GNU C库（glibc）作为绝大多数Linux应用程序的基础组件，其共享库加载机制中新发现的漏洞可能影响静态setuid二进制文件的安全性。该漏洞编号为CVE-2025-4802，源于静态setuid二进制文件通过dlopen()进行动态库调用时，错误处理了LD_LIBRARY_PATH环境变量。 漏洞技术原理 ...

Want a good tech job? Then you need to know Linux and open-source software. One of the best ways to learn is via a Linux Foundation course. Read now The first problem wasn't that bad. As Siddhesh ...

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen Best laptop cooling pads Best flip ...

由于 Y2038 问题， Linux Kernel 早在几年前就已经切换到 64 位 time_t，而且发行版 Alpine 3.13 时也跳到了 64 位 time_t。不过近日，Alpine 安全团队主管 Ariadne Conill 发文表示 GNU libc 2.34 在支持 64 位 time_t 上存在缺陷，可能在过渡过程中产生障碍。 Alpine 安全团队主管 Ariadne ...

Unprivileged attackers can get root access on multiple major Linux distributions in default configurations by exploiting a newly disclosed local privilege escalation (LPE) vulnerability in the GNU C ...

A critical vulnerability in glibc, the GNU C library, affects all Linux machines and many web frameworks, opening the door to remote code execution. Glibc, the GNU C library at the core of last year’s ...

A critical remote code execution vulnerability in the GNU C library glibc affects all Linux systems going back to 2000. A critical vulnerability has been found in glibc, the GNU C library, that ...

Security researchers appear somewhat divided over the extent of the danger posed by a major bug in a shared library used in thousands of Linux-based applications and systems worldwide. Researchers at ...

吴章金：如何创建一个*可执行*的共享库 吴章金: 深度剖析 Linux共享库的“位置无关”实现原理 吴章金：通过操作 Section 为 ...

微软近日为 Visual StudioCode推出了1.86版本更新，将远程开发服务器工具链最低环境要求的glibc版本提升至2.28。此举导致大量使用Ubuntu 18.04 LTS等旧版本Linux发行版的用户无法进行远程开发。 根据相关信息，微软已经宣布为受影响的用户提供一年的额外支持，并决定 ...

Security teams from Google and Red Hat have warned of a serious vulnerability in the glibc library used by many GNU/Linux distributions, which can be used to attack servers through DNS resolution.