critical Security update for glibc

SUSE-SLE-Micro-6.0-328

This update for glibc fixes the following issues: - CVE-2025-4802: Fixed local root exploits when using static built setuid root applications. (elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static) (bsc#1243317) - pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ #25847) - Mark functions in libc_nonshared.a as hidden (bsc#1239883)

• Release Date
  May 21 2025
• References
  Bugzilla: 1234128, 1239883, 1243317
  CVEs: CVE-2025-4802
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64

• Packages
  glibc
  Standard Shared Libraries (from the GNU C Library)

  2.38-9.1 lock rpm

  glibc-devel
  Include Files and Libraries Mandatory for Development

  2.38-9.1 lock rpm

  glibc-locale
  Locale Data for Localized Programs

  2.38-9.1 lock rpm

  glibc-locale-base
  en_US Locale Data for Localized Programs

  2.38-9.1 lock rpm

SUSE Linux Micro 6.0 s390x

• Packages
  glibc
  Standard Shared Libraries (from the GNU C Library)

  2.38-9.1 lock rpm

  glibc-devel
  Include Files and Libraries Mandatory for Development

  2.38-9.1 lock rpm

  glibc-locale
  Locale Data for Localized Programs

  2.38-9.1 lock rpm

  glibc-locale-base
  en_US Locale Data for Localized Programs

  2.38-9.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  glibc
  Standard Shared Libraries (from the GNU C Library)

  2.38-9.1 lock rpm

  glibc-devel
  Include Files and Libraries Mandatory for Development

  2.38-9.1 lock rpm

  glibc-locale
  Locale Data for Localized Programs

  2.38-9.1 lock rpm

  glibc-locale-base
  en_US Locale Data for Localized Programs

  2.38-9.1 lock rpm