Synopsis:          Important: glibc security update
Advisory ID:       SLSA-2017:1480-1
Issue Date:        2017-06-19
CVE Numbers:       CVE-2017-1000366
--

Security Fix(es):

* A flaw was found in the way memory was being allocated on the stack for
user space binaries. If heap (or different memory region) and stack memory
regions were adjacent to each other, an attacker could use this flaw to
jump over the stack guard gap, cause controlled memory corruption on
process stack or the adjacent memory region, and thus increase their
privileges on the system. This is glibc-side mitigation which blocks
processing of LD_LIBRARY_PATH for programs running in secure-execution
mode and reduces the number of allocations performed by the processing of
LD_AUDIT, LD_PRELOAD, and LD_HWCAP_MASK, making successful exploitation of
this issue more difficult. (CVE-2017-1000366)
--

SL6
  x86_64
    glibc-2.12-1.209.el6_9.2.i686.rpm
    glibc-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-common-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-debuginfo-2.12-1.209.el6_9.2.i686.rpm
    glibc-debuginfo-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-debuginfo-common-2.12-1.209.el6_9.2.i686.rpm
    glibc-debuginfo-common-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-devel-2.12-1.209.el6_9.2.i686.rpm
    glibc-devel-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-headers-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-utils-2.12-1.209.el6_9.2.x86_64.rpm
    nscd-2.12-1.209.el6_9.2.x86_64.rpm
    glibc-static-2.12-1.209.el6_9.2.i686.rpm
    glibc-static-2.12-1.209.el6_9.2.x86_64.rpm
  i386
    glibc-2.12-1.209.el6_9.2.i686.rpm
    glibc-common-2.12-1.209.el6_9.2.i686.rpm
    glibc-debuginfo-2.12-1.209.el6_9.2.i686.rpm
    glibc-debuginfo-common-2.12-1.209.el6_9.2.i686.rpm
    glibc-devel-2.12-1.209.el6_9.2.i686.rpm
    glibc-headers-2.12-1.209.el6_9.2.i686.rpm
    glibc-utils-2.12-1.209.el6_9.2.i686.rpm
    nscd-2.12-1.209.el6_9.2.i686.rpm
    glibc-static-2.12-1.209.el6_9.2.i686.rpm

- Scientific Linux Development Team