Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:4067-1

Опубликовано: 10 дек. 2018
Источник: suse-cvrf

Описание

Recommended update for glibc

This update for glibc fixes the following issues:

Security issue fixed:

  • CVE-2017-15671: Fixed memory leak in glob with GLOB_TILDE (bsc#1064569, BZ #22325).

Non-security issue fixed:

  • Avoid access beyond memory bounds in pthread_attr_getaffinity_np (bsc#1110170, BZ #15618).
  • Remove improper assert in dlclose (bsc#1110174, BZ #11941).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
glibc-2.11.3-17.110.24.2
glibc-devel-2.11.3-17.110.24.2
glibc-html-2.11.3-17.110.24.2
glibc-i18ndata-2.11.3-17.110.24.2
glibc-info-2.11.3-17.110.24.2
glibc-locale-2.11.3-17.110.24.2
glibc-profile-2.11.3-17.110.24.2
nscd-2.11.3-17.110.24.2
SUSE Linux Enterprise Server 11 SP3-LTSS
glibc-2.11.3-17.110.24.2
glibc-32bit-2.11.3-17.110.24.2
glibc-devel-2.11.3-17.110.24.2
glibc-devel-32bit-2.11.3-17.110.24.2
glibc-html-2.11.3-17.110.24.2
glibc-i18ndata-2.11.3-17.110.24.2
glibc-info-2.11.3-17.110.24.2
glibc-locale-2.11.3-17.110.24.2
glibc-locale-32bit-2.11.3-17.110.24.2
glibc-profile-2.11.3-17.110.24.2
glibc-profile-32bit-2.11.3-17.110.24.2
nscd-2.11.3-17.110.24.2
SUSE Linux Enterprise Server 11 SP3-TERADATA
glibc-2.11.3-17.110.24.2
glibc-32bit-2.11.3-17.110.24.2
glibc-devel-2.11.3-17.110.24.2
glibc-devel-32bit-2.11.3-17.110.24.2
glibc-html-2.11.3-17.110.24.2
glibc-i18ndata-2.11.3-17.110.24.2
glibc-info-2.11.3-17.110.24.2
glibc-locale-2.11.3-17.110.24.2
glibc-locale-32bit-2.11.3-17.110.24.2
glibc-profile-2.11.3-17.110.24.2
glibc-profile-32bit-2.11.3-17.110.24.2
nscd-2.11.3-17.110.24.2
SUSE Linux Enterprise Server 11 SP4
glibc-2.11.3-17.110.24.2
glibc-32bit-2.11.3-17.110.24.2
glibc-devel-2.11.3-17.110.24.2
glibc-devel-32bit-2.11.3-17.110.24.2
glibc-html-2.11.3-17.110.24.2
glibc-i18ndata-2.11.3-17.110.24.2
glibc-info-2.11.3-17.110.24.2
glibc-locale-2.11.3-17.110.24.2
glibc-locale-32bit-2.11.3-17.110.24.2
glibc-locale-x86-2.11.3-17.110.24.2
glibc-profile-2.11.3-17.110.24.2
glibc-profile-32bit-2.11.3-17.110.24.2
glibc-profile-x86-2.11.3-17.110.24.2
glibc-x86-2.11.3-17.110.24.2
nscd-2.11.3-17.110.24.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4
glibc-2.11.3-17.110.24.2
glibc-32bit-2.11.3-17.110.24.2
glibc-devel-2.11.3-17.110.24.2
glibc-devel-32bit-2.11.3-17.110.24.2
glibc-html-2.11.3-17.110.24.2
glibc-i18ndata-2.11.3-17.110.24.2
glibc-info-2.11.3-17.110.24.2
glibc-locale-2.11.3-17.110.24.2
glibc-locale-32bit-2.11.3-17.110.24.2
glibc-locale-x86-2.11.3-17.110.24.2
glibc-profile-2.11.3-17.110.24.2
glibc-profile-32bit-2.11.3-17.110.24.2
glibc-profile-x86-2.11.3-17.110.24.2
glibc-x86-2.11.3-17.110.24.2
nscd-2.11.3-17.110.24.2
SUSE Linux Enterprise Software Development Kit 11 SP4
glibc-html-2.11.3-17.110.24.2
glibc-info-2.11.3-17.110.24.2

Ссылки

Описание

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.24.2
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.24.2
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.24.2
SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.24.2
Ссылки
Уязвимость SUSE-SU-2018:4067-1