Linux · Security advisory · June 14, 2024

RLSA-2024:3344: glibc security update

RLSA-2024:3344, released June 14, 2024, fixes 4 CVEs in glibc (version 0:2.28-251.el8_10.2). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0131
70th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 3 Routine 1

Fixed package versions

ProductReleaseFixed in
glibcrocky 80:2.28-251.el8_10.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-33599 compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar... 8.1 0.0131 None reported
High CVE-2024-33601 compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar... 7.3 0.0108 None reported
High CVE-2024-33602 compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar... 7.4 0.0040 None reported
Routine CVE-2024-33600 compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar... 5.9 0.0122 None reported
Showing 1 to 4 of 4 1