Red Hat Security AdvisoryRHSA-2015:0092
glibc security update
Released 2015-01-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-55.el7_0.5, glibc-common-2.17-55.el7_0.5, glibc-devel-2.17-55.el7_0.5 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-55.el7_0.5
- Red Hat Enterprise Linux ComputeNode (v. 7) glibc-2.17-55.el7_0.5, glibc-common-2.17-55.el7_0.5, glibc-devel-2.17-55.el7_0.5 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-55.el7_0.5
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.149.el6_6.5, glibc-common-2.12-1.149.el6_6.5, glibc-devel-2.12-1.149.el6_6.5 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-static-2.12-1.149.el6_6.5
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.149.el6_6.5, glibc-common-2.12-1.149.el6_6.5, glibc-devel-2.12-1.149.el6_6.5 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-static-2.12-1.149.el6_6.5
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.149.el6_6.5, glibc-2.12-1.149.el6_6.5.ppc, glibc-common-2.12-1.149.el6_6.5 +5
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-55.el7_0.5, glibc-2.17-55.el7_0.5.ppc, glibc-common-2.17-55.el7_0.5 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-static-2.12-1.149.el6_6.5, glibc-static-2.12-1.149.el6_6.5.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-55.el7_0.5, glibc-static-2.17-55.el7_0.5.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.149.el6_6.5, glibc-common-2.12-1.149.el6_6.5, glibc-devel-2.12-1.149.el6_6.5 +3
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-55.el7_0.5, glibc-common-2.17-55.el7_0.5, glibc-devel-2.17-55.el7_0.5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-static-2.12-1.149.el6_6.5
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-55.el7_0.5
Fixes 1 record
Priority CRITICAL 87
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostb…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.94558 · Published 2015-01-28 · Fixed CWE-787
