Red Hat Security AdvisoryRHSA-2021:0348
glibc security and bug fix update
Released 2021-02-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-322.el7_9, glibc-common-2.17-322.el7_9, glibc-devel-2.17-322.el7_9 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-322.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-322.el7_9
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-322.el7_9, glibc-2.17-322.el7_9.ppc, glibc-common-2.17-322.el7_9 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-322.el7_9, glibc-static-2.17-322.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-322.el7_9, glibc-common-2.17-322.el7_9, glibc-devel-2.17-322.el7_9 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-322.el7_9
Fixes 3 records
Priority LOW 38
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-can…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02723 · Published 2020-12-05 · Partial fix CWE-787
Priority LOW 33
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03565 · Published 2021-01-04 · Partial fix CWE-125
Priority LOW 26
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d41…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00764 · Published 2020-03-04 · Partial fix CWE-787
