RHSA-2021:4358MediumCVSS 9.1

Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Published
November 9, 2021
Last Modified
October 14, 2026

🔗 CVE IDs covered (3)

CVE-2021-27645 →CVE-2021-33574 →CVE-2021-35942 →

📋 Description

CVE-2021-27645 — glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c CVE-2021-33574 — glibc: mq_notify does not handle separately allocated thread attributes CVE-2021-35942 — glibc: Arbitrary read in wordexp()

🎯 Affected products200

  • Red Hat CodeReady Linux Builder (v. 8)
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux BaseOS (v. 8)
  • compat-libpthread-nonshared-0:2.28-164.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • compat-libpthread-nonshared-0:2.28-164.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • compat-libpthread-nonshared-0:2.28-164.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • compat-libpthread-nonshared-0:2.28-164.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glibc-0:2.28-164.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-0:2.28-164.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-0:2.28-164.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-0:2.28-164.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-0:2.28-164.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-0:2.28-164.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-all-langpacks-0:2.28-164.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-all-langpacks-0:2.28-164.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-all-langpacks-0:2.28-164.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-all-langpacks-0:2.28-164.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-benchtests-0:2.28-164.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • glibc-benchtests-0:2.28-164.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • glibc-benchtests-0:2.28-164.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • glibc-benchtests-0:2.28-164.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • glibc-common-0:2.28-164.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-common-0:2.28-164.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-common-0:2.28-164.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-common-0:2.28-164.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-debuginfo-0:2.28-164.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • glibc-debuginfo-0:2.28-164.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glibc-debuginfo-0:2.28-164.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • glibc-debuginfo-0:2.28-164.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • glibc-debuginfo-0:2.28-164.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the glibc library must be restarted, or the system rebooted. Workaround: Do not use untrusted regular expression input for the wordexp() function.

🔗 References (12)