SUSE-SU-2021:3290-1

Опубликовано: 06 окт. 2021

Источник: suse-cvrf

Описание

Security update for glibc

This update for glibc fixes the following issues:

CVE-2021-33574: Fixed a use-after-free possibility in mq_notify() (bsc#1186489)

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest

glibc-2.22-114.15.1

Container suse/sles12sp4:latest

glibc-2.22-114.15.1

Container suse/sles12sp5:latest

glibc-2.22-114.15.1

Image SLES12-SP4-Azure-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-EC2-HVM-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-GCE-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-Azure

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-Azure-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-EC2-HVM

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-EC2-HVM-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-GCE

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP4-SAP-GCE-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-Basic-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-HPC-BYOS

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-HPC-On-Demand

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-SAP-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-SAP-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-Azure-Standard-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-EC2-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-EC2-ECS-On-Demand

glibc-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-EC2-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-EC2-SAP-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-EC2-SAP-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-GCE-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-GCE-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-GCE-SAP-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-GCE-SAP-On-Demand

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-OCI-BYOS-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

glibc-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-locale-2.22-114.15.1

nscd-2.22-114.15.1

SUSE Linux Enterprise Server 12 SP4-LTSS

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-devel-32bit-2.22-114.15.1

glibc-html-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-info-2.22-114.15.1

glibc-locale-2.22-114.15.1

glibc-locale-32bit-2.22-114.15.1

glibc-profile-2.22-114.15.1

glibc-profile-32bit-2.22-114.15.1

nscd-2.22-114.15.1

SUSE Linux Enterprise Server 12 SP5

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-devel-32bit-2.22-114.15.1

glibc-html-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-info-2.22-114.15.1

glibc-locale-2.22-114.15.1

glibc-locale-32bit-2.22-114.15.1

glibc-profile-2.22-114.15.1

glibc-profile-32bit-2.22-114.15.1

nscd-2.22-114.15.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-devel-32bit-2.22-114.15.1

glibc-html-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-info-2.22-114.15.1

glibc-locale-2.22-114.15.1

glibc-locale-32bit-2.22-114.15.1

glibc-profile-2.22-114.15.1

glibc-profile-32bit-2.22-114.15.1

nscd-2.22-114.15.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-devel-32bit-2.22-114.15.1

glibc-html-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-info-2.22-114.15.1

glibc-locale-2.22-114.15.1

glibc-locale-32bit-2.22-114.15.1

glibc-profile-2.22-114.15.1

glibc-profile-32bit-2.22-114.15.1

nscd-2.22-114.15.1

SUSE Linux Enterprise Software Development Kit 12 SP5

glibc-devel-static-2.22-114.15.1

glibc-info-2.22-114.15.1

SUSE OpenStack Cloud 9

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-devel-32bit-2.22-114.15.1

glibc-html-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-info-2.22-114.15.1

glibc-locale-2.22-114.15.1

glibc-locale-32bit-2.22-114.15.1

glibc-profile-2.22-114.15.1

glibc-profile-32bit-2.22-114.15.1

nscd-2.22-114.15.1

SUSE OpenStack Cloud Crowbar 9

glibc-2.22-114.15.1

glibc-32bit-2.22-114.15.1

glibc-devel-2.22-114.15.1

glibc-devel-32bit-2.22-114.15.1

glibc-html-2.22-114.15.1

glibc-i18ndata-2.22-114.15.1

glibc-info-2.22-114.15.1

glibc-locale-2.22-114.15.1

glibc-locale-32bit-2.22-114.15.1

glibc-profile-2.22-114.15.1

glibc-profile-32bit-2.22-114.15.1

nscd-2.22-114.15.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20213290-1/
Link for SUSE-SU-2021:3290-1
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009543.html
E-Mail link for SUSE-SU-2021:3290-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1186489
SUSE Bug 1186489
https://www.suse.com/security/cve/CVE-2021-33574/
SUSE CVE CVE-2021-33574 page

Описание

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Затронутые продукты

Container suse/ltss/sle12.5/sles12sp5:latest:glibc-2.22-114.15.1

Container suse/sles12sp4:latest:glibc-2.22-114.15.1

Container suse/sles12sp5:latest:glibc-2.22-114.15.1

Image SLES12-SP4-Azure-BYOS:glibc-2.22-114.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-33574.html
CVE-2021-33574
https://bugzilla.suse.com/1186489
SUSE Bug 1186489
https://bugzilla.suse.com/1189426
SUSE Bug 1189426
https://bugzilla.suse.com/1192788
SUSE Bug 1192788
https://bugzilla.suse.com/1196766
SUSE Bug 1196766

SUSE-SU-2021:3290-1

Описание

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest

Container suse/sles12sp4:latest

Container suse/sles12sp5:latest

Image SLES12-SP4-Azure-BYOS

Image SLES12-SP4-EC2-HVM-BYOS

Image SLES12-SP4-GCE-BYOS

Image SLES12-SP4-SAP-Azure

Image SLES12-SP4-SAP-Azure-BYOS

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP4-SAP-EC2-HVM

Image SLES12-SP4-SAP-EC2-HVM-BYOS

Image SLES12-SP4-SAP-GCE

Image SLES12-SP4-SAP-GCE-BYOS

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2021-33574

Описание

Затронутые продукты

Ссылки