibc-langpack-da - update to 2.28-164.0.1
glibc-lang - update to 2.31-150300.9.12.1
glibc - addressed in versions 2.33-21.fc34, 2.34-21.fc35
sys-libs/glibc - update to 2.34
EMC ECS - update to 3.7.0.2
IBM Cloud Transformation Advisor - update to 3.10.0
CloudLink - update to 7.1.4
IBM Supplied MQ Advanced Queue Manager Container images - addressed in versions 9.2.0.5-r1-eus, 9.2.5.0-r1

• https://sourceware.org/bugzilla/show_bug.cgi?id=28769

• Multiple vulnerabilities in GNU C Library
• Multiple vulnerabilities in Cloud Foundry cflinuxfs3
• Red Hat Enterprise Linux 8 update for glibc
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.2
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.4
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.3
• Ubuntu update for glibc
• Ubuntu update for glibc
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Multiple vulnerabilities in Dell CloudLink
• Gentoo update for GNU C Library
• Multiple vulnerabilities in IBM Cloud Pak System third-party components
• IBM Elastic Storage System update for glibc
• Multiple vulnerabilities in Dell Elastic Cloud Storage (ECS)
• Multiple vulnerabilities in Netcool Operations Insight
• Off-by-one in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• SUSE update for glibc
• SUSE update for glibc
• SUSE update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in Siemens SIMATIC S7-1500 TM MFP - BIOS
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in IBM Db2 Rest
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• IBM Integrated Analytics System update for glibc
• Multiple vulnerabilities in Migration Toolkit for Containers 1.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.4
• Multiple vulnerabilities in Migration Toolkit for Containers 1.7
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Fedora 35 update for glibc
• Fedora 34 update for glibc
• Multiple vulnerabilities in IBM MQ Operator and IBM supplied MQ Advanced container images
• Anolis OS update for glibc
• Dell RecoverPoint for Virtual Machines update for third-party components
• SUSE update for glibc