Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
Red Hat GNU C Library update exposes sensitive system information
published 1 year ago
Summary
An update is available for the GNU C Library, which is used by many Red Hat products. This update fixes a security issue that could allow attackers to access sensitive information about a system. You should update your system to a version of the GNU C Library that fixes this issue.
What to do
- Update redhat glibc to version 0:2.17-326.el7_9.5.
- Update redhat glibc-common to version 0:2.17-326.el7_9.5.
- Update redhat glibc-debuginfo to version 0:2.17-326.el7_9.5.
- Update redhat glibc-debuginfo-common to version 0:2.17-326.el7_9.5.
- Update redhat glibc-devel to version 0:2.17-326.el7_9.5.
- Update redhat glibc-headers to version 0:2.17-326.el7_9.5.
- Update redhat glibc-static to version 0:2.17-326.el7_9.5.
- Update redhat glibc-utils to version 0:2.17-326.el7_9.5.
- Update redhat nscd to version 0:2.17-326.el7_9.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_els:7 | redhat | glibc |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-common |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-debuginfo |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-debuginfo-common |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-devel |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-headers |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-static |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | glibc-utils |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
| Red Hat:rhel_els:7 | redhat | nscd |
< 0:2.17-326.el7_9.5 Fix: upgrade to 0:2.17-326.el7_9.5
|
Original advisory text
Red Hat Security Advisory: glibc security update
References
- https://access.redhat.com/errata/RHSA-2025:10219 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2367468 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10219.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-4802 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-4802 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-4802 Vendor Advisory
- https://inbox.sourceware.org/libc-announce/3ac997b0-28a5-4129-af53-675efe4c2dec@... Third Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=32976 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2025/05/16/7 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2025/05/17/2 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published3 Jul 2025
Updated25 Mar 2026
First seen25 Mar 2026
Sources
RHSA-2025:10219 · OSV
Track software like this
Free during beta