Linux · Security advisory · November 9, 2021

RLSA-2021:4358: glibc security update

RLSA-2021:4358, released November 9, 2021, fixes 3 CVEs in glibc (version 0:2.28-164.el8). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0352

89th percentile

Priority of the 3 CVEs

Patch now 0
                                Urgent 0
                                High 3
                                Routine 0

Fixed package versions

Product	Release	Fixed in
glibc	rocky 8	0:2.28-164.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-33574	compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar...	9.8	0.0352	None reported
High	CVE-2021-35942	glibc-langpack-ru: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar...	9.1	0.0275	None reported
High	CVE-2021-27645	glibc-langpack-sr: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar...	9.1	0.0039	None reported