Security update for glibc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:02964-1 Final 1 1 2025-08-22T12:52:41Z current 2025-08-22T12:52:41Z 2025-08-22T12:52:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for glibc This update for glibc fixes the following issues: - CVE-2025-8058: Fixed double-free after allocation failure in regcomp. (bsc#1246965) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-2964,SUSE-SLE-Module-Basesystem-15-SP6-2025-2964,SUSE-SLE-Module-Basesystem-15-SP7-2025-2964,SUSE-SLE-Module-Development-Tools-15-SP6-2025-2964,SUSE-SLE-Module-Development-Tools-15-SP7-2025-2964,openSUSE-SLE-15.6-2025-2964 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-202502964-1/ Link for SUSE-SU-2025:02964-1 https://lists.suse.com/pipermail/sle-updates/2025-August/041340.html E-Mail link for SUSE-SU-2025:02964-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1240058 SUSE Bug 1240058 https://bugzilla.suse.com/1246965 SUSE Bug 1246965 https://www.suse.com/security/cve/CVE-2025-8058/ SUSE CVE CVE-2025-8058 page SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 openSUSE Leap 15.6 glibc-2.38-150600.14.37.1 glibc-32bit-2.38-150600.14.37.1 glibc-64bit-2.38-150600.14.37.1 glibc-devel-2.38-150600.14.37.1 glibc-devel-32bit-2.38-150600.14.37.1 glibc-devel-64bit-2.38-150600.14.37.1 glibc-devel-static-2.38-150600.14.37.1 glibc-devel-static-32bit-2.38-150600.14.37.1 glibc-devel-static-64bit-2.38-150600.14.37.1 glibc-extra-2.38-150600.14.37.1 glibc-html-2.38-150600.14.37.1 glibc-i18ndata-2.38-150600.14.37.1 glibc-info-2.38-150600.14.37.1 glibc-lang-2.38-150600.14.37.1 glibc-locale-2.38-150600.14.37.1 glibc-locale-base-2.38-150600.14.37.1 glibc-locale-base-32bit-2.38-150600.14.37.1 glibc-locale-base-64bit-2.38-150600.14.37.1 glibc-profile-2.38-150600.14.37.1 glibc-profile-32bit-2.38-150600.14.37.1 glibc-profile-64bit-2.38-150600.14.37.1 glibc-utils-2.38-150600.14.37.1 glibc-utils-32bit-2.38-150600.14.37.1 glibc-utils-64bit-2.38-150600.14.37.1 libnsl1-2.38-150600.14.37.1 libnsl1-32bit-2.38-150600.14.37.1 libnsl1-64bit-2.38-150600.14.37.1 nscd-2.38-150600.14.37.1 glibc-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-devel-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-extra-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-i18ndata-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-info-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-lang-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-locale-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-locale-base-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-locale-base-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-profile-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libnsl1-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libnsl1-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 nscd-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-devel-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-extra-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-i18ndata-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-info-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-lang-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-locale-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-locale-base-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-locale-base-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-profile-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libnsl1-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libnsl1-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nscd-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc-devel-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 glibc-devel-static-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 glibc-utils-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 glibc-devel-32bit-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 glibc-devel-static-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 glibc-utils-2.38-150600.14.37.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 glibc-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-devel-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-devel-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-devel-static-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-devel-static-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-extra-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-html-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-i18ndata-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-info-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-lang-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-locale-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-locale-base-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-locale-base-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-profile-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-profile-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-utils-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 glibc-utils-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 libnsl1-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 libnsl1-32bit-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 nscd-2.38-150600.14.37.1 as a component of openSUSE Leap 15.6 The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library. CVE-2025-8058 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-devel-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-extra-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-i18ndata-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-info-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-lang-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-locale-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-locale-base-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-locale-base-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glibc-profile-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libnsl1-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libnsl1-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:nscd-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-devel-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-extra-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-i18ndata-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-info-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-lang-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-locale-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-locale-base-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-locale-base-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glibc-profile-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libnsl1-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libnsl1-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:nscd-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:glibc-devel-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:glibc-devel-static-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:glibc-utils-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:glibc-devel-32bit-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:glibc-devel-static-2.38-150600.14.37.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:glibc-utils-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-devel-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-devel-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-devel-static-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-devel-static-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-extra-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-html-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-i18ndata-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-info-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-lang-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-locale-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-locale-base-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-locale-base-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-profile-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-profile-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-utils-2.38-150600.14.37.1 openSUSE Leap 15.6:glibc-utils-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:libnsl1-2.38-150600.14.37.1 openSUSE Leap 15.6:libnsl1-32bit-2.38-150600.14.37.1 openSUSE Leap 15.6:nscd-2.38-150600.14.37.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-202502964-1/ https://www.suse.com/security/cve/CVE-2025-8058.html CVE-2025-8058 https://bugzilla.suse.com/1246965 SUSE Bug 1246965