Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3942-1

Опубликовано: 10 нояб. 2022
Источник: suse-cvrf

Описание

Security update for glibc

This update for glibc fixes the following issues:

  • CVE-2015-8985: Fixed assertion failure in pop_fail_stack when executing a malformed regexp (bsc#1193625)

  • x86: fix stack alignment in pthread_cond_[timed]wait (bsc#1196852)

  • Recognize ppc64p7 arch to build for power7

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
glibc-2.22-114.22.1
Container suse/sles12sp4:latest
glibc-2.22-114.22.1
Container suse/sles12sp5:latest
glibc-2.22-114.22.1
Image SLES12-SP5-Azure-BYOS
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-Azure-Basic-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-Azure-HPC-BYOS
glibc-2.22-114.22.1
glibc-32bit-2.22-114.22.1
glibc-devel-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-Azure-HPC-On-Demand
glibc-2.22-114.22.1
glibc-32bit-2.22-114.22.1
glibc-devel-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-Azure-SAP-BYOS
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-Azure-SAP-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-Azure-Standard-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-EC2-BYOS
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-EC2-ECS-On-Demand
glibc-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-EC2-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-EC2-SAP-BYOS
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-EC2-SAP-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-GCE-BYOS
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-GCE-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-GCE-SAP-BYOS
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-GCE-SAP-On-Demand
glibc-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
glibc-2.22-114.22.1
glibc-32bit-2.22-114.22.1
glibc-devel-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
glibc-2.22-114.22.1
glibc-32bit-2.22-114.22.1
glibc-devel-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-locale-2.22-114.22.1
nscd-2.22-114.22.1
SUSE Linux Enterprise Server 12 SP5
glibc-2.22-114.22.1
glibc-32bit-2.22-114.22.1
glibc-devel-2.22-114.22.1
glibc-devel-32bit-2.22-114.22.1
glibc-html-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-info-2.22-114.22.1
glibc-locale-2.22-114.22.1
glibc-locale-32bit-2.22-114.22.1
glibc-profile-2.22-114.22.1
glibc-profile-32bit-2.22-114.22.1
nscd-2.22-114.22.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
glibc-2.22-114.22.1
glibc-32bit-2.22-114.22.1
glibc-devel-2.22-114.22.1
glibc-devel-32bit-2.22-114.22.1
glibc-html-2.22-114.22.1
glibc-i18ndata-2.22-114.22.1
glibc-info-2.22-114.22.1
glibc-locale-2.22-114.22.1
glibc-locale-32bit-2.22-114.22.1
glibc-profile-2.22-114.22.1
glibc-profile-32bit-2.22-114.22.1
nscd-2.22-114.22.1
SUSE Linux Enterprise Software Development Kit 12 SP5
glibc-devel-static-2.22-114.22.1
glibc-info-2.22-114.22.1

Ссылки

Описание

The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:glibc-2.22-114.22.1
Container suse/sles12sp4:latest:glibc-2.22-114.22.1
Container suse/sles12sp5:latest:glibc-2.22-114.22.1
Image SLES12-SP5-Azure-BYOS:glibc-2.22-114.22.1
Ссылки
Уязвимость SUSE-SU-2022:3942-1