SUSE-SU-2025:01702-2

CVE-2025-4802: possible execution of attacker controlled code when statically linked setuid binaries using dlopen search for libraries to load in LDLIBRARYPATH (bsc#1243317).

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP7 / glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.38-150600.14.32.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-locale-base-32bit": "2.38-150600.14.32.1",
            "glibc-lang": "2.38-150600.14.32.1",
            "glibc-info": "2.38-150600.14.32.1",
            "glibc-i18ndata": "2.38-150600.14.32.1",
            "glibc-locale": "2.38-150600.14.32.1",
            "glibc-32bit": "2.38-150600.14.32.1",
            "glibc": "2.38-150600.14.32.1",
            "libnsl1-32bit": "2.38-150600.14.32.1",
            "glibc-devel": "2.38-150600.14.32.1",
            "glibc-profile": "2.38-150600.14.32.1",
            "nscd": "2.38-150600.14.32.1",
            "glibc-locale-base": "2.38-150600.14.32.1",
            "libnsl1": "2.38-150600.14.32.1",
            "glibc-extra": "2.38-150600.14.32.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP7 / glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.38-150600.14.32.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-utils": "2.38-150600.14.32.1",
            "glibc-devel-32bit": "2.38-150600.14.32.1",
            "glibc-devel-static": "2.38-150600.14.32.1"
        }
    ]
}