Red Hat Security AdvisoryRHSA-2021:3315
glibc security and bug fix update
Released 2021-08-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.6) glibc-2.17-260.el7_6.9, glibc-common-2.17-260.el7_6.9, glibc-devel-2.17-260.el7_6.9 +3
- Red Hat Enterprise Linux Server E4S (v. 7.6) glibc-2.17-260.el7_6.9, glibc-common-2.17-260.el7_6.9, glibc-devel-2.17-260.el7_6.9 +3
- Red Hat Enterprise Linux Server Optional AUS (v. 7.6) glibc-static-2.17-260.el7_6.9
- Red Hat Enterprise Linux Server Optional E4S (v. 7.6) glibc-static-2.17-260.el7_6.9
- Red Hat Enterprise Linux Server Optional TUS (v. 7.6) glibc-static-2.17-260.el7_6.9
- Red Hat Enterprise Linux Server TUS (v. 7.6) glibc-2.17-260.el7_6.9, glibc-common-2.17-260.el7_6.9, glibc-devel-2.17-260.el7_6.9 +3
Fixes 2 records
Priority LOW 38
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-can…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02723 · Published 2020-12-05 · Partial fix CWE-787
Priority LOW 26
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d41…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00764 · Published 2020-03-04 · Partial fix CWE-787
