Oval Definition:oval:org.opensuse.security:def:97587
Revision Date:2019-07-18Version:1
Title:Security update for glibc (Moderate)
Description:

This update for glibc fixes the following issues:

Security issues fixed:

- CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308). - CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223).

Non-security issues fixed:

- Does no longer compress debug sections in crt*.o files (bsc#1123710) - Fixes a concurrency problem in ldconfig (bsc#1117993) - Fixes a race condition in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)
Family:unixClass:patch
Status:Reference(s):1117993
1123710
1127223
1127308
1131330
CVE-2009-5155
CVE-2019-9169
SUSE-SU-2019:1877-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
  • AND Package Information
  • glibc-devel-32bit-2.26-13.24.1 is installed
  • OR glibc-devel-static-2.26-13.24.1 is installed
  • OR glibc-utils-2.26-13.24.1 is installed
  • BACK