Synopsis:          Moderate: glibc security and bug fix update
Advisory ID:       SLSA-2017:0680-1
Issue Date:        2017-03-21
CVE Numbers:       CVE-2015-8776
                   CVE-2015-8778
                   CVE-2014-9761
                   CVE-2015-8779
--

Security Fix(es):

* A stack overflow vulnerability was found in nan* functions that could
cause applications, which process long strings with the nan function, to
crash or, potentially, execute arbitrary code. (CVE-2014-9761)

* It was found that out-of-range time values passed to the strftime()
function could result in an out-of-bounds memory access. This could lead
to application crash or, potentially, information disclosure.
(CVE-2015-8776)

* An integer overflow vulnerability was found in hcreate() and hcreate_r()
functions which could result in an out-of-bounds memory access. This could
lead to application crash or, potentially, arbitrary code execution.
(CVE-2015-8778)

* A stack based buffer overflow vulnerability was found in the catopen()
function. An excessively long string passed to the function could cause it
to crash or, potentially, execute arbitrary code. (CVE-2015-8779)
--

SL6
  x86_64
    glibc-2.12-1.209.el6.i686.rpm
    glibc-2.12-1.209.el6.x86_64.rpm
    glibc-common-2.12-1.209.el6.x86_64.rpm
    glibc-debuginfo-2.12-1.209.el6.i686.rpm
    glibc-debuginfo-2.12-1.209.el6.x86_64.rpm
    glibc-debuginfo-common-2.12-1.209.el6.i686.rpm
    glibc-debuginfo-common-2.12-1.209.el6.x86_64.rpm
    glibc-devel-2.12-1.209.el6.i686.rpm
    glibc-devel-2.12-1.209.el6.x86_64.rpm
    glibc-headers-2.12-1.209.el6.x86_64.rpm
    glibc-utils-2.12-1.209.el6.x86_64.rpm
    nscd-2.12-1.209.el6.x86_64.rpm
    glibc-static-2.12-1.209.el6.i686.rpm
    glibc-static-2.12-1.209.el6.x86_64.rpm
  i386
    glibc-2.12-1.209.el6.i686.rpm
    glibc-common-2.12-1.209.el6.i686.rpm
    glibc-debuginfo-2.12-1.209.el6.i686.rpm
    glibc-debuginfo-common-2.12-1.209.el6.i686.rpm
    glibc-devel-2.12-1.209.el6.i686.rpm
    glibc-headers-2.12-1.209.el6.i686.rpm
    glibc-utils-2.12-1.209.el6.i686.rpm
    nscd-2.12-1.209.el6.i686.rpm
    glibc-static-2.12-1.209.el6.i686.rpm

- Scientific Linux Development Team