<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="sa-render.xsl"?>
  <update from="huaweicloud.com" type="security" status="stable" version="1">
    <id>HCE2-SA-2025-0227</id>
    <title>An update for glibc is now available for HCE 2.0</title>
    <severity>Moderate</severity>
    <release>HCE 2.0</release>
    <issued date="2025-09-23 11:51:49"/>
    <updated date="2025-09-23 11:51:49"/>
    <references>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2025-8058" id="CVE-2025-8058" title="CVE-2025-8058 Base Score: 4.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L" type="cve"/>
    </references>
    <description>Security Fix(es):

The regcomp function in the GNU C library version from 2.4 to 2.41 is 
subject to a double free if some previous allocation fails. It can be 
accomplished either by a malloc failure or by using an interposed malloc
 that injects random malloc failures. The double free can allow buffer 
manipulation depending of how the regex is constructed. This issue 
affects all architectures and ABIs supported by the GNU C library. (CVE-2025-8058)
</description>
    <pkglist>
      <collection short="HCE 2.0" package="glibc">
        <name>HCE 2.0</name>
        <package arch="aarch64" name="glibc" version="2.34" release="70.r98.hce2">
          <filename>glibc-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-all-langpacks" version="2.34" release="70.r98.hce2">
          <filename>glibc-all-langpacks-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-common" version="2.34" release="70.r98.hce2">
          <filename>glibc-common-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-compat-2.17" version="2.34" release="70.r98.hce2">
          <filename>glibc-compat-2.17-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-devel" version="2.34" release="70.r98.hce2">
          <filename>glibc-devel-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="glibc-help" version="2.34" release="70.r98.hce2">
          <filename>glibc-help-2.34-70.r98.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-locale-archive" version="2.34" release="70.r98.hce2">
          <filename>glibc-locale-archive-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-locale-source" version="2.34" release="70.r98.hce2">
          <filename>glibc-locale-source-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="glibc-nss-devel" version="2.34" release="70.r98.hce2">
          <filename>glibc-nss-devel-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="libnsl" version="2.34" release="70.r98.hce2">
          <filename>libnsl-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="nscd" version="2.34" release="70.r98.hce2">
          <filename>nscd-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="nss_modules" version="2.34" release="70.r98.hce2">
          <filename>nss_modules-2.34-70.r98.hce2.aarch64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc" version="2.34" release="70.r98.hce2">
          <filename>glibc-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-all-langpacks" version="2.34" release="70.r98.hce2">
          <filename>glibc-all-langpacks-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-common" version="2.34" release="70.r98.hce2">
          <filename>glibc-common-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-compat-2.17" version="2.34" release="70.r98.hce2">
          <filename>glibc-compat-2.17-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-devel" version="2.34" release="70.r98.hce2">
          <filename>glibc-devel-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-locale-archive" version="2.34" release="70.r98.hce2">
          <filename>glibc-locale-archive-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-locale-source" version="2.34" release="70.r98.hce2">
          <filename>glibc-locale-source-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="glibc-nss-devel" version="2.34" release="70.r98.hce2">
          <filename>glibc-nss-devel-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="libnsl" version="2.34" release="70.r98.hce2">
          <filename>libnsl-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="nscd" version="2.34" release="70.r98.hce2">
          <filename>nscd-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="nss_modules" version="2.34" release="70.r98.hce2">
          <filename>nss_modules-2.34-70.r98.hce2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
