Lucene search

K
oraclelinuxOracleLinuxELSA-2019-3513
HistoryNov 21, 2019 - 12:00 a.m.

glibc security, bug fix, and enhancement update

2019-11-2100:00:00
linux.oracle.com
40

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

[2.28-72.0.1]

  • add Ampere emag to tunable cpu list (Patrick McGehearty)
  • add optimized memset for emag
  • add an ASIMD variant of strlen for falkor
  • Orabug: 2700101.
  • Modify glibc-ora28849085.patch so it works with RHCK kernels.
  • Orabug: 28849085.
  • Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  • Both should test
  • if (stream->_flags & _IO_USER_LOCK) == 0)
  • _IO_lock_lock (*stream->_lock);
    
  • OraBug: 28481550.
    [2.28-72]
  • Skip wide buffer handling for legacy stdio handles (#1722215)
    [2.28-71]
  • Remove copy_file_range emulation (#1724975)
    [2.28-70]
  • Avoid nscd assertion failure during persistent db check (#1727152)
    [2.28-69]
  • Fix invalid free under valgrind with libdl (#1717438)
    [2.28-68]
  • Account for size of locale-archive in rpm package (#1725131)
    [2.28-67]
  • Reject IP addresses with trailing characters in getaddrinfo (#1727241)
    [2.28-66]
  • Avoid header conflict between
    and
    (#1699194)
    [2.28-65]
  • glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  • Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.
    [2.28-64]
  • Avoid ABI exposure of the NSS service_user type (#1710894)
    [2.28-63]
  • Enable full ICMP errors for UDP DNS sockets. (#1670043)
    [2.28-62]
  • Convert post-install binary to rpm lua scriptlet (#1639346)
    [2.28-61]
  • Fix crash during wide stream buffer flush (#1710478)
    [2.28-60]
  • Add PF_XDP, AF_XDP and SOL_XDP from Linux 4.18 (#1706777)
    [2.28-59]
  • Add .gdb_index to debug information (#1612448)
  • Wed May 22 2019 DJ Delorie
  • iconv, localedef: avoid floating point rounding differences (#1691528)
    [2.28-57]
  • locale: Add LOCPATH diagnostics to the locale program (#1701605)
    [2.28-56]
  • Fix hang in pldd. (#1702539)
    [2.28-55]
  • s390x string function improvements (#1659438)
    [2.28-54]
  • Fix test suite failures due to race conditions in posix/tst-spawn
    spawned processes. (#1659512)
    [2.28-53]
  • Add missing CFI data to _mpn* functions on ppc64le (#1658901)
    [2.28-52]
  • intl: Do not return NULL on asprintf failure in gettext (#1663035)
    [2.28-51]
  • Increase BIND_NOW coverage (#1639343)
    [2.28-50]
  • Fix pthread_rwlock_trywrlock and pthread_rwlock_tryrdlock stalls (#1659293)
    [2.28-49]
  • malloc: Improve bad chunk detection (#1651283)
    [2.28-48]
  • Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)
    [2.28-47]
  • powerpc: Only enable HTM if kernel supports PPC_FEATURE2_HTM_NOSC (#1651742)
    [2.28-46]
  • Only build libm with -fno-math-errno (#1664408)
    [2.28-45]
  • ja_JP: Add new Japanese Era name (#1577438)
    [2.28-44]
  • math: Add XFAILs for some IBM 128-bit long double fma tests (#1623537)
    [2.28-43]
  • malloc: realloc ncopies integer overflow (#1662843)

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P