Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
100
security advisorypatchglibcSUSE: 2025:0562-1 low: fix for glibc underallocation issue found
* bsc#1236282 Cross-References: * CVE-2025-0395 . # Security update for glibc Announcement ID: SUSE-SU-2025:0562-1 Release Date: 2025-02-17T11:45:11Z Rating: low References: * bsc#1236282 Cross-References: * CVE-2025-0395 CVSS scores: * CVE-2025-0395 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-0395 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-0395 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ##Description: This update for glibc fixes the following issues: * CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-562=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-562=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-562=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-562=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-562=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-562=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-562=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-562=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-562=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-562=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-562=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-562=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-562=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-562=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patchSUSE-SLE-Product-SLES_SAP-15-SP3-2025-562=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-562=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-562=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-562=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-562=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-562=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-562=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-562=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-562=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-562=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586 i686) * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * glibc-extra-2.31-150300.92.1 * nscd-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * openSUSE Leap 15.3 (noarch) * glibc-info-2.31-150300.92.1 * glibc-html-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * openSUSE Leap 15.3(x86_64) * glibc-profile-32bit-2.31-150300.92.1 * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-static-32bit-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-utils-32bit-2.31-150300.92.1 * glibc-utils-32bit-debuginfo-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * openSUSE Leap 15.3 (aarch64_ilp32) * glibc-utils-64bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-64bit-debuginfo-2.31-150300.92.1 * glibc-devel-64bit-debuginfo-2.31-150300.92.1 * glibc-devel-static-64bit-2.31-150300.92.1 * glibc-utils-64bit-2.31-150300.92.1 * glibc-64bit-debuginfo-2.31-150300.92.1 * glibc-64bit-2.31-150300.92.1 * glibc-devel-64bit-2.31-150300.92.1 * glibc-locale-base-64bit-2.31-150300.92.1 * glibc-profile-64bit-2.31-150300.92.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 *glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 *glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 *glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) *glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 *glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Manager Proxy 4.3 (x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Manager Proxy 4.3 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 *glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Manager Server 4.3 (noarch) * glibc-info-2.31-150300.92.1 * glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Manager Server 4.3 (x86_64) * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-32bit-debuginfo-2.31-150300.92.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * glibc-extra-2.31-150300.92.1 * glibc-devel-debuginfo-2.31-150300.92.1 * glibc-devel-2.31-150300.92.1 * nscd-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * nscd-debuginfo-2.31-150300.92.1 * glibc-extra-debuginfo-2.31-150300.92.1 * glibc-utils-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-utils-src-debugsource-2.31-150300.92.1 * glibc-profile-2.31-150300.92.1 * glibc-utils-debuginfo-2.31-150300.92.1 * glibc-devel-static-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Enterprise Storage 7.1 (noarch) * glibc-info-2.31-150300.92.1 *glibc-lang-2.31-150300.92.1 * glibc-i18ndata-2.31-150300.92.1 * SUSE Enterprise Storage 7.1 (x86_64) * glibc-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-debuginfo-2.31-150300.92.1 * glibc-locale-base-32bit-2.31-150300.92.1 * glibc-32bit-2.31-150300.92.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.92.1 * glibc-devel-32bit-2.31-150300.92.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * glibc-devel-2.31-150300.92.1 * glibc-locale-base-2.31-150300.92.1 * glibc-debuginfo-2.31-150300.92.1 * glibc-locale-base-debuginfo-2.31-150300.92.1 * glibc-locale-2.31-150300.92.1 * glibc-debugsource-2.31-150300.92.1 * glibc-2.31-150300.92.1 ## References: * https://www.suse.com/security/cve/CVE-2025-0395.html * https://bugzilla.suse.com/show_bug.cgi?id=1236282 . Critical patch for glibc addressing CVE-2025-0395 vulnerability issued. Update now to safeguard your infrastructure.. glibc Update,SUSE Security Advisory,OpenSUSE Security Fix. . Severity: Low. LinuxSecurity.com Team
Feb 17, 2025
•Low
SuSE
100
security advisorymoderate severityglibc issueSUSE: 2023:905-1 Moderate: Glibc Buffer Overflow Security Update
The container bci/dotnet-runtime was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/dotnet-runtime ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:905-1 Container Tags : bci/dotnet-runtime:7.0 , bci/dotnet-runtime:7.0-10.14 , bci/dotnet-runtime:7.0.4 , bci/dotnet-runtime:7.0.4-10.14 , bci/dotnet-runtime:latest Container Release : 10.14 Severity : moderate Type : security References : 1207571 1207957 1207975 1208358 CVE-2023-0687 ----------------------------------------------------------------- The container bci/dotnet-runtime was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1718-1 Released: Fri Mar 31 15:47:34 2023 Summary: Security update for glibc Type: security Severity: moderate References: 1207571,1207957,1207975,1208358,CVE-2023-0687 This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975) Other issues fixed: - Fix avx2 strncmp offset compare condition check (bsc#1208358) - elf: Allow dlopen of filter object to work (bsc#1207571) - powerpc: Fix unrecognized instruction errors with recent GCC - x86: Cache computation for AMD architecture (bsc#1207957) The following package changes have been done: - glibc-2.31-150300.46.1 updated - container:sles15-image-15.0.0-27.14.47 updated . SUSE Container Security Notification: bci/python-runtime tackles moderate vulnerabilities involving glibc concerns across multiple tags.. Container, Security Update, BCI/Dotnet-Runtime. . LinuxSecurity.com Team
Apr 02, 2023
SuSE
198
security advisoryhigh severityglibc issueArch Linux: ASA-201502-8 High: Glibc Exploitable Exploits
The package glibc before version 2.21-1 has multiple issues that could be exploitable. . Arch Linux Security Advisory ASA-201502-8 ======================================== Severity: High Date : 2015-02-09 CVE-ID : CVE-2015-1472 CVE-2015-1473 Package : glibc Type : multiple issues Remote : possible (still under investigation) Link : https://wiki.archlinux.org/title/CVE Summary ====== The package glibc before version 2.21-1 has multiple issues that could be exploitable. Resolution ========= Upgrade to 2.21-1 # pacman -Syu "glibc> =2.21-1" The problems have been fixed upstream in version 2.21. Workaround ========= None. Description ========== glibc has multiple issues including heap- and stack overflows that could be exploitable. The heap- and stack-overflow is possible in the swscanf function. Impact ===== The issue is still under investigation. It's not clear if the issue is exploitable. In case of 'yes' this could result in various exploits in every software that uses glibc. This includes remote-code-execution or local exploits for gaining root access. References ========= https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2015-1472 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2015-1473 https://sourceware.org/legacy-ml/libc-alpha/2015-02/msg00119.html . Debian highlights significant vulnerabilities in OpenSSL that could lead to serious breaches; users strongly encouraged to update to version 1.1.1k immediately.. Arch Linux Exploit, Glibc Security, Remote Code Access, Package Upgrade. . LinuxSecurity.com Team
Feb 09, 2015
ArchLinux
98
security advisorybuffer overflowRed Hat Enterprise LinuxRed Hat Enterprise Linux 5: RHSA-2015:0090-01 Critical: glibc Overflow
Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Critical: glibc security update Advisory ID: RHSA-2015:0090-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:0090.html Issue date: 2015-01-27 CVE Names: CVE-2015-0235 ==================================================================== 1. Summary: Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application. (CVE-2015-0235) Red Hat would like to thank Qualys for reporting this issue. All glibc users are advised to upgrade tothese updated packages, which contain a backported patch to correct this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1183461 - CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: glibc-2.5-123.el5_11.1.src.rpm i386: glibc-2.5-123.el5_11.1.i386.rpm glibc-2.5-123.el5_11.1.i686.rpm glibc-common-2.5-123.el5_11.1.i386.rpm glibc-debuginfo-2.5-123.el5_11.1.i386.rpm glibc-debuginfo-2.5-123.el5_11.1.i686.rpm glibc-debuginfo-common-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.i386.rpm glibc-headers-2.5-123.el5_11.1.i386.rpm glibc-utils-2.5-123.el5_11.1.i386.rpm nscd-2.5-123.el5_11.1.i386.rpm x86_64: glibc-2.5-123.el5_11.1.i686.rpm glibc-2.5-123.el5_11.1.x86_64.rpm glibc-common-2.5-123.el5_11.1.x86_64.rpm glibc-debuginfo-2.5-123.el5_11.1.i386.rpm glibc-debuginfo-2.5-123.el5_11.1.i686.rpm glibc-debuginfo-2.5-123.el5_11.1.x86_64.rpm glibc-debuginfo-common-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.x86_64.rpm glibc-headers-2.5-123.el5_11.1.x86_64.rpm glibc-utils-2.5-123.el5_11.1.x86_64.rpm nscd-2.5-123.el5_11.1.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: glibc-2.5-123.el5_11.1.src.rpm i386: glibc-2.5-123.el5_11.1.i386.rpm glibc-2.5-123.el5_11.1.i686.rpm glibc-common-2.5-123.el5_11.1.i386.rpm glibc-debuginfo-2.5-123.el5_11.1.i386.rpm glibc-debuginfo-2.5-123.el5_11.1.i686.rpm glibc-debuginfo-common-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.i386.rpm glibc-headers-2.5-123.el5_11.1.i386.rpm glibc-utils-2.5-123.el5_11.1.i386.rpm nscd-2.5-123.el5_11.1.i386.rpm ia64: glibc-2.5-123.el5_11.1.i686.rpm glibc-2.5-123.el5_11.1.ia64.rpm glibc-common-2.5-123.el5_11.1.ia64.rpm glibc-debuginfo-2.5-123.el5_11.1.i686.rpm glibc-debuginfo-2.5-123.el5_11.1.ia64.rpm glibc-debuginfo-common-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.ia64.rpm glibc-headers-2.5-123.el5_11.1.ia64.rpm glibc-utils-2.5-123.el5_11.1.ia64.rpm nscd-2.5-123.el5_11.1.ia64.rpm ppc: glibc-2.5-123.el5_11.1.ppc.rpm glibc-2.5-123.el5_11.1.ppc64.rpm glibc-common-2.5-123.el5_11.1.ppc.rpm glibc-debuginfo-2.5-123.el5_11.1.ppc.rpm glibc-debuginfo-2.5-123.el5_11.1.ppc64.rpm glibc-devel-2.5-123.el5_11.1.ppc.rpm glibc-devel-2.5-123.el5_11.1.ppc64.rpm glibc-headers-2.5-123.el5_11.1.ppc.rpm glibc-utils-2.5-123.el5_11.1.ppc.rpm nscd-2.5-123.el5_11.1.ppc.rpm s390x: glibc-2.5-123.el5_11.1.s390.rpm glibc-2.5-123.el5_11.1.s390x.rpm glibc-common-2.5-123.el5_11.1.s390x.rpm glibc-debuginfo-2.5-123.el5_11.1.s390.rpm glibc-debuginfo-2.5-123.el5_11.1.s390x.rpm glibc-devel-2.5-123.el5_11.1.s390.rpm glibc-devel-2.5-123.el5_11.1.s390x.rpm glibc-headers-2.5-123.el5_11.1.s390x.rpm glibc-utils-2.5-123.el5_11.1.s390x.rpm nscd-2.5-123.el5_11.1.s390x.rpm x86_64: glibc-2.5-123.el5_11.1.i686.rpm glibc-2.5-123.el5_11.1.x86_64.rpm glibc-common-2.5-123.el5_11.1.x86_64.rpm glibc-debuginfo-2.5-123.el5_11.1.i386.rpm glibc-debuginfo-2.5-123.el5_11.1.i686.rpm glibc-debuginfo-2.5-123.el5_11.1.x86_64.rpm glibc-debuginfo-common-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.i386.rpm glibc-devel-2.5-123.el5_11.1.x86_64.rpm glibc-headers-2.5-123.el5_11.1.x86_64.rpm glibc-utils-2.5-123.el5_11.1.x86_64.rpm nscd-2.5-123.el5_11.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-0235 https://access.redhat.com/security/updates/classification#critical 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUx8U6XlSAg2UNWIIRAoItAJ0aDoP9DLGMw9Uv9JZ/s3p8R30o8ACgg2Gf fnI6Bar16s9i0KKlJ6gkJs4=WEdr -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Jan 27, 2015
•Critical
Red Hat
202
security advisorycode executiondirectory traversalopenSUSE 13.1 Important: glibc Update Fixes Three Issues
An update that fixes three vulnerabilities is now available.. openSUSE Security Update: glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1115-1 Rating: important References: #887022 #892073 #894553 Cross-References: CVE-2014-0475 CVE-2014-5119 CVE-2014-6040 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: glibc was updated to fix three security issues: - A directory traversal in locale environment handling was fixed (CVE-2014-0475, bnc#887022, GLIBC BZ #17137) - Disable gconv transliteration module loading which could be used for code execution (CVE-2014-5119, bnc#892073, GLIBC BZ #17187) - Fix crashes on invalid input in IBM gconv modules (CVE-2014-6040, bnc#894553, BZ #17325) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-536 - openSUSE 12.3: zypper in -t patch openSUSE-2014-536 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 i686 x86_64): glibc-2.18-4.21.1 glibc-debuginfo-2.18-4.21.1 glibc-debugsource-2.18-4.21.1 glibc-devel-2.18-4.21.1 glibc-devel-debuginfo-2.18-4.21.1 glibc-devel-static-2.18-4.21.1 glibc-extra-2.18-4.21.1 glibc-extra-debuginfo-2.18-4.21.1 glibc-locale-2.18-4.21.1 glibc-locale-debuginfo-2.18-4.21.1 glibc-profile-2.18-4.21.1 nscd-2.18-4.21.1 nscd-debuginfo-2.18-4.21.1 - openSUSE 13.1 (i586 x86_64): glibc-utils-2.18-4.21.1 glibc-utils-debuginfo-2.18-4.21.1 glibc-utils-debugsource-2.18-4.21.1 - openSUSE 13.1 (i586i686): glibc-obsolete-2.18-4.21.1 glibc-obsolete-debuginfo-2.18-4.21.1 - openSUSE 13.1 (x86_64): glibc-32bit-2.18-4.21.1 glibc-debuginfo-32bit-2.18-4.21.1 glibc-devel-32bit-2.18-4.21.1 glibc-devel-debuginfo-32bit-2.18-4.21.1 glibc-devel-static-32bit-2.18-4.21.1 glibc-locale-32bit-2.18-4.21.1 glibc-locale-debuginfo-32bit-2.18-4.21.1 glibc-profile-32bit-2.18-4.21.1 glibc-utils-32bit-2.18-4.21.1 glibc-utils-debuginfo-32bit-2.18-4.21.1 - openSUSE 13.1 (noarch): glibc-html-2.18-4.21.1 glibc-i18ndata-2.18-4.21.1 glibc-info-2.18-4.21.1 - openSUSE 12.3 (i586 i686 x86_64): glibc-2.17-4.13.1 glibc-debuginfo-2.17-4.13.1 glibc-debugsource-2.17-4.13.1 glibc-devel-2.17-4.13.1 glibc-devel-debuginfo-2.17-4.13.1 glibc-devel-static-2.17-4.13.1 glibc-extra-2.17-4.13.1 glibc-extra-debuginfo-2.17-4.13.1 glibc-locale-2.17-4.13.1 glibc-locale-debuginfo-2.17-4.13.1 glibc-profile-2.17-4.13.1 nscd-2.17-4.13.1 nscd-debuginfo-2.17-4.13.1 - openSUSE 12.3 (i586 x86_64): glibc-utils-2.17-4.13.1 glibc-utils-debuginfo-2.17-4.13.1 glibc-utils-debugsource-2.17-4.13.1 - openSUSE 12.3 (i586 i686): glibc-obsolete-2.17-4.13.1 glibc-obsolete-debuginfo-2.17-4.13.1 - openSUSE 12.3 (x86_64): glibc-32bit-2.17-4.13.1 glibc-debuginfo-32bit-2.17-4.13.1 glibc-devel-32bit-2.17-4.13.1 glibc-devel-debuginfo-32bit-2.17-4.13.1 glibc-devel-static-32bit-2.17-4.13.1 glibc-locale-32bit-2.17-4.13.1 glibc-locale-debuginfo-32bit-2.17-4.13.1 glibc-profile-32bit-2.17-4.13.1 glibc-utils-32bit-2.17-4.13.1 glibc-utils-debuginfo-32bit-2.17-4.13.1 - openSUSE 12.3 (noarch): glibc-html-2.17-4.13.1 glibc-i18ndata-2.17-4.13.1 glibc-info-2.17-4.13.1 References: https://www.suse.com/security/cve/CVE-2014-0475.html https://www.suse.com/security/cve/CVE-2014-5119.html https://www.suse.com/security/cve/CVE-2014-6040.html -- . Important notice for openSUSE concerning three significant glibc security flaws, along with detailed patch application guidelines.. openSUSE Security Updates, glibc Patches, important vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Sep 11, 2014
•Important
OpenSUSE
87
security advisoryDebianlocal exploitDebian: Critical Advisory - glibc Local Exploit Severity: Critical
Recently two problems have been found in the glibc suite, which could beused to trick setuid applications to run arbitrary code. . -----BEGIN PGP SIGNED MESSAGE------ ------------------------------------------------------------------------Debian Security Advisory
Sep 02, 2000
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!