[CLSA-2025:1757690477] glibc: Fix of CVE-2025-4802
Type:
security
Severity:
Important
Release date:
2025-09-12 15:21:20 UTC
Description:
- CVE-2025-4802: prevent untrusted LD_LIBRARY_PATH from loading dynamically shared libraries in statically compiled binaries that call dlopen
Updated packages:
  • glibc-2.17-326.el7_9.99.tuxcare.els1.i686.rpm
    sha:299fda485885ce321db133bcc1a12a20f5a3ce2d5c1bb214139eb8f580d9eb02
  • glibc-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:8bc2baa7bddd0ed0ef21516b7227eee99b8744e1e73f25d46cad7569e51b06d5
  • glibc-common-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:bd4c5728341ecec876e5038b0e73c571969ff6e69214bd6422cb2256631b22d2
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els1.i686.rpm
    sha:8f1e6daf78e067c06dc27510fb8d2c92c34532a1badfcc25a356b43bc2328b2b
  • glibc-devel-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:c1aa8b0b86e667f70214dccafcc06de22b052b33d338bbda3a57f14245f20a3d
  • glibc-headers-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:8d38261532bca8906efe36c845d739284f10d942159b6abd449d4719ff4d02c4
  • glibc-static-2.17-326.el7_9.99.tuxcare.els1.i686.rpm
    sha:90ad769650bb1d420d610bd286c7dfeeca6b4f7359879d5101df201e7c39c845
  • glibc-static-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:52463f218f08cbb3dc433d3fd82862c565a83e998cb45d4773e696de261999fc
  • glibc-utils-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:8ee8cd6a31b25a0a852b6400c3344e32de0cf9f52e125131edba6979f269a3dc
  • nscd-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm
    sha:4730db6e75a47b2d663115e81b690c7ec64cb2a3bc29752f50ad0794df6bb1d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.