Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
slackwareSlackware Linux ProjectSSA-2014-296-01
HistoryOct 24, 2014 - 5:36 a.m.

[slackware-security] glibc

2014-10-2405:36:04
Slackware Linux Project
www.slackware.com
22

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.046 Low

EPSS

Percentile

92.5%

JSON

New glibc packages are available for Slackware 14.1 and -current to fix
security issues.

Here are the details from the Slackware 14.1 ChangeLog:

patches/packages/glibc-2.17-i486-8_slack14.1.txz: Rebuilt.
This update fixes several security issues, and adds an extra security
hardening patch from Florian Weimer. Thanks to mancha for help with
tracking and backporting patches.
For more information, see:
https://vulners.com/cve/CVE-2012-4424
https://vulners.com/cve/CVE-2012-4412
https://vulners.com/cve/CVE-2013-4237
https://vulners.com/cve/CVE-2013-4788
https://vulners.com/cve/CVE-2013-4458
https://vulners.com/cve/CVE-2014-4043
https://vulners.com/cve/CVE-2014-0475
https://vulners.com/cve/CVE-2014-5119
https://vulners.com/cve/CVE-2014-6040
(* Security fix *)
patches/packages/glibc-i18n-2.17-i486-8_slack14.1.txz: Rebuilt.
patches/packages/glibc-profile-2.17-i486-8_slack14.1.txz: Rebuilt.
patches/packages/glibc-solibs-2.17-i486-8_slack14.1.txz: Rebuilt.
patches/packages/glibc-zoneinfo-2014i-noarch-1_slack14.1.txz: Upgraded.
Upgraded to tzcode2014i and tzdata2014i.

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/glibc-2.17-i486-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/glibc-i18n-2.17-i486-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/glibc-profile-2.17-i486-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/glibc-solibs-2.17-i486-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/glibc-zoneinfo-2014i-noarch-1_slack14.1.txz

Updated packages for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/glibc-2.17-x86_64-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/glibc-i18n-2.17-x86_64-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/glibc-profile-2.17-x86_64-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/glibc-solibs-2.17-x86_64-8_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/glibc-zoneinfo-2014i-noarch-1_slack14.1.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/glibc-solibs-2.20-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/glibc-zoneinfo-2014i-noarch-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-2.20-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-i18n-2.20-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/glibc-profile-2.20-i486-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/glibc-solibs-2.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/glibc-zoneinfo-2014i-noarch-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-2.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-i18n-2.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/glibc-profile-2.20-x86_64-1.txz

MD5 signatures:

Slackware 14.1 packages:
8995409d8ed617125649aaab14299f61 glibc-2.17-i486-8_slack14.1.txz
877bba4ad31eb68c7e7cce11f6aafd5b glibc-i18n-2.17-i486-8_slack14.1.txz
f89a9319a1798771b26488e99f0dd1af glibc-profile-2.17-i486-8_slack14.1.txz
d1756f2721cbb2955152c46ef5fab72e glibc-solibs-2.17-i486-8_slack14.1.txz
c7080f6d7f309ba2905dacfa555a8115 glibc-zoneinfo-2014i-noarch-1_slack14.1.txz

Slackware x86_64 14.1 packages:
32904ee5d2a3177d621c4c6f2aa6e67f glibc-2.17-x86_64-8_slack14.1.txz
1bb4ddd6d4043d632e78dbf3103f2f7c glibc-i18n-2.17-x86_64-8_slack14.1.txz
e6914d464f57ea493502eea4dd40044a glibc-profile-2.17-x86_64-8_slack14.1.txz
04562128e188daaad7fdab49756a22f2 glibc-solibs-2.17-x86_64-8_slack14.1.txz
c7080f6d7f309ba2905dacfa555a8115 glibc-zoneinfo-2014i-noarch-1_slack14.1.txz

Slackware -current packages:
f547fe51634c852ae17cb1f6c39203e1 a/glibc-solibs-2.20-i486-1.txz
c7080f6d7f309ba2905dacfa555a8115 a/glibc-zoneinfo-2014i-noarch-1.txz
f9923d8006a3c03520e93608114cb7de l/glibc-2.20-i486-1.txz
658301364b68e79d53acb607cd399504 l/glibc-i18n-2.20-i486-1.txz
d03947abf3d4be41f7bfb0a71bd29f35 l/glibc-profile-2.20-i486-1.txz

Slackware x86_64 -current packages:
a0f46b305c27dd0c80e65cc77254bdf2 a/glibc-solibs-2.20-x86_64-1.txz
c7080f6d7f309ba2905dacfa555a8115 a/glibc-zoneinfo-2014i-noarch-1.txz
d673acf56308355713ac67ae68e6bd2b l/glibc-2.20-x86_64-1.txz
410918dc8bf5b7a84d1bed5b6e125ee3 l/glibc-i18n-2.20-x86_64-1.txz
c023f4514cd0a672e4852986c74268e6 l/glibc-profile-2.20-x86_64-1.txz

Installation instructions:

Upgrade the packages as root:
> upgradepkg glibc-*.txz

OSVersionArchitecturePackageVersionFilename
Slackware14.1i486glibc< 2.17glibc-2.17-i486-8_slack14.1.txz
Slackware14.1i486glibc-i18n< 2.17glibc-i18n-2.17-i486-8_slack14.1.txz
Slackware14.1i486glibc-profile< 2.17glibc-profile-2.17-i486-8_slack14.1.txz
Slackware14.1i486glibc-solibs< 2.17glibc-solibs-2.17-i486-8_slack14.1.txz
Slackware14.1noarchglibc-zoneinfo< 2014iglibc-zoneinfo-2014i-noarch-1_slack14.1.txz
Slackware14.1x86_64glibc< 2.17glibc-2.17-x86_64-8_slack14.1.txz
Slackware14.1x86_64glibc-i18n< 2.17glibc-i18n-2.17-x86_64-8_slack14.1.txz
Slackware14.1x86_64glibc-profile< 2.17glibc-profile-2.17-x86_64-8_slack14.1.txz
Slackware14.1x86_64glibc-solibs< 2.17glibc-solibs-2.17-x86_64-8_slack14.1.txz
Slackware14.1noarchglibc-zoneinfo< 2014iglibc-zoneinfo-2014i-noarch-1_slack14.1.txz
Rows per page:
1-10 of 201

Related

nessus 46
openvas 52
altlinux 3
oraclelinux 5
fedora 6
securityvulns 6
suse 7
mageia 4
ubuntu 5
f5 6
osv 4
debian 4
redhat 3
centos 2
ibm 12
gentoo 1
ubuntucve 7
debiancve 7
cve 6
prion 6
zdt 2
amazon 1
exploitpack 1
seebug 1
cloudfoundry 1
veracode 1
nessus
nessus
Slackware 14.1 / current : glibc (SSA:2014-296-01)
2014-10-24 00:00:00
OracleVM 3.3 : glibc (OVMSA-2014-0033)
2014-11-26 00:00:00
SUSE SLES11 Security Update : glibc (SUSE-SU-2014:1122-1)
2015-05-20 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2014-296-01)
2022-04-21 00:00:00
Oracle: Security Advisory (ELSA-2014-1391)
2015-10-06 00:00:00
SUSE: Security Advisory for glibc (SUSE-SU-2014:1122-1)
2015-10-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3
2015-12-23 00:00:00
oraclelinux
oraclelinux
glibc security, bug fix, and enhancement update
2014-10-15 00:00:00
glibc security update
2014-08-29 00:00:00
glibc security and bug fix update
2015-03-09 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: glibc-2.17-21.fc19
2014-10-19 13:24:18
[SECURITY] Fedora 19 Update: glibc-2.17-18.fc19
2013-09-28 00:07:09
[SECURITY] Fedora 19 Update: glibc-2.17-14.fc19
2013-08-27 23:29:45
securityvulns
securityvulns
glibc security vulnerabilities
2013-12-01 00:00:00
[ MDVSA-2013:284 ] glibc
2013-12-01 00:00:00
[ MDVSA-2014:152 ] glibc
2014-08-11 00:00:00
suse
suse
Security update for glibc (important)
2014-09-12 02:04:23
Security update for glibc (important)
2014-09-12 06:04:16
glibc (important)
2014-09-11 09:04:39
mageia
mageia
Updated glibc package fixes security vulnerabilities
2013-11-22 22:44:49
Updated glibc packages fix multiple security vulnerabilities
2014-09-15 14:36:30
Updated glibc packages fix security issues
2014-08-06 00:08:48
ubuntu
ubuntu
GNU C Library regression
2014-08-05 00:00:00
GNU C Library vulnerabilities
2014-08-04 00:00:00
GNU C Library regression
2014-09-08 00:00:00
f5
f5
SOL15640 - GNU C Library (glibc) vulnerabilities CVE-2014-0475, CVE-2014-5119, CVE-2013-4458
2014-10-02 00:00:00
K15640 : GNU C Library (glibc) vulnerabilities CVE-2014-0475, CVE-2014-5119, CVE-2013-4458
2014-10-02 00:00:00
SOL15546 - glibc vulnerability CVE-2014-4043
2014-09-04 00:00:00
osv
osv
eglibc - security update
2015-11-26 00:00:00
eglibc - security update
2014-09-02 00:00:00
eglibc - security update
2015-03-06 00:00:00
debian
debian
[SECURITY] [DLA 350-1] eglibc security update
2015-11-26 17:49:39
[DLA 43-1] eglibc security update
2014-09-02 18:03:40
[SECURITY] [DLA 165-1] eglibc security update
2015-03-06 15:39:53
redhat
redhat
(RHSA-2014:1391) Moderate: glibc security, bug fix, and enhancement update
2014-10-14 00:00:00
(RHSA-2014:1110) Important: glibc security update
2014-08-29 00:00:00
(RHSA-2014:1118) Important: glibc security update
2014-09-02 00:00:00
centos
centos
glibc, nscd security update
2014-10-20 18:08:56
glibc, nscd security update
2014-08-29 20:28:37
ibm
ibm
Security Bulletin: Vulnerabilities in GNU C Library affects IBM SmartCloud Provisioning for Software Virtual Appliance (CVE-2014-5119, CVE-2014-0475)
2018-06-17 22:30:11
Security Bulletin: Two (2) Vulnerabilities in glibc affect IBM FlashSystem (and TMS RAMSAN) 710, 720, 810, and 820 systems (CVE-2014-5119 and CVE-2014-0475)
2023-02-28 01:12:10
Security Bulletin: Vulnerabilities in glibc affect the IBM Flex System Manager (FSM): (CVE-2013-4332, CVE-2014-0475, CVE-2014-5119)
2019-01-31 01:35:01
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2015-03-08 00:00:00
ubuntucve
ubuntucve
CVE-2012-4424
2013-10-09 00:00:00
CVE-2012-4412
2013-10-09 00:00:00
CVE-2014-4043
2014-06-13 00:00:00
debiancve
debiancve
CVE-2012-4424
2013-10-09 22:55:00
CVE-2012-4412
2013-10-09 22:55:00
CVE-2014-4043
2014-10-06 23:55:00
cve
cve
CVE-2012-4424
2013-10-09 22:55:00
CVE-2012-4412
2013-10-09 22:55:00
CVE-2013-4788
2013-10-04 17:55:00
prion
prion
Stack overflow
2013-10-09 22:55:00
Integer overflow
2013-10-09 22:55:00
Design/Logic Flaw
2014-10-06 23:55:00
zdt
zdt
glibc and eglibc 2.5, 2.7, 2.13 - Buffer Overflow Vulnerability
2013-10-01 00:00:00
glibc Off-by-One NUL Byte gconv_translit_find Exploit
2014-08-27 00:00:00
amazon
amazon
Important: glibc
2014-09-03 14:44:00
exploitpack
exploitpack
glibc - NUL Byte gconv_translit_find Off-by-One
2014-08-27 00:00:00
seebug
seebug
glibc Off-by-One NUL Byte gconv_translit_find Exploit
2014-09-04 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-5119 glib_gconv_translit_find() exploit | Cloud Foundry
2014-09-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:59:59

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.046 Low

EPSS

Percentile

92.5%

JSON
Related for SSA-2014-296-01
nessus46openvas52altlinux3oraclelinux5fedora6securityvulns6suse7mageia4ubuntu5f56osv4debian4redhat3centos2ibm12gentoo1ubuntucve7debiancve7cve6prion6zdt2amazon1exploitpack1seebug1cloudfoundry1veracode1