patch-CVE-2024-2961.md

Show Active Modules

iconv -l | grep -E 'CN-?EXT'

Find Config Path:

Older Systems:

find / -name gconv-modules

Newer systems:

find / -name gconv-modules-extra.conf

Edit Config:

Older Systems:

sudo nano /usr/lib/x86_64-linux-gnu/gconv/gconv-modules

Newer systems:

sudo nano /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf

PageDown 50x, Comment out offending modules:

#alias         ISO2022CNEXT//          ISO-2022-CN-EXT//
#module        ISO-2022-CN-EXT//       INTERNAL                ISO-2022-CN-EXT 1
#module        INTERNAL                ISO-2022-CN-EXT//       ISO-2022-CN-EXT 1

ReGenerate Config

sudo iconvconfig

Sources

• https://rockylinux.org/news/glibc-vulnerability-april-2024/
• https://dev.to/garrettmills/mitigating-the-iconv-vulnerability-for-php-cve-2024-2961-44ha

Wait so you managed to fix this?

@arianDGI You can mitigate by either disabling the offending modules, OR upgrade the packages to install a newer patched version.