IT46678: HIGH SEVERITY VULNERABILITY IN GLIBC

APAR status

• Closed as program error.

Error description

• The glibc packages provide the standard C libraries (libc),
  POSIX thread libraries (libpthread), standard math libraries
  (libm), and the name service cache daemon (nscd) used by
  multiple programs on the system. Without these libraries, the
  Linux system cannot function correctly.
  
  Security Fix(es) for CVE-2024-2961:
  
  glibc: Out of bounds write in iconv may lead to remote code
  execution
  

Local fix

Problem summary

• The glibc packages provide the standard C libraries (libc),
  POSIX thread libraries (libpthread), standard math libraries
  (libm), and the name service cache daemon (nscd) used by
  multiple programs on the system. Without these libraries, the
  Linux system cannot function correctly.
  
  Security Fix(es) for CVE-2024-2961:
  
  glibc: Out of bounds write in iconv may lead to remote code
  execution
  

Problem conclusion

• Fix is available in 10.6.1, 10.5.0.13, 10.6.0.1
  
  For a list of the latest fix packs available, please see:
  https://www.ibm.com/support/pages/node/83105
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels