Lucene search

K
oraclelinuxOracleELSA-2014-1391
HistoryOct 15, 2014 - 12:00 a.m.

glibc security, bug fix, and enhancement update

2014-10-1500:00:00
Oracle
linux.oracle.com
22

0.032 Low

EPSS

Percentile

90.1%

[2.12-1.149]

  • Remove gconv transliteration loadable modules support (CVE-2014-5119,
    • _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,

[2.12-1.148]

  • Switch gettimeofday from INTUSE to libc_hidden_proto (#1099025).

[2.12-1.147]

  • Fix stack overflow due to large AF_INET6 requests (CVE-2013-4458, #1111460).
  • Fix buffer overflow in readdir_r (CVE-2013-4237, #1111460).

[2.12-1.146]

  • Fix memory order when reading libgcc handle (#905941).
  • Fix format specifier in malloc_info output (#1027261).
  • Fix nscd lookup for innetgr when netgroup has wildcards (#1054846).

[2.12-1.145]

  • Add mmap usage to malloc_info output (#1027261).

[2.12-1.144]

  • Use NSS_STATUS_TRYAGAIN to indicate insufficient buffer (#1087833).

[2.12-1.143]

  • [ppc] Add VDSO IFUNC for gettimeofday (#1028285).
  • [ppc] Fix ftime gettimeofday internal call returning bogus data (#1099025).

[2.12-1.142]

  • Also relocate in dependency order when doing symbol dependency testing
    (#1019916).

[2.12-1.141]

  • Fix infinite loop in nscd when netgroup is empty (#1085273).
  • Provide correct buffer length to netgroup queries in nscd (#1074342).
  • Return NULL for wildcard values in getnetgrent from nscd (#1085289).
  • Avoid overlapping addresses to stpcpy calls in nscd (#1082379).
  • Initialize all of datahead structure in nscd (#1074353).

[2.12-1.140]

  • Return EAI_AGAIN for AF_UNSPEC when herrno is TRY_AGAIN (#1044628).

[2.12-1.139]

  • Do not fail if one of the two responses to AF_UNSPEC fails (#845218).

[2.12-1.138]

  • nscd: Make SELinux checks dynamic (#1025933).

[2.12-1.137]

  • Fix race in free() of fastbin chunk (#1027101).

[2.12-1.136]

  • Fix copy relocations handling of unique objects (#1032628).

[2.12-1.135]

  • Fix encoding name for IDN in getaddrinfo (#981942).

[2.12-1.134]

  • Fix return code from getent netgroup when the netgroup is not found (#1039988).
  • Fix handling of static TLS in dlopen’ed objects (#995972).

[2.12-1.133]

  • Don’t use alloca in addgetnetgrentX (#1043557).
  • Adjust pointers to triplets in netgroup query data (#1043557).