Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:0015-1

Опубликовано: 03 янв. 2023
Источник: suse-cvrf

Описание

Security update for glibc

This update for glibc fixes the following issues:

  • CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings (bsc#1122729)

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
glibc-2.22-133.1
glibc-32bit-2.22-133.1
glibc-devel-2.22-133.1
glibc-devel-32bit-2.22-133.1
glibc-html-2.22-133.1
glibc-i18ndata-2.22-133.1
glibc-info-2.22-133.1
glibc-locale-2.22-133.1
glibc-locale-32bit-2.22-133.1
glibc-profile-2.22-133.1
glibc-profile-32bit-2.22-133.1
nscd-2.22-133.1
SUSE Linux Enterprise Server 12 SP3-BCL
glibc-2.22-133.1
glibc-32bit-2.22-133.1
glibc-devel-2.22-133.1
glibc-devel-32bit-2.22-133.1
glibc-html-2.22-133.1
glibc-i18ndata-2.22-133.1
glibc-info-2.22-133.1
glibc-locale-2.22-133.1
glibc-locale-32bit-2.22-133.1
glibc-profile-2.22-133.1
glibc-profile-32bit-2.22-133.1
nscd-2.22-133.1

Ссылки

Описание

In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:glibc-2.22-133.1
SUSE Linux Enterprise Server 12 SP2-BCL:glibc-32bit-2.22-133.1
SUSE Linux Enterprise Server 12 SP2-BCL:glibc-devel-2.22-133.1
SUSE Linux Enterprise Server 12 SP2-BCL:glibc-devel-32bit-2.22-133.1
Ссылки