[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <3ac997b0-28a5-4129-af53-675efe4c2dec@redhat.com>
Date: Fri, 16 May 2025 15:41:11 -0400
From: Carlos O'Donell <carlos@...hat.com>
To: libc-announce@...rceware.org, oss-security@...ts.openwall.com
Subject: The GNU C Library security advisories update for 2025-05-16
The following security advisories have been published:
GLIBC-SA-2025-0002:
===================
elf: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)
A statically linked setuid binary that calls dlopen (including internal
dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)
may incorrectly search LD_LIBRARY_PATH to determine which library to load,
leading to the execution of library code that is attacker controlled.
The only viable vector for exploitation of this bug is local, if a static
setuid program exists, and that program calls dlopen, then it may search
LD_LIBRARY_PATH to locate the SONAME to load. No such program has been
discovered at the time of publishing this advisory, but the presence of
custom setuid programs, although strongly discouraged as a security
practice, cannot be discounted.
Notes:
======
Published advisories are available directly in the project git repository:
https://sourceware.org/cgit/glibc/tree/advisories
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
