Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Red Hat glibc Library Security Update
published 2 years ago
Summary
A security update is available for the Red Hat glibc library, which is used by many Red Hat systems. This update addresses a security issue that could allow an attacker to execute malicious code on a vulnerable system. Red Hat recommends that all affected systems be updated with the latest version of the glibc library.
What to do
- Update redhat glibc to version 0:2.17-326.el7_9.3.
- Update redhat glibc-common to version 0:2.17-326.el7_9.3.
- Update redhat glibc-debuginfo to version 0:2.17-326.el7_9.3.
- Update redhat glibc-debuginfo-common to version 0:2.17-326.el7_9.3.
- Update redhat glibc-devel to version 0:2.17-326.el7_9.3.
- Update redhat glibc-headers to version 0:2.17-326.el7_9.3.
- Update redhat glibc-utils to version 0:2.17-326.el7_9.3.
- Update redhat nscd to version 0:2.17-326.el7_9.3.
- Update redhat glibc-static to version 0:2.17-326.el7_9.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:7::client | redhat | glibc |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-debuginfo |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-debuginfo-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-devel |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-headers |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-utils |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | nscd |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::client | redhat | glibc-static |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::computenode | redhat | glibc-debuginfo |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::computenode | redhat | glibc-debuginfo-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::computenode | redhat | glibc-static |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-debuginfo |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-debuginfo-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-devel |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-headers |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-utils |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | nscd |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::server | redhat | glibc-static |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-debuginfo |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-debuginfo-common |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-devel |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-headers |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-utils |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | nscd |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
| Red Hat:enterprise_linux:7::workstation | redhat | glibc-static |
< 0:2.17-326.el7_9.3 Fix: upgrade to 0:2.17-326.el7_9.3
|
Original advisory text
Red Hat Security Advisory: glibc security update
References
- https://access.redhat.com/errata/RHSA-2024:3588 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2273404 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2277202 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2277204 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2277205 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2277206 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3588.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-2961 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-2961 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-2961 Vendor Advisory
- https://www.openwall.com/lists/oss-security/2024/04/17/9 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-33599 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-33599 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-33599 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-33600 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-33600 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-33600 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-33601 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-33601 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-33601 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-33602 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-33602 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-33602 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published19 Sep 2024
Updated2 Jul 2026
First seen2 Jul 2026
Sources
RHSA-2024:3588 · OSV
Track software like this
Free during beta