Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 7: 2020-0135 Moderate: Glibc Stack Corruption Issue

mageia
Calendar Grey March 8, 2020
Dist Mageia Esm H88
Mageia 2020-0136 addresses issues with glibc, specifically mitigating buffer overflow problems in mathematical functions for x86 systems.
Updated glibc packages fix security vulnerabilities: Trigonometric functions on x86 targets suffered from stack corruption when they were passed a pseudo-zero argument

Summary

Updated glibc packages fix security vulnerabilities:
Trigonometric functions on x86 targets suffered from stack corruption when they were passed a pseudo-zero argument. Reported by Guido Vranken / ForAllSecure Mayhem. [BZ 25487] (CVE-2020-10029).
Fix use-after-free in glob when expanding ~user [BZ 25414]

References

- https://bugs.mageia.org/show_bug.cgi?id=26309

- https://sourceware.org/bugzilla/show_bug.cgi?id=25487

- https://sourceware.org/bugzilla/show_bug.cgi?id=25414

- https://www.cve.org/CVERecord?id=CVE-2020-10029

Topics%20covered

Topics Covered

security advisory security issue software update glibc stack corruption Mageia

Resolution

SRPMS

- 7/core/glibc-2.29-20.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 08 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0135.html
Type: security
CVE: CVE-2020-10029

Topics%20covered

Topics Covered

security advisory security issue software update glibc stack corruption Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here