RHSA-2024:3588: Important: glibc security update
Important: glibc security update
Other sources
The glibc packages provide the standard C libraries (libc), POSIX thread<br>libraries (libpthread), standard math libraries (libm), and the name service<br>cache daemon (nscd) used by multiple programs on the system. Without these<br>libraries, the Linux system cannot function correctly.<br>Security Fix(es):<br><li> glibc: Out of bounds write in iconv may lead to remote code execution</li> (CVE-2024-2961)<br><li> glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)</li> <li> glibc: null pointer dereferences after failed netgroup cache insertion</li> (CVE-2024-33600)<br><li> glibc: netgroup cache may terminate daemon on memory allocation failure</li> (CVE-2024-33601)<br><li> glibc: netgroup cache assumes NSS callback uses in-buffer strings</li> (CVE-2024-33602)<br>For more details about the security issue(s), including the impact,<br>a CVSS score, acknowledgments, and other related information, refer<br>to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:3588?
The severity of RHSA-2024:3588 is classified as important, indicating it requires prompt attention.
How do I fix RHSA-2024:3588?
To fix RHSA-2024:3588, update the affected glibc packages to version 2.17-326.el7_9.3.
Which systems are affected by RHSA-2024:3588?
RHSA-2024:3588 affects systems running certain versions of Red Hat Enterprise Linux, particularly those with glibc packages.
What components are included in the RHSA-2024:3588 update?
The RHSA-2024:3588 update includes updates for glibc, glibc-common, glibc-devel, glibc-static, and other related packages.
Is there any risk if RHSA-2024:3588 is not applied?
Not applying RHSA-2024:3588 may expose the system to security vulnerabilities that could be exploited.