ELSA-2016-0176

ELSA-2016-0176 - glibc security and bug fix update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2016-02-16

Description

[2.17-106.0.1.4]
- Remove strstr and strcasestr implementations using sse4.2 instructions.
- Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
1818483b15d22016b0eae41d37ee91cc87b37510 backported.

[2.17-106.4]
- Revert problematic libresolv change, not needed for the
CVE-2015-7547 fix (#1296030).

[2.17-106.3]
- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296030).
- Fix madvise performance issues (#1298930).
- Avoid 'monstartup: out of memory' error on powerpc64le (#1298956).

[2.17-106.2]
- Fix CVE-2015-5229: calloc() may return non-zero memory (#1296453).

Related CVEs

CVE-2015-7547

CVE-2015-5229

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	glibc-2.17-106.0.1.el7_2.4.src.rpm	2582bca3d5853a448034eb4300589a84f3ccd9bcd56cf2abfa7cbb4145b3a1b4	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-2.17-106.0.1.el7_2.4.src.rpm	2582bca3d5853a448034eb4300589a84f3ccd9bcd56cf2abfa7cbb4145b3a1b4	ELSA-2024-12444	ol7_x86_64_optional_archive
	glibc-2.17-106.0.1.el7_2.4.src.rpm	2582bca3d5853a448034eb4300589a84f3ccd9bcd56cf2abfa7cbb4145b3a1b4	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-2.17-106.0.1.el7_2.4.i686.rpm	0865f38fef43772ea3d7250f6257e04a1cc061f803f3dd286588a35d991bfb37	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-2.17-106.0.1.el7_2.4.i686.rpm	0865f38fef43772ea3d7250f6257e04a1cc061f803f3dd286588a35d991bfb37	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-2.17-106.0.1.el7_2.4.x86_64.rpm	0ddbd110e2712cc2ddf174a1c7aee0f461051c924916bf9f7af3c0760c677e99	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-2.17-106.0.1.el7_2.4.x86_64.rpm	0ddbd110e2712cc2ddf174a1c7aee0f461051c924916bf9f7af3c0760c677e99	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-common-2.17-106.0.1.el7_2.4.x86_64.rpm	ef2b0c1f28ae5a1f7012620caaaa2316030ba6ac196e81a77d79f6b2989e9ac7	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-common-2.17-106.0.1.el7_2.4.x86_64.rpm	ef2b0c1f28ae5a1f7012620caaaa2316030ba6ac196e81a77d79f6b2989e9ac7	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-devel-2.17-106.0.1.el7_2.4.i686.rpm	fa70fe681f6a80b9f1e5ed994506ff2d5631a58ff746ad7dfdc927674abfcd14	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-devel-2.17-106.0.1.el7_2.4.i686.rpm	fa70fe681f6a80b9f1e5ed994506ff2d5631a58ff746ad7dfdc927674abfcd14	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-devel-2.17-106.0.1.el7_2.4.x86_64.rpm	2e62db8e361ce64ea34a6d5291be048f50949a5bab9373a8297fd5b468699dfc	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-devel-2.17-106.0.1.el7_2.4.x86_64.rpm	2e62db8e361ce64ea34a6d5291be048f50949a5bab9373a8297fd5b468699dfc	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-headers-2.17-106.0.1.el7_2.4.x86_64.rpm	246328519e6e91016227f6154ce945a0d45c875ca13d9ff096f6bc73ff2c56ee	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-headers-2.17-106.0.1.el7_2.4.x86_64.rpm	246328519e6e91016227f6154ce945a0d45c875ca13d9ff096f6bc73ff2c56ee	ELSA-2024-12444	ol7_x86_64_u2_patch
	glibc-static-2.17-106.0.1.el7_2.4.i686.rpm	4dd6fa9069b6929c9d831b25da129ecfa0765d0f894cf4cfbeaafb5d53c84179	ELSA-2024-12444	ol7_x86_64_optional_archive
	glibc-static-2.17-106.0.1.el7_2.4.x86_64.rpm	5a5a715281583ba60ba3973043a1266f89304b967567dcbc22b69cc9a077b3f8	ELSA-2024-12444	ol7_x86_64_optional_archive
	glibc-utils-2.17-106.0.1.el7_2.4.x86_64.rpm	4ab21f57ce89fa4ba1f668f9544a667588a1ce7578cc04d5e0ee3f5f2ebfc2f8	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-utils-2.17-106.0.1.el7_2.4.x86_64.rpm	4ab21f57ce89fa4ba1f668f9544a667588a1ce7578cc04d5e0ee3f5f2ebfc2f8	ELSA-2024-12444	ol7_x86_64_u2_patch
	nscd-2.17-106.0.1.el7_2.4.x86_64.rpm	ce3df5831459f3c4c13eced790ec390d22b615b159e7b6c82e0cb452cc61f2bb	ELSA-2024-12444	ol7_x86_64_latest_archive
	nscd-2.17-106.0.1.el7_2.4.x86_64.rpm	ce3df5831459f3c4c13eced790ec390d22b615b159e7b6c82e0cb452cc61f2bb	ELSA-2024-12444	ol7_x86_64_u2_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team