Red Hat Security AdvisoryRHSA-2018:1879
glibc security and bug fix update
Released 2018-06-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) glibc-2.12-1.212.el6, glibc-common-2.12-1.212.el6, glibc-devel-2.12-1.212.el6 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) glibc-static-2.12-1.212.el6
- Red Hat Enterprise Linux HPC Node (v. 6) glibc-2.12-1.212.el6, glibc-common-2.12-1.212.el6, glibc-devel-2.12-1.212.el6 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc-static-2.12-1.212.el6
- Red Hat Enterprise Linux Server (v. 6) glibc-2.12-1.212.el6, glibc-2.12-1.212.el6.ppc, glibc-common-2.12-1.212.el6 +5
- Red Hat Enterprise Linux Server Optional (v. 6) glibc-static-2.12-1.212.el6, glibc-static-2.12-1.212.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) glibc-2.12-1.212.el6, glibc-common-2.12-1.212.el6, glibc-devel-2.12-1.212.el6 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) glibc-static-2.12-1.212.el6
Fixes 2 records
Priority MEDIUM 47
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02801 · Published 2017-10-22 · Partial fix CWE-119
Priority MEDIUM 47
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator f…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02977 · Published 2017-10-20 · Partial fix CWE-119
