UbuntuUpdates.org

Package "glibc"

Name: glibc

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • GNU C Library: sources
  • GNU C Library: Development tools
  • GNU C Library: Precompiled locale data
  • GNU C Library: Name Service Cache Daemon
Latest version: 2.41-6ubuntu1.2
Release: plucky (25.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "glibc" in Plucky

Repository Area Version
base main 2.41-6ubuntu1
base universe 2.41-6ubuntu1
security main 2.41-6ubuntu1.2
updates main 2.41-6ubuntu1.2
updates universe 2.41-6ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.41-6ubuntu1.2 2025-09-23 15:07:53 UTC

  glibc (2.41-6ubuntu1.2) plucky-security; urgency=medium

  * SECURITY UPDATE: double-free in regcomp function
    - debian/patches/any/CVE-2025-8058.patch: fix double-free after
      allocation failure in regcomp in posix/Makefile, posix/regcomp.c,
      posix/tst-regcomp-bracket-free.c.
    - CVE-2025-8058

 -- Marc Deslauriers <email address hidden> Wed, 17 Sep 2025 08:17:39 -0400
Source diff to previous version
CVE-2025-8058 The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accompl

Version: 2.41-6ubuntu1.1 2025-07-14 23:10:11 UTC

  glibc (2.41-6ubuntu1.1) plucky-security; urgency=medium

  * SECURITY UPDATE: insecure power10 strcmp implementation
    - debian/patches/any/CVE-2025-5702.patch: remove power10 optimized
      strcmp.
    - CVE-2025-5702
  * SECURITY UPDATE: insecure power10 strncmp implementation
    - debian/patches/any/CVE-2025-5745.patch: remove power10 optimized
      strncmp.
    - CVE-2025-5745

 -- Marc Deslauriers <email address hidden> Wed, 09 Jul 2025 12:42:08 -0400
CVE-2025-5702 The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 witho
CVE-2025-5745 The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 with


About   -   Send Feedback to @ubuntu_updates