Skip to content

update: glibc #1621

@dongsupark

Description

@dongsupark

Name: glibc
CVEs: CVE-2025-0395
CVSSs: n/a
Action Needed: update to >= 2.40-r8

Summary: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

See also https://seclists.org/oss-sec/2025/q1/48.

refmap.gentoo: https://bugs.gentoo.org/948592

Metadata

Metadata

Assignees

No one assigned

    Labels

    advisorysecurity advisorysecuritysecurity concerns

    Type

    No type

    Projects

    Status

    Implemented

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions