Lucene search

K
suseSuseSUSE-SU-2014:1125-1
HistorySep 13, 2014 - 3:04 a.m.

Security update for glibc (important)

2014-09-1303:04:16
lists.opensuse.org
15

0.011 Low

EPSS

Percentile

82.8%

This glibc update fixes a critical privilege escalation problem and two
non-security issues:

   * bnc#892073: An off-by-one error leading to a heap-based buffer
     overflow was found in __gconv_translit_find(). An exploit that

targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don’t parse %s format
argument as multi-byte string.

Security Issues:

   * CVE-2014-5119
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119</a>&gt;