Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2302-1

Опубликовано: 10 авг. 2018
Источник: suse-cvrf

Описание

Security update for glibc

This update for glibc fixes the following issues:

Security issue fixed:

  • CVE-2018-11236: Fix 32bit arch integer overflow in stdlib/canonicalize.c when processing very long pathname arguments (bsc#1094161).

Bug fixes:

  • bsc#1086690: Fix crash in resolver on memory allocation failure.
  • bsc#1077763: Fix allocation in in6ailist_add.
  • bsc#1079625: Fix allocation in nss_compat for large number of memberships to a group.

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
glibc-2.11.3-17.110.14.1
glibc-devel-2.11.3-17.110.14.1
glibc-html-2.11.3-17.110.14.1
glibc-i18ndata-2.11.3-17.110.14.1
glibc-info-2.11.3-17.110.14.1
glibc-locale-2.11.3-17.110.14.1
glibc-profile-2.11.3-17.110.14.1
nscd-2.11.3-17.110.14.1
SUSE Linux Enterprise Server 11 SP3-LTSS
glibc-2.11.3-17.110.14.1
glibc-32bit-2.11.3-17.110.14.1
glibc-devel-2.11.3-17.110.14.1
glibc-devel-32bit-2.11.3-17.110.14.1
glibc-html-2.11.3-17.110.14.1
glibc-i18ndata-2.11.3-17.110.14.1
glibc-info-2.11.3-17.110.14.1
glibc-locale-2.11.3-17.110.14.1
glibc-locale-32bit-2.11.3-17.110.14.1
glibc-profile-2.11.3-17.110.14.1
glibc-profile-32bit-2.11.3-17.110.14.1
nscd-2.11.3-17.110.14.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
glibc-2.11.3-17.110.14.1
glibc-32bit-2.11.3-17.110.14.1
glibc-devel-2.11.3-17.110.14.1
glibc-devel-32bit-2.11.3-17.110.14.1
glibc-html-2.11.3-17.110.14.1
glibc-i18ndata-2.11.3-17.110.14.1
glibc-info-2.11.3-17.110.14.1
glibc-locale-2.11.3-17.110.14.1
glibc-locale-32bit-2.11.3-17.110.14.1
glibc-profile-2.11.3-17.110.14.1
glibc-profile-32bit-2.11.3-17.110.14.1
nscd-2.11.3-17.110.14.1
SUSE Linux Enterprise Server 11 SP4
glibc-2.11.3-17.110.14.1
glibc-32bit-2.11.3-17.110.14.1
glibc-devel-2.11.3-17.110.14.1
glibc-devel-32bit-2.11.3-17.110.14.1
glibc-html-2.11.3-17.110.14.1
glibc-i18ndata-2.11.3-17.110.14.1
glibc-info-2.11.3-17.110.14.1
glibc-locale-2.11.3-17.110.14.1
glibc-locale-32bit-2.11.3-17.110.14.1
glibc-locale-x86-2.11.3-17.110.14.1
glibc-profile-2.11.3-17.110.14.1
glibc-profile-32bit-2.11.3-17.110.14.1
glibc-profile-x86-2.11.3-17.110.14.1
glibc-x86-2.11.3-17.110.14.1
nscd-2.11.3-17.110.14.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
glibc-2.11.3-17.110.14.1
glibc-32bit-2.11.3-17.110.14.1
glibc-devel-2.11.3-17.110.14.1
glibc-devel-32bit-2.11.3-17.110.14.1
glibc-html-2.11.3-17.110.14.1
glibc-i18ndata-2.11.3-17.110.14.1
glibc-info-2.11.3-17.110.14.1
glibc-locale-2.11.3-17.110.14.1
glibc-locale-32bit-2.11.3-17.110.14.1
glibc-locale-x86-2.11.3-17.110.14.1
glibc-profile-2.11.3-17.110.14.1
glibc-profile-32bit-2.11.3-17.110.14.1
glibc-profile-x86-2.11.3-17.110.14.1
glibc-x86-2.11.3-17.110.14.1
nscd-2.11.3-17.110.14.1
SUSE Linux Enterprise Software Development Kit 11 SP4
glibc-html-2.11.3-17.110.14.1
glibc-info-2.11.3-17.110.14.1

Ссылки

Описание

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.14.1
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.14.1
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.14.1
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.14.1
Ссылки