Stay Secure with the Latest Linux Advisories

security advisoryFedorasecurity fix

Fedora 27: 2017-10-24 Security Fixes For Glibc Critical Flaws

This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the `nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a security hardening measure, stdio streams are no longer flushed on process abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-0d3fdd3d1f 2017-10-24 20:07:54.665530 --------------------------------------------------------------------------------Name : glibc Product : Fedora 27 Version : 2.26 Release : 15.fc27 URL : Summary : The GNU libc libraries Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function. --------------------------------------------------------------------------------Update Information: This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the `nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a security hardening measure, stdio streams are no longer flushed on process abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM z Series (RHBZ#1499260). Two security fixes for the `glob` function are provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807). An error in the `sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been corrected (RHBZ#1504165). The included upstream update from the glibc 2.26 stablebranch improves C++ compatibility for ` ` functions and fixes a memory leak in malloc when thread local caches are in use. --------------------------------------------------------------------------------References: [ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure https://bugzilla.redhat.com/show_bug.cgi?id=1498880 [ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package https://bugzilla.redhat.com/show_bug.cgi?id=1400538 [ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv https://bugzilla.redhat.com/show_bug.cgi?id=1416405 [ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod https://bugzilla.redhat.com/show_bug.cgi?id=1498900 [ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support. https://bugzilla.redhat.com/show_bug.cgi?id=1499260 [ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1 https://bugzilla.redhat.com/show_bug.cgi?id=1504165 [ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1504807 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade glibc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fortify your network's defenses by implementing themost recent glibc patches for Fedora 27, which include vital enhancements and resolutive updates.. Fedora 27, glibc update, security enhancements, codepage support. . Severity: Critical. LinuxSecurity.com Team

Oct 24, 2017 •Critical Fedora