Red Hat Security AdvisoryRHSA-2021:2998
glibc security update
Released 2021-08-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) glibc-2.17-292.el7_7.2, glibc-common-2.17-292.el7_7.2, glibc-devel-2.17-292.el7_7.2 +3
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) glibc-static-2.17-292.el7_7.2
- Red Hat Enterprise Linux Server EUS (v. 7.7) glibc-2.17-292.el7_7.2, glibc-2.17-292.el7_7.2.ppc, glibc-common-2.17-292.el7_7.2 +5
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) glibc-static-2.17-292.el7_7.2, glibc-static-2.17-292.el7_7.2.ppc
Fixes 2 records
Priority LOW 38
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-can…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02723 · Published 2020-12-05 · Partial fix CWE-787
Priority LOW 26
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d41…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00764 · Published 2020-03-04 · Partial fix CWE-787