Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1805-1

Опубликовано: 28 мая 2024
Источник: suse-cvrf

Описание

Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues:

  • CVE-2024-2961: Fixed that the iconv() function in the GNU C Library may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set (bsc#1223019).

Список пакетов

SUSE Linux Enterprise Live Patching 15 SP4
glibc-livepatches-0.1-150400.3.3.1
SUSE Linux Enterprise Live Patching 15 SP5
glibc-livepatches-0.1-150400.3.3.1

Ссылки

Описание

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP4:glibc-livepatches-0.1-150400.3.3.1
SUSE Linux Enterprise Live Patching 15 SP5:glibc-livepatches-0.1-150400.3.3.1
Ссылки