Scientific Linux: SLSA-2015:0016-1 Moderate: glibc Bug Fix Update

Date: Tue, 6 Jan 2015 11:12:00 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 6x i386, x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

i386:
autofs-5.0.5-109.el6_6.1.i686.rpm
dovecot-2.0.9-8.el6_6.4.i686.rpm
dovecot-devel-2.0.9-8.el6_6.4.i686.rpm
dovecot-mysql-2.0.9-8.el6_6.4.i686.rpm
dovecot-pgsql-2.0.9-8.el6_6.4.i686.rpm
dovecot-pigeonhole-2.0.9-8.el6_6.4.i686.rpm
dracut-004-336.el6_5.4.noarch.rpm
dracut-caps-004-336.el6_5.4.noarch.rpm
dracut-fips-004-336.el6_5.4.noarch.rpm
dracut-fips-aesni-004-336.el6_5.4.noarch.rpm
dracut-generic-004-336.el6_5.4.noarch.rpm
dracut-kernel-004-336.el6_5.4.noarch.rpm
dracut-network-004-336.el6_5.4.noarch.rpm
dracut-tools-004-336.el6_5.4.noarch.rpm
gdbm-1.8.0-37.el6.i686.rpm
gdbm-devel-1.8.0-37.el6.i686.rpm

x86_64:
autofs-5.0.5-109.el6_6.1.x86_64.rpm
dovecot-2.0.9-8.el6_6.4.i686.rpm
dovecot-2.0.9-8.el6_6.4.x86_64.rpm
dovecot-devel-2.0.9-8.el6_6.4.i686.rpm
dovecot-devel-2.0.9-8.el6_6.4.x86_64.rpm
dovecot-mysql-2.0.9-8.el6_6.4.x86_64.rpm
dovecot-pgsql-2.0.9-8.el6_6.4.x86_64.rpm
dovecot-pigeonhole-2.0.9-8.el6_6.4.x86_64.rpm
dracut-004-336.el6_5.4.noarch.rpm
dracut-caps-004-336.el6_5.4.noarch.rpm
dracut-fips-004-336.el6_5.4.noarch.rpm
dracut-fips-aesni-004-336.el6_5.4.noarch.rpm
dracut-generic-004-336.el6_5.4.noarch.rpm
dracut-kernel-004-336.el6_5.4.noarch.rpm
dracut-network-004-336.el6_5.4.noarch.rpm
dracut-tools-004-336.el6_5.4.noarch.rpm
gdbm-1.8.0-37.el6.i686.rpm
gdbm-1.8.0-37.el6.x86_64.rpm
gdbm-devel-1.8.0-37.el6.i686.rpm
gdbm-devel-1.8.0-37.el6.x86_64.rpm
Date: Tue, 6 Jan 2015 11:31:37 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 7x x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

x86_64:
mariadb-5.5.40-2.el7_0.x86_64.rpm
mariadb-bench-5.5.40-2.el7_0.x86_64.rpm
mariadb-devel-5.5.40-2.el7_0.i686.rpm
mariadb-devel-5.5.40-2.el7_0.x86_64.rpm
mariadb-embedded-5.5.40-2.el7_0.i686.rpm
mariadb-embedded-5.5.40-2.el7_0.x86_64.rpm
mariadb-embedded-devel-5.5.40-2.el7_0.i686.rpm
mariadb-embedded-devel-5.5.40-2.el7_0.x86_64.rpm
mariadb-libs-5.5.40-2.el7_0.i686.rpm
mariadb-libs-5.5.40-2.el7_0.x86_64.rpm
mariadb-server-5.5.40-2.el7_0.x86_64.rpm
mariadb-test-5.5.40-2.el7_0.x86_64.rpm
Date: Wed, 7 Jan 2015 23:20:20 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: glibc on SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: glibc security and bug fix update
Advisory ID: SLSA-2015:0016-1
Issue Date: 2015-01-07
CVE Numbers: CVE-2014-7817
 CVE-2014-6040
--

An out-of-bounds read flaw was found in the way glibc's iconv() function
converted certain encoded data to UTF-8. An attacker able to make an
application call the iconv() function with a specially crafted argument
could use this flaw to crash that application. (CVE-2014-6040)

It was found that the wordexp() function would perform command
substitution even when the WRDE_NOCMD flag was specified. An attacker able
to provide specially crafted input to an application using the wordexp()
function, and not sanitizing the input correctly, could potentially use
this flaw to execute arbitrary commands with the credentials of the user
running that application. (CVE-2014-7817)

This update also fixes the following bugs:

* Previously, when an address lookup using the getaddrinfo() function for
the AF_UNSPEC value was performed on a defective DNS server, the server in
some cases responded with a valid response for the A record, but a
referral response for the AAAA record, which resulted in a lookup failure.
A prior update was implemented for getaddrinfo() to return the valid
response, but it contained a typographical error, due to which the lookup
could under some circumstances still fail. This error has been corrected
and getaddrinfo() now returns a valid response in the described
circumstances.

* An error in the dlopen() library function previously caused recursive
calls to dlopen() to terminate unexpectedly or to abort with a library
assertion. This error has been fixed and recursive calls to dlopen() no
longer crash or abort.
--

SL6
 x86_64
 glibc-2.12-1.149.el6_6.4.i686.rpm
 glibc-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-common-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-debuginfo-2.12-1.149.el6_6.4.i686.rpm
 glibc-debuginfo-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-debuginfo-common-2.12-1.149.el6_6.4.i686.rpm
 glibc-debuginfo-common-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-devel-2.12-1.149.el6_6.4.i686.rpm
 glibc-devel-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-headers-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-utils-2.12-1.149.el6_6.4.x86_64.rpm
 nscd-2.12-1.149.el6_6.4.x86_64.rpm
 glibc-static-2.12-1.149.el6_6.4.i686.rpm
 glibc-static-2.12-1.149.el6_6.4.x86_64.rpm
 i386
 glibc-2.12-1.149.el6_6.4.i686.rpm
 glibc-common-2.12-1.149.el6_6.4.i686.rpm
 glibc-debuginfo-2.12-1.149.el6_6.4.i686.rpm
 glibc-debuginfo-common-2.12-1.149.el6_6.4.i686.rpm
 glibc-devel-2.12-1.149.el6_6.4.i686.rpm
 glibc-headers-2.12-1.149.el6_6.4.i686.rpm
 glibc-utils-2.12-1.149.el6_6.4.i686.rpm
 nscd-2.12-1.149.el6_6.4.i686.rpm
 glibc-static-2.12-1.149.el6_6.4.i686.rpm

- Scientific Linux Development Team