Scientific Linux 5.0: 2013:1411-1 Moderate: glibc Heap Overflow

Date: Thu, 10 Oct 2013 20:22:30 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: glibc on SL5.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: glibc security and bug fix update
Advisory ID: SLSA-2013:1411-1
Issue Date: 2013-10-08
CVE Numbers: CVE-2013-4332
--

Multiple integer overflow flaws, leading to heap-based buffer overflows,
were found in glibc's memory allocator functions (pvalloc, valloc, and
memalign). If an application used such a function, it could cause the
application to crash or, potentially, execute arbitrary code with the
privileges of the user running the application. (CVE-2013-4332)

This update also fixes the following bug:

* Prior to this update, the size of the L3 cache in certain CPUs for SMP
(Symmetric Multiprocessing) servers was not correctly detected. The
incorrect cache size detection resulted in less than optimal performance
for routines that used this information, including the memset() function.
To fix this bug, the cache size detection has been corrected and core
routines including memset() have their performance restored to expected
levels.
--

SL5
 x86_64
 glibc-2.5-118.el5_10.2.i686.rpm
 glibc-2.5-118.el5_10.2.x86_64.rpm
 glibc-common-2.5-118.el5_10.2.x86_64.rpm
 glibc-debuginfo-2.5-118.el5_10.2.i386.rpm
 glibc-debuginfo-2.5-118.el5_10.2.i686.rpm
 glibc-debuginfo-2.5-118.el5_10.2.x86_64.rpm
 glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm
 glibc-devel-2.5-118.el5_10.2.i386.rpm
 glibc-devel-2.5-118.el5_10.2.x86_64.rpm
 glibc-headers-2.5-118.el5_10.2.x86_64.rpm
 glibc-utils-2.5-118.el5_10.2.x86_64.rpm
 nscd-2.5-118.el5_10.2.x86_64.rpm
 i386
 glibc-2.5-118.el5_10.2.i386.rpm
 glibc-2.5-118.el5_10.2.i686.rpm
 glibc-common-2.5-118.el5_10.2.i386.rpm
 glibc-debuginfo-2.5-118.el5_10.2.i386.rpm
 glibc-debuginfo-2.5-118.el5_10.2.i686.rpm
 glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm
 glibc-devel-2.5-118.el5_10.2.i386.rpm
 glibc-headers-2.5-118.el5_10.2.i386.rpm
 glibc-utils-2.5-118.el5_10.2.i386.rpm
 nscd-2.5-118.el5_10.2.i386.rpm

- Scientific Linux Development Team