Red Hat Security AdvisoryRHSA-2010:0872
glibc security and bug fix update
Released 2010-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.7.el6_0.3, glibc-common-2.12-1.7.el6_0.3, glibc-devel-2.12-1.7.el6_0.3 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-2.12-1.7.el6_0.3, glibc-static-2.12-1.7.el6_0.3
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.7.el6_0.3, glibc-common-2.12-1.7.el6_0.3, glibc-devel-2.12-1.7.el6_0.3 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-2.12-1.7.el6_0.3, glibc-static-2.12-1.7.el6_0.3, nscd-2.12-1.7.el6_0.3
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.7.el6_0.3, glibc-2.12-1.7.el6_0.3.ppc, glibc-common-2.12-1.7.el6_0.3 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-2.12-1.7.el6_0.3, glibc-static-2.12-1.7.el6_0.3
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.7.el6_0.3, glibc-common-2.12-1.7.el6_0.3, glibc-devel-2.12-1.7.el6_0.3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-2.12-1.7.el6_0.3, glibc-static-2.12-1.7.el6_0.3
Fixes 2 records
Priority MEDIUM 46
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, wh…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.12255 · Published 2011-01-07 · Fixed CWE-264
Priority MEDIUM 43
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to g…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.10339 · Published 2011-01-07 · Fixed CWE-59
