ELSA-2016-3516
ELSA-2016-3516: glibc security update (CRITICAL)
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut Oracle.
Beschreibung
[2.12-1.166.7] - Update fix for CVE-2015-7547 (#1296028). [2.12-1.166.6] - Create helper threads with enough stack for POSIX AIO and timers (#1301625). [2.12-1.166.5] - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028). [2.12-1.166.4] - Support loading more libraries with static TLS (#1291270).
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Oracle Linux 6 | glibc, glibc-common, glibc-devel und 4 weitere | 2:2.12-1.166.ksplice1.el6_7.7 |
Alle 7 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Oracle Linux 6 | glibc | 2:2.12-1.166.ksplice1.el6_7.7 |
| Oracle Linux 6 | glibc-common | 2:2.12-1.166.ksplice1.el6_7.7 |
| Oracle Linux 6 | glibc-devel | 2:2.12-1.166.ksplice1.el6_7.7 |
| Oracle Linux 6 | glibc-headers | 2:2.12-1.166.ksplice1.el6_7.7 |
| Oracle Linux 6 | glibc-static | 2:2.12-1.166.ksplice1.el6_7.7 |
| Oracle Linux 6 | glibc-utils | 2:2.12-1.166.ksplice1.el6_7.7 |
| Oracle Linux 6 | nscd | 2:2.12-1.166.ksplice1.el6_7.7 |