Synopsis:          Moderate: glibc security and bug fix update

Advisory ID:       SLSA-2017:0680-1

Issue Date:        2017-03-21

CVE Numbers:       CVE-2015-8776

                   CVE-2015-8778

                   CVE-2014-9761

                   CVE-2015-8779

--



Security Fix(es):



* A stack overflow vulnerability was found in nan* functions that could

cause applications, which process long strings with the nan function, to

crash or, potentially, execute arbitrary code. (CVE-2014-9761)



* It was found that out-of-range time values passed to the strftime()

function could result in an out-of-bounds memory access. This could lead

to application crash or, potentially, information disclosure.

(CVE-2015-8776)



* An integer overflow vulnerability was found in hcreate() and hcreate_r()

functions which could result in an out-of-bounds memory access. This could

lead to application crash or, potentially, arbitrary code execution.

(CVE-2015-8778)



* A stack based buffer overflow vulnerability was found in the catopen()

function. An excessively long string passed to the function could cause it

to crash or, potentially, execute arbitrary code. (CVE-2015-8779)

--



SL6

  x86_64

    glibc-2.12-1.209.el6.i686.rpm

    glibc-2.12-1.209.el6.x86_64.rpm

    glibc-common-2.12-1.209.el6.x86_64.rpm

    glibc-debuginfo-2.12-1.209.el6.i686.rpm

    glibc-debuginfo-2.12-1.209.el6.x86_64.rpm

    glibc-debuginfo-common-2.12-1.209.el6.i686.rpm

    glibc-debuginfo-common-2.12-1.209.el6.x86_64.rpm

    glibc-devel-2.12-1.209.el6.i686.rpm

    glibc-devel-2.12-1.209.el6.x86_64.rpm

    glibc-headers-2.12-1.209.el6.x86_64.rpm

    glibc-utils-2.12-1.209.el6.x86_64.rpm

    nscd-2.12-1.209.el6.x86_64.rpm

    glibc-static-2.12-1.209.el6.i686.rpm

    glibc-static-2.12-1.209.el6.x86_64.rpm

  i386

    glibc-2.12-1.209.el6.i686.rpm

    glibc-common-2.12-1.209.el6.i686.rpm

    glibc-debuginfo-2.12-1.209.el6.i686.rpm

    glibc-debuginfo-common-2.12-1.209.el6.i686.rpm

    glibc-devel-2.12-1.209.el6.i686.rpm

    glibc-headers-2.12-1.209.el6.i686.rpm

    glibc-utils-2.12-1.209.el6.i686.rpm

    nscd-2.12-1.209.el6.i686.rpm

    glibc-static-2.12-1.209.el6.i686.rpm



- Scientific Linux Development Team