CVE-2024-2961

Issue

A vulnerability for glibc that can be triggered when php iconv() function is called to convert a string to ISO-2022-CN-EXT

Environment

• CloudLinux 7
• CloudLinux 8
• CloudLinux 9
• glibc < 2.28-236.el8_9.13

Solution

Update glibc to the latest version or at least to glibc-2.28-236.el8_9.13.x86_64. 

For CloudLinux 7, the patch has been released in version glibc-2.17-326.el7_9.3.

Useful links

• https://access.redhat.com/security/cve/cve-2024-2961 
• https://access.redhat.com/errata/RHSA-2024:3588