Synopsis:          Important: glibc security update
Advisory ID:       SLSA-2014:1110-1
Issue Date:        2014-08-29
CVE Numbers:       CVE-2014-0475
                   CVE-2014-5119
--

An off-by-one heap-based buffer overflow flaw was found in glibc's
internal __gconv_translit_find() function. An attacker able to make an
application call the iconv_open() function with a specially crafted
argument could possibly use this flaw to execute arbitrary code with the
privileges of that application. (CVE-2014-5119)

A directory traveral flaw was found in the way glibc loaded locale files.
An attacker able to make an application use a specially crafted locale
name value (for example, specified in an LC_* environment variable) could
possibly use this flaw to execute arbitrary code with the privileges of
that application. (CVE-2014-0475)
--

SL5
  x86_64
    glibc-2.5-118.el5_10.3.i686.rpm
    glibc-2.5-118.el5_10.3.x86_64.rpm
    glibc-common-2.5-118.el5_10.3.x86_64.rpm
    glibc-debuginfo-2.5-118.el5_10.3.i386.rpm
    glibc-debuginfo-2.5-118.el5_10.3.i686.rpm
    glibc-debuginfo-2.5-118.el5_10.3.x86_64.rpm
    glibc-debuginfo-common-2.5-118.el5_10.3.i386.rpm
    glibc-devel-2.5-118.el5_10.3.i386.rpm
    glibc-devel-2.5-118.el5_10.3.x86_64.rpm
    glibc-headers-2.5-118.el5_10.3.x86_64.rpm
    glibc-utils-2.5-118.el5_10.3.x86_64.rpm
    nscd-2.5-118.el5_10.3.x86_64.rpm
  i386
    glibc-2.5-118.el5_10.3.i386.rpm
    glibc-2.5-118.el5_10.3.i686.rpm
    glibc-common-2.5-118.el5_10.3.i386.rpm
    glibc-debuginfo-2.5-118.el5_10.3.i386.rpm
    glibc-debuginfo-2.5-118.el5_10.3.i686.rpm
    glibc-debuginfo-common-2.5-118.el5_10.3.i386.rpm
    glibc-devel-2.5-118.el5_10.3.i386.rpm
    glibc-headers-2.5-118.el5_10.3.i386.rpm
    glibc-utils-2.5-118.el5_10.3.i386.rpm
    nscd-2.5-118.el5_10.3.i386.rpm
SL6
  x86_64
    glibc-2.12-1.132.el6_5.4.i686.rpm
    glibc-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-common-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-debuginfo-2.12-1.132.el6_5.4.i686.rpm
    glibc-debuginfo-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-debuginfo-common-2.12-1.132.el6_5.4.i686.rpm
    glibc-debuginfo-common-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-devel-2.12-1.132.el6_5.4.i686.rpm
    glibc-devel-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-headers-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-utils-2.12-1.132.el6_5.4.x86_64.rpm
    nscd-2.12-1.132.el6_5.4.x86_64.rpm
    glibc-static-2.12-1.132.el6_5.4.i686.rpm
    glibc-static-2.12-1.132.el6_5.4.x86_64.rpm
  i386
    glibc-2.12-1.132.el6_5.4.i686.rpm
    glibc-common-2.12-1.132.el6_5.4.i686.rpm
    glibc-debuginfo-2.12-1.132.el6_5.4.i686.rpm
    glibc-debuginfo-common-2.12-1.132.el6_5.4.i686.rpm
    glibc-devel-2.12-1.132.el6_5.4.i686.rpm
    glibc-headers-2.12-1.132.el6_5.4.i686.rpm
    glibc-utils-2.12-1.132.el6_5.4.i686.rpm
    nscd-2.12-1.132.el6_5.4.i686.rpm
    glibc-static-2.12-1.132.el6_5.4.i686.rpm

- Scientific Linux Development Team