An update for glibc is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-1581 Final 1.0 1.0 2025-06-06 Initial 2025-06-06 2025-06-06 openEuler SA Tool V1.0 2025-06-06 glibc security update An update for glibc is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4 The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es): Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).(CVE-2025-4802) An update for glibc is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High glibc https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1581 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-4802 https://nvd.nist.gov/vuln/detail/CVE-2025-4802 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-20.03-LTS-SP4 glibc-2.34-167.oe2203sp3.aarch64.rpm glibc-all-langpacks-2.34-167.oe2203sp3.aarch64.rpm glibc-common-2.34-167.oe2203sp3.aarch64.rpm glibc-compat-2.17-2.34-167.oe2203sp3.aarch64.rpm glibc-debuginfo-2.34-167.oe2203sp3.aarch64.rpm glibc-debugsource-2.34-167.oe2203sp3.aarch64.rpm glibc-debugutils-2.34-167.oe2203sp3.aarch64.rpm glibc-devel-2.34-167.oe2203sp3.aarch64.rpm glibc-locale-archive-2.34-167.oe2203sp3.aarch64.rpm glibc-locale-source-2.34-167.oe2203sp3.aarch64.rpm glibc-nss-devel-2.34-167.oe2203sp3.aarch64.rpm libnsl-2.34-167.oe2203sp3.aarch64.rpm nscd-2.34-167.oe2203sp3.aarch64.rpm nss_modules-2.34-167.oe2203sp3.aarch64.rpm glibc-2.34-167.oe2203sp4.aarch64.rpm glibc-all-langpacks-2.34-167.oe2203sp4.aarch64.rpm glibc-common-2.34-167.oe2203sp4.aarch64.rpm glibc-compat-2.17-2.34-167.oe2203sp4.aarch64.rpm glibc-debuginfo-2.34-167.oe2203sp4.aarch64.rpm glibc-debugsource-2.34-167.oe2203sp4.aarch64.rpm glibc-debugutils-2.34-167.oe2203sp4.aarch64.rpm glibc-devel-2.34-167.oe2203sp4.aarch64.rpm glibc-locale-archive-2.34-167.oe2203sp4.aarch64.rpm glibc-locale-source-2.34-167.oe2203sp4.aarch64.rpm glibc-nss-devel-2.34-167.oe2203sp4.aarch64.rpm libnsl-2.34-167.oe2203sp4.aarch64.rpm nscd-2.34-167.oe2203sp4.aarch64.rpm nss_modules-2.34-167.oe2203sp4.aarch64.rpm glibc-2.38-59.oe2403.aarch64.rpm glibc-all-langpacks-2.38-59.oe2403.aarch64.rpm glibc-common-2.38-59.oe2403.aarch64.rpm glibc-debuginfo-2.38-59.oe2403.aarch64.rpm glibc-debugsource-2.38-59.oe2403.aarch64.rpm glibc-debugutils-2.38-59.oe2403.aarch64.rpm glibc-devel-2.38-59.oe2403.aarch64.rpm glibc-locale-archive-2.38-59.oe2403.aarch64.rpm glibc-locale-source-2.38-59.oe2403.aarch64.rpm glibc-nss-devel-2.38-59.oe2403.aarch64.rpm libnsl-2.38-59.oe2403.aarch64.rpm nscd-2.38-59.oe2403.aarch64.rpm nss_modules-2.38-59.oe2403.aarch64.rpm glibc-2.38-59.oe2403sp1.aarch64.rpm glibc-all-langpacks-2.38-59.oe2403sp1.aarch64.rpm glibc-common-2.38-59.oe2403sp1.aarch64.rpm glibc-debuginfo-2.38-59.oe2403sp1.aarch64.rpm glibc-debugsource-2.38-59.oe2403sp1.aarch64.rpm glibc-debugutils-2.38-59.oe2403sp1.aarch64.rpm glibc-devel-2.38-59.oe2403sp1.aarch64.rpm glibc-locale-archive-2.38-59.oe2403sp1.aarch64.rpm glibc-locale-source-2.38-59.oe2403sp1.aarch64.rpm glibc-nss-devel-2.38-59.oe2403sp1.aarch64.rpm libnsl-2.38-59.oe2403sp1.aarch64.rpm nscd-2.38-59.oe2403sp1.aarch64.rpm nss_modules-2.38-59.oe2403sp1.aarch64.rpm glibc-2.28-107.oe2003sp4.aarch64.rpm glibc-all-langpacks-2.28-107.oe2003sp4.aarch64.rpm glibc-benchtests-2.28-107.oe2003sp4.aarch64.rpm glibc-common-2.28-107.oe2003sp4.aarch64.rpm glibc-compat-2.17-2.28-107.oe2003sp4.aarch64.rpm glibc-debuginfo-2.28-107.oe2003sp4.aarch64.rpm glibc-debugsource-2.28-107.oe2003sp4.aarch64.rpm glibc-debugutils-2.28-107.oe2003sp4.aarch64.rpm glibc-devel-2.28-107.oe2003sp4.aarch64.rpm glibc-locale-source-2.28-107.oe2003sp4.aarch64.rpm glibc-nss-devel-2.28-107.oe2003sp4.aarch64.rpm libnsl-2.28-107.oe2003sp4.aarch64.rpm nscd-2.28-107.oe2003sp4.aarch64.rpm nss_modules-2.28-107.oe2003sp4.aarch64.rpm glibc-2.34-167.oe2203sp3.src.rpm glibc-2.34-167.oe2203sp4.src.rpm glibc-2.38-59.oe2403.src.rpm glibc-2.38-59.oe2403sp1.src.rpm glibc-2.28-107.oe2003sp4.src.rpm glibc-2.34-167.oe2203sp3.x86_64.rpm glibc-all-langpacks-2.34-167.oe2203sp3.x86_64.rpm glibc-common-2.34-167.oe2203sp3.x86_64.rpm glibc-compat-2.17-2.34-167.oe2203sp3.x86_64.rpm glibc-debuginfo-2.34-167.oe2203sp3.x86_64.rpm glibc-debugsource-2.34-167.oe2203sp3.x86_64.rpm glibc-debugutils-2.34-167.oe2203sp3.x86_64.rpm glibc-devel-2.34-167.oe2203sp3.x86_64.rpm glibc-locale-archive-2.34-167.oe2203sp3.x86_64.rpm glibc-locale-source-2.34-167.oe2203sp3.x86_64.rpm glibc-nss-devel-2.34-167.oe2203sp3.x86_64.rpm libnsl-2.34-167.oe2203sp3.x86_64.rpm nscd-2.34-167.oe2203sp3.x86_64.rpm nss_modules-2.34-167.oe2203sp3.x86_64.rpm glibc-2.34-167.oe2203sp4.x86_64.rpm glibc-all-langpacks-2.34-167.oe2203sp4.x86_64.rpm glibc-common-2.34-167.oe2203sp4.x86_64.rpm glibc-compat-2.17-2.34-167.oe2203sp4.x86_64.rpm glibc-debuginfo-2.34-167.oe2203sp4.x86_64.rpm glibc-debugsource-2.34-167.oe2203sp4.x86_64.rpm glibc-debugutils-2.34-167.oe2203sp4.x86_64.rpm glibc-devel-2.34-167.oe2203sp4.x86_64.rpm glibc-locale-archive-2.34-167.oe2203sp4.x86_64.rpm glibc-locale-source-2.34-167.oe2203sp4.x86_64.rpm glibc-nss-devel-2.34-167.oe2203sp4.x86_64.rpm libnsl-2.34-167.oe2203sp4.x86_64.rpm nscd-2.34-167.oe2203sp4.x86_64.rpm nss_modules-2.34-167.oe2203sp4.x86_64.rpm glibc-2.38-59.oe2403.x86_64.rpm glibc-all-langpacks-2.38-59.oe2403.x86_64.rpm glibc-common-2.38-59.oe2403.x86_64.rpm glibc-debuginfo-2.38-59.oe2403.x86_64.rpm glibc-debugsource-2.38-59.oe2403.x86_64.rpm glibc-debugutils-2.38-59.oe2403.x86_64.rpm glibc-devel-2.38-59.oe2403.x86_64.rpm glibc-locale-archive-2.38-59.oe2403.x86_64.rpm glibc-locale-source-2.38-59.oe2403.x86_64.rpm glibc-nss-devel-2.38-59.oe2403.x86_64.rpm libnsl-2.38-59.oe2403.x86_64.rpm nscd-2.38-59.oe2403.x86_64.rpm nss_modules-2.38-59.oe2403.x86_64.rpm glibc-2.38-59.oe2403sp1.x86_64.rpm glibc-all-langpacks-2.38-59.oe2403sp1.x86_64.rpm glibc-common-2.38-59.oe2403sp1.x86_64.rpm glibc-debuginfo-2.38-59.oe2403sp1.x86_64.rpm glibc-debugsource-2.38-59.oe2403sp1.x86_64.rpm glibc-debugutils-2.38-59.oe2403sp1.x86_64.rpm glibc-devel-2.38-59.oe2403sp1.x86_64.rpm glibc-locale-archive-2.38-59.oe2403sp1.x86_64.rpm glibc-locale-source-2.38-59.oe2403sp1.x86_64.rpm glibc-nss-devel-2.38-59.oe2403sp1.x86_64.rpm libnsl-2.38-59.oe2403sp1.x86_64.rpm nscd-2.38-59.oe2403sp1.x86_64.rpm nss_modules-2.38-59.oe2403sp1.x86_64.rpm glibc-2.28-107.oe2003sp4.x86_64.rpm glibc-all-langpacks-2.28-107.oe2003sp4.x86_64.rpm glibc-benchtests-2.28-107.oe2003sp4.x86_64.rpm glibc-common-2.28-107.oe2003sp4.x86_64.rpm glibc-compat-2.17-2.28-107.oe2003sp4.x86_64.rpm glibc-debuginfo-2.28-107.oe2003sp4.x86_64.rpm glibc-debugsource-2.28-107.oe2003sp4.x86_64.rpm glibc-debugutils-2.28-107.oe2003sp4.x86_64.rpm glibc-devel-2.28-107.oe2003sp4.x86_64.rpm glibc-locale-source-2.28-107.oe2003sp4.x86_64.rpm glibc-nss-devel-2.28-107.oe2003sp4.x86_64.rpm libnsl-2.28-107.oe2003sp4.x86_64.rpm nscd-2.28-107.oe2003sp4.x86_64.rpm nss_modules-2.28-107.oe2003sp4.x86_64.rpm glibc-help-2.34-167.oe2203sp3.noarch.rpm glibc-help-2.34-167.oe2203sp4.noarch.rpm glibc-help-2.38-59.oe2403.noarch.rpm glibc-help-2.38-59.oe2403sp1.noarch.rpm glibc-help-2.28-107.oe2003sp4.noarch.rpm Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). 2025-06-06 CVE-2025-4802 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-20.03-LTS-SP4 High 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H glibc security update 2025-06-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1581