ELSA-2013-1605

ELSA-2013-1605 - glibc security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2013-11-25

Description

[2.12-1.132]
- Revert the addition of gettimeofday vDSO function for ppc and ppc64 until
OPD VDSO function call issues are resolved (#1026533).

[2.12-1.131]
- Call gethostbyname4_r only for PF_UNSPEC (#1022022).

[2.12-1.130]
- Fix integer overflows in *valloc and memalign. (#1008310).

[2.12-1.129]
- Initialize res_hconf in nscd (#970090).

[2.12-1.128]
- Update previous patch for dcigettext.c and loadmsgcat.c (#834386).

[2.12-1.127]
- Save search paths before performing relro protection (#988931).

[2.12-1.126]
- Correctly name the 240-bit slow path sytemtap probe slowpow_p10 for slowpow (#905575).

[2.12-1.125]
- Align value of stacksize in nptl-init (#663641).

[2.12-1.124]
- Renamed release engineering directory from 'fedora' to `releng' (#903754).

[2.12-1.123]
- Backport GLIBC sched_getcpu and gettimeofday vDSO functions for ppc (#929302).
- Fall back to local DNS if resolv.conf does not define nameservers (#928318).
- Add systemtap probes to slowexp and slowpow (#905575).

[2.12-1.122]
- Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951213).
- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951213).

[2.12-1.121]
- Add netgroup cache support for nscd (#629823).

[2.12-1.120]
- Fix multiple nss_compat initgroups() bugs (#966778).
- Don't use simple lookup for AF_INET when AI_CANONNAME is set (#863384).

[2.12-1.119]
- Add MAP_HUGETLB and MAP_STACK support (#916986).
- Update translation for stale file handle error (#970776).

[2.12-1.118]
- Improve performance of _SC_NPROCESSORS_ONLN (#rh952422).
- Fix up _init in pt-initfini to accept arguments (#663641).

[2.12-1.117]
- Set reasonable limits on xdr requests to prevent memory leaks (#848748).

[2.12-1.116]
- Fix mutex locking for PI mutexes on spurious wake-ups on pthread condvars
(#552960).
- New environment variable GLIBC_PTHREAD_STACKSIZE to set thread stack size
(#663641).

[2.12-1.115]
- Improved handling of recursive calls in backtrace (#868808).

[2.12-1.114]
- The ttyname and ttyname_r functions on Linux now fall back to searching for
the tty file descriptor in /dev/pts or /dev if /proc is not available. This
allows creation of chroots without the procfs mounted on /proc. (#851470)

[2.12-1.113]
- Don't free rpath strings allocated during startup until after
ld.so is re-relocated. (#862094)

[2.12-1.112]
- Consistantly MANGLE/DEMANGLE function pointers.
Fix use after free in dcigettext.c (#834386).

[2.12-1.111]
- Change rounding mode only when necessary (#966775).

[2.12-1.110]
- Backport of code to allow incremental loading of library list (#886968).

[2.12-1.109]
- Fix loading of audit libraries when TLS is in use (#919562)

[2.12-1.108]
- Fix application of SIMD FP exception mask (#929388).

Related CVEs

CVE-2013-0242

CVE-2013-1914

CVE-2013-4332

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	glibc-2.12-1.132.el6.src.rpm	cc103cab0b883bfff27003c12e5b560c	ELBA-2019-4614
	glibc-2.12-1.132.el6.i686.rpm	03838ff318cb5800adefba782fa0eaa1	ELBA-2019-4614
	glibc-common-2.12-1.132.el6.i686.rpm	8b035622e578e66f357b90b759d19fde	ELBA-2019-4614
	glibc-devel-2.12-1.132.el6.i686.rpm	c6d912b9845b68186cf22aafed3218b2	ELBA-2019-4614
	glibc-headers-2.12-1.132.el6.i686.rpm	73177a4a1a53f09f03ce187cf51fde86	ELBA-2019-4614
	glibc-static-2.12-1.132.el6.i686.rpm	fca0a4687faa720eb11f3b602d2bc1de	ELBA-2019-4614
	glibc-utils-2.12-1.132.el6.i686.rpm	f836ea07126f977b31a6669c41300e0d	ELBA-2019-4614
	nscd-2.12-1.132.el6.i686.rpm	6b95d2e9f117b7474318d75e90bc618e	ELBA-2019-4614
Oracle Linux 6 (x86_64)	glibc-2.12-1.132.el6.src.rpm	cc103cab0b883bfff27003c12e5b560c	ELBA-2019-4614
	glibc-2.12-1.132.el6.i686.rpm	03838ff318cb5800adefba782fa0eaa1	ELBA-2019-4614
	glibc-2.12-1.132.el6.x86_64.rpm	4ad725ed87bae9d094ed5996a85468e3	ELBA-2019-4614
	glibc-common-2.12-1.132.el6.x86_64.rpm	1b195ffb68b493d504478a3b619febee	ELBA-2019-4614
	glibc-devel-2.12-1.132.el6.i686.rpm	c6d912b9845b68186cf22aafed3218b2	ELBA-2019-4614
	glibc-devel-2.12-1.132.el6.x86_64.rpm	175d30a79437cd4740039abaf6e45138	ELBA-2019-4614
	glibc-headers-2.12-1.132.el6.x86_64.rpm	726f681e5c3631ebe1e32862ca1b14d9	ELBA-2019-4614
	glibc-static-2.12-1.132.el6.i686.rpm	fca0a4687faa720eb11f3b602d2bc1de	ELBA-2019-4614
	glibc-static-2.12-1.132.el6.x86_64.rpm	59ae2b0c035e905860828334a80e3b97	ELBA-2019-4614
	glibc-utils-2.12-1.132.el6.x86_64.rpm	c0bdf775e4d150e7b95df50dd6b586ca	ELBA-2019-4614
	nscd-2.12-1.132.el6.x86_64.rpm	98ca0793b58d5a030608facf855e466d	ELBA-2019-4614

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team