Red Hat Security AdvisoryRHSA-2011:1526
glibc security, bug fix, and enhancement update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.47.el6, glibc-common-2.12-1.47.el6, glibc-devel-2.12-1.47.el6 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-2.12-1.47.el6, glibc-static-2.12-1.47.el6
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.47.el6, glibc-common-2.12-1.47.el6, glibc-devel-2.12-1.47.el6 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-2.12-1.47.el6, glibc-static-2.12-1.47.el6
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.47.el6, glibc-2.12-1.47.el6.ppc, glibc-common-2.12-1.47.el6 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-2.12-1.47.el6, glibc-static-2.12-1.47.el6, glibc-static-2.12-1.47.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.47.el6, glibc-common-2.12-1.47.el6, glibc-devel-2.12-1.47.el6 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-2.12-1.47.el6, glibc-static-2.12-1.47.el6
Fixes 2 records
Priority LOW 31
ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00522 · Published 2011-03-30 · Fixed CWE-264
Priority LOW 16
The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corru…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00421 · Published 2011-04-10 · Fixed CWE-16