Lucene search

K
suseSuseOPENSUSE-SU-2019:1250-1
HistoryApr 20, 2019 - 12:00 a.m.

Security update for glibc (moderate)

2019-04-2000:00:00
lists.opensuse.org
142

EPSS

0.001

Percentile

22.9%

An update that solves one vulnerability and has two fixes
is now available.

Description:

This update for glibc fixes the following issues:

Security issue fixed:

  • CVE-2016-10739: Fixed an improper implementation of getaddrinfo function
    which could allow applications to incorrectly assume that had parsed a
    valid string, without the possibility of embedded HTTP headers or other
    potentially dangerous substrings (bsc#1122729).

Other issue fixed:

  • Fixed an issue where pthread_mutex_trylock did not use a correct order
    of instructions while maintained the robust mutex list due to missing
    compiler barriers (bsc#1130045).
  • Added new Japanese Era name support (bsc#1100396).

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-1250=1