Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Red Hat Enterprise Linux 8: RHSA-2020-1828 Security Fix for glibc Bug

red hat
Calendar Grey April 28, 2020
Dist Redhat Esm H88
A new release for glibc has been issued for Red Hat Enterprise Linux 8, rectifying a minor severity problem along with various improvements and fix implementations.
An update for glibc is now available for Red Hat Enterprise Linux 8

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

For the update to take effect, all services linked to the glibc library must be restarted, or the system rebooted.

Summary

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.
Security Fix(es):
* glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries (CVE-2019-19126)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory security issue bug fix Red Hat Enterprise Linux glibc low severity enhancement update

References

https://access.redhat.com/security/cve/CVE-2019-19126 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index

Package List

Red Hat Enterprise Linux AppStream (v. 8):
aarch64: compat-libpthread-nonshared-2.28-101.el8.aarch64.rpm glibc-debuginfo-2.28-101.el8.aarch64.rpm glibc-utils-2.28-101.el8.aarch64.rpm
ppc64le: compat-libpthread-nonshared-2.28-101.el8.ppc64le.rpm glibc-debuginfo-2.28-101.el8.ppc64le.rpm glibc-debuginfo-common-2.28-101.el8.ppc64le.rpm glibc-utils-2.28-101.el8.ppc64le.rpm
s390x: compat-libpthread-nonshared-2.28-101.el8.s390x.rpm glibc-debuginfo-2.28-101.el8.s390x.rpm glibc-debuginfo-common-2.28-101.el8.s390x.rpm glibc-utils-2.28-101.el8.s390x.rpm
x86_64: compat-libpthread-nonshared-2.28-101.el8.x86_64.rpm glibc-debuginfo-2.28-101.el8.x86_64.rpm glibc-debuginfo-common-2.28-101.el8.x86_64.rpm glibc-utils-2.28-101.el8.x86_64.rpm
Red Hat Enterprise Linux BaseOS (v. 8):
Source: glibc-2.28-101.el8.src.rpm
aarch64: glibc-2.28-101.el8.aarch64.rpm glibc-all-langpacks-2.28-101.el8.aarch64.rpm glibc-common-2.28-101.el8.aarch64.rpm glibc-debuginfo-2.28-101.el8.aarch64.rpm glibc-devel-2.28-101.el8.aarch64.rpm glibc-headers-2.28-101.el8.aarch64.rpm glibc-langpack-aa-2.28-101.el8.aarch64.rpm glibc-langpack-af-2.28-101.el8.aarch64.rpm glibc-langpack-agr-2.28-101.el8.aarch64.rpm glibc-langpack-ak-2.28-101.el8.aarch64.rpm glibc-langpack-am-2.28-101.el8.aarch64.rpm

Read the Full Advisory


Severity
low
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2020:1828-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2020:1828
Issue date: 2020-04-28

Topic

An update for glibc is now available for Red Hat Enterprise Linux 8.Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory security issue bug fix Red Hat Enterprise Linux glibc low severity enhancement update

Relevant Releases Architectures

Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64

Bugs Fixed

1361965 - glibc: Fix C.UTF-8 locale source ellipsis expressions

1410154 - glibc: Incomplete rollback of dynamic linker state on dlopen failure (NODELETE bug)

1682954 - glibc: Call _dl_open_check (CET related) after relocation is finished

1726638 - glibc: Implement SVE Vector PCS on AArch64

1735747 - glibc: malloc_info updates

1746928 - glibc: Avoid fork handler lock for async-signal-safe fork

1746933 - glibc: Backport malloc tcache enhancements (swbz#24531)

1747453 - glibc: Add --preload option to the dynamic loader

1747502 - glibc: Calling getpwent after endpwent should not crash?

1747505 - glibc: Add a comment to the default nscd.conf file that is it not recommended to use NSCD and SSSD for the same NSS maps

1749439 - glibc: Repeating pututxline() on EINTR/EAGAIN causes stale utmp entries

1764214 - glibc: Fix alignment of TLS variables for tls variant TLS_TCB_AT_TP

1764218 - glibc: Backport malloc fastbin (mxfast) enhancements

1764223 - glibc: elf: Refuse to dlopen PIE objects [BZ #24323]

1764226 - glibc: Various test suite enhancements

1764231 - glibc: ld.so: Support moving versioned symbols between sonames [BZ #24741]

1764234 - glibc: Update system call names list to Linux 5.3

1764235 - glibc: malloc: Set and reset all hooks for tracing (Bug 16573)

1764238 - glibc: Enhancements for GCC Toolset enablement

1764241 - glibc: libio: Remove codecvt vtable [BZ #24588]

1764242 - glibc: Enhancements for LLVM toolset

Read the Full Advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here