Updated python3 packages fix security vulnerability

bpo-42278: Replaced usage of tempfile.mktemp with TemporaryDirectory to avoid a potential race condition. bpo-44394: Update the vendored copy of libexpat to 2.4.1 from 2.2.8 to get the fix for the CVE-2013-0340 “Billion Laughs” vulnerability. This copy is most used on Windows and macOS. bpo-43124...

Security Bulletin: Multiple vulnerabilities in glibc affect Power Hardware Management Console

Summary glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2015-8778 DESCRIPTION: GNU C Library glibc could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in hcreate and...

Security Bulletin: Vulnerabilities in glibc affect Power Hardware Management Console (CVE-2014-8121)

Summary glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2014-8121 DESCRIPTION: GNU C Library glibc is vulnerable to a denial of service, caused by the failure to properly check if a file is open by DBLOOKUP in...

Security Bulletin: Vulnerabilities in glibc affect Power Hardware Management Console (CVE-2015-7547, CVE-2014-9761, CVE-2015-8776, CVE-2015-8777, CVE-2015-8778, CVE-2015-8779)

Summary glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nssdns backend for the...

Security Bulletin: Vulnerabilities in glibc affect Power Hardware Management Console (CVE-2013-7424)

Summary glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2013-7424 DESCRIPTION: The GNU C Library glibc could allow a remote attacker to execute arbitrary code on the system, caused by an invalid free error in the...

Security Bulletin: Vulnerabilities in glibc affect Power Hardware Management Console ( CVE-2015-1781)

Summary glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1781 DESCRIPTION: GNU C Library glibc is vulnerable to a buffer overflow, caused by improper bounds checking by the gethostbynamer and other related...

Security Bulletin: Vulnerability in glibc affects Power Hardware Management Console (CVE-2016-3075)

Summary glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-3075 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nssdns implementation of the...

Security Bulletin: GNU C Library (glibc) Vulnerability Affects Power Hardware Management Console (CVE-2015-0235, CVE-2014-6040, CVE-2014-7817)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects Power Hardware Management Console. Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION:The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a specially crafted...

Security fix for the ALT Linux 9 package glibc version 6:2.27-alt14

6:2.27-alt14 built Sept. 23, 2021 Dmitry V. Levin in task 285569 July 9, 2021 Dmitry V. Levin - Updated to glibc-2.27-174-g73886db621 from 2.27 branch fixes: CVE-2016-10228, CVE-2020-1751, CVE-2020-10029, CVE-2020-27618, CVE-2020-29562, CVE-2021-27645, CVE-2021-35942...

Security Bulletin: Vulnerabilities in Glibc affect Power Hardware Management Console ( CVE-2017-15670, CVE-2017-12132, CVE-2015-5180, CVE-2014-9402)

Summary Glibc is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-15670 DESCRIPTION: GNU C Library is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the glob...

Update of nscd, glibc-headers, glibc, glibc-utils, glibc-static, glibc-static, glibc-devel, glibc-devel, glibc, glibc-common

More precise DNS name checks accepting dash-.example.com, among other things...

Amazon Linux 2 : glibc (ALAS-2021-1703)

The version of glibc installed on the remote host is prior to 2.26-53. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1703 advisory. An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially...

Medium: glibc

Issue Overview: An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially crafted untrusted regular expression input. CVE-2021-35942 Affected Packages: glibc Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2374)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : glibc (EulerOS-SA-2021-2374)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encodin...

ROS-2-796

2.796 Vulnerability in GNU C Library glibc 2.32 CVE-2016-10228,CVE-2020-10029. 1. Vulnerability Description: CVE-2016-10228 Looping in iconv utility, manifested when run with "-c" option, in case of incorrect multibyte data processing. CVE-2020-10029 Stack corruption when trigonometric functions...

ROS-2-1166

2.1166 Vulnerability in GNU C Library glibc 2.32 CVE-2016-10228,CVE-2020-10029. 1. Vulnerability Description: CVE-2016-10228 Looping in iconv utility, manifested when run with "-c" option, in case of incorrect multibyte data processing. CVE-2020-10029 Stack corruption when trigonometric functions...

ROS-2-439

2.439 Vulnerability in GNU C Library glibc 2.32 CVE-2016-10228,CVE-2020-10029. 1. Vulnerability Description: CVE-2016-10228 Looping in iconv utility, manifested when run with "-c" option, in case of incorrect multibyte data processing. CVE-2020-10029 Stack corruption when trigonometric functions...

EulerOS 2.0 SP5 : glibc (EulerOS-SA-2021-2330)

According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes obje...

Photon OS 4.0: Glibc PHSA-2021-4.0-0095

An update of the glibc package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0095. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...