Lucene search

K
oraclelinuxOracleLinuxELSA-2017-0680
HistoryMar 27, 2017 - 12:00 a.m.

glibc security and bug fix update

2017-03-2700:00:00
linux.oracle.com
119

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

88.9%

[2.12-1.209.0.1]

  • Update newmode size to fix a possible corruption
    [2.12-1.209]
  • Fix AF_INET6 getaddrinfo with nscd (#1416496)
    [2.12-1.208]
  • Update tests for struct sockaddr_storage changes (#1338673)
    [2.12-1.207]
  • Use FL_CLOEXEC in internal calls to fopen (#1012343).
    [2.12-1.206]
  • Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function
    (#1358015).
    [2.12-1.205]
  • Make padding in struct sockaddr_storage explicit (#1338673)
    [2.12-1.204]
  • Fix detection of Intel FMA hardware (#1384281).
    [2.12-1.203]
  • Add support for el_GR@euro, ur_IN, and wal_ET locales (#1101858).
    [2.12-1.202]
  • Change malloc/tst-malloc-thread-exit.c to use fewer threads and
    avoid timeout (#1318380).
    [2.12-1.201]
  • df can fail on some systems (#1307029).
    [2.12-1.200]
  • Log uname, cpuinfo, meminfo during build (#1307029).
    [2.12-1.199]
  • Draw graphs for heap and stack only if MAXSIZE_HEAP and MAXSIZE_STACK
    are non-zero (#1331304).
    [2.12-1.198]
  • Avoid unneeded calls to __check_pf in getadddrinfo (#1270950)
    [2.12-1.197]
  • Fix CVE-2015-8778 glibc: Integer overflow in hcreate and hcreate_r
    (#1358013).
    [2.12-1.196]
  • Fix CVE-2015-8776 glibc: Segmentation fault caused by passing
    out-of-range data to strftime() (#1358011).
    [2.12-1.195]
  • tzdata-update: Ignore umask setting (#1373646)
    [2.12-1.194]
  • CVE-2014-9761: Fix unbounded stack allocation in nan* (#1358014)
    [2.12-1.193]
  • Avoid using uninitialized data in getaddrinfo (#1223095)

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

88.9%