Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0075-1

Опубликовано: 12 янв. 2018
Источник: suse-cvrf

Описание

Security update for glibc

This update for glibc fixes the following issues:

  • A privilege escalation bug in the realpath() function has been fixed. [CVE-2018-1000001, bsc#1074293]

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
glibc-2.11.3-17.110.3.1
glibc-devel-2.11.3-17.110.3.1
glibc-html-2.11.3-17.110.3.1
glibc-i18ndata-2.11.3-17.110.3.1
glibc-info-2.11.3-17.110.3.1
glibc-locale-2.11.3-17.110.3.1
glibc-profile-2.11.3-17.110.3.1
nscd-2.11.3-17.110.3.1
SUSE Linux Enterprise Server 11 SP3-LTSS
glibc-2.11.3-17.110.3.1
glibc-32bit-2.11.3-17.110.3.1
glibc-devel-2.11.3-17.110.3.1
glibc-devel-32bit-2.11.3-17.110.3.1
glibc-html-2.11.3-17.110.3.1
glibc-i18ndata-2.11.3-17.110.3.1
glibc-info-2.11.3-17.110.3.1
glibc-locale-2.11.3-17.110.3.1
glibc-locale-32bit-2.11.3-17.110.3.1
glibc-profile-2.11.3-17.110.3.1
glibc-profile-32bit-2.11.3-17.110.3.1
nscd-2.11.3-17.110.3.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
glibc-2.11.3-17.110.3.1
glibc-32bit-2.11.3-17.110.3.1
glibc-devel-2.11.3-17.110.3.1
glibc-devel-32bit-2.11.3-17.110.3.1
glibc-html-2.11.3-17.110.3.1
glibc-i18ndata-2.11.3-17.110.3.1
glibc-info-2.11.3-17.110.3.1
glibc-locale-2.11.3-17.110.3.1
glibc-locale-32bit-2.11.3-17.110.3.1
glibc-profile-2.11.3-17.110.3.1
glibc-profile-32bit-2.11.3-17.110.3.1
nscd-2.11.3-17.110.3.1
SUSE Linux Enterprise Server 11 SP4
glibc-2.11.3-17.110.3.1
glibc-32bit-2.11.3-17.110.3.1
glibc-devel-2.11.3-17.110.3.1
glibc-devel-32bit-2.11.3-17.110.3.1
glibc-html-2.11.3-17.110.3.1
glibc-i18ndata-2.11.3-17.110.3.1
glibc-info-2.11.3-17.110.3.1
glibc-locale-2.11.3-17.110.3.1
glibc-locale-32bit-2.11.3-17.110.3.1
glibc-locale-x86-2.11.3-17.110.3.1
glibc-profile-2.11.3-17.110.3.1
glibc-profile-32bit-2.11.3-17.110.3.1
glibc-profile-x86-2.11.3-17.110.3.1
glibc-x86-2.11.3-17.110.3.1
nscd-2.11.3-17.110.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
glibc-2.11.3-17.110.3.1
glibc-32bit-2.11.3-17.110.3.1
glibc-devel-2.11.3-17.110.3.1
glibc-devel-32bit-2.11.3-17.110.3.1
glibc-html-2.11.3-17.110.3.1
glibc-i18ndata-2.11.3-17.110.3.1
glibc-info-2.11.3-17.110.3.1
glibc-locale-2.11.3-17.110.3.1
glibc-locale-32bit-2.11.3-17.110.3.1
glibc-locale-x86-2.11.3-17.110.3.1
glibc-profile-2.11.3-17.110.3.1
glibc-profile-32bit-2.11.3-17.110.3.1
glibc-profile-x86-2.11.3-17.110.3.1
glibc-x86-2.11.3-17.110.3.1
nscd-2.11.3-17.110.3.1
SUSE Linux Enterprise Software Development Kit 11 SP4
glibc-html-2.11.3-17.110.3.1
glibc-info-2.11.3-17.110.3.1

Ссылки

Описание

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.3.1
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.3.1
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.3.1
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.3.1
Ссылки