ELSA-2016-0176

ELSA-2016-0176 - glibc security and bug fix update

Type:	SECURITY
Severity:	CRITICAL
Release Date:	2016-02-16

Description

[2.17-106.0.1.4]
- Remove strstr and strcasestr implementations using sse4.2 instructions.
- Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
1818483b15d22016b0eae41d37ee91cc87b37510 backported.

[2.17-106.4]
- Revert problematic libresolv change, not needed for the
CVE-2015-7547 fix (#1296030).

[2.17-106.3]
- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296030).
- Fix madvise performance issues (#1298930).
- Avoid 'monstartup: out of memory' error on powerpc64le (#1298956).

[2.17-106.2]
- Fix CVE-2015-5229: calloc() may return non-zero memory (#1296453).

Related CVEs

CVE-2015-7547

CVE-2015-5229

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	glibc-2.17-106.0.1.el7_2.4.src.rpm	231912dabe957ef7c0f47a60723b9745	ELBA-2021-9262
	glibc-2.17-106.0.1.el7_2.4.i686.rpm	aa287092f2edff95e0593f31335d55b6	ELBA-2021-9262
	glibc-2.17-106.0.1.el7_2.4.x86_64.rpm	e9956bbdb60465e3867dd584b706466f	ELBA-2021-9262
	glibc-common-2.17-106.0.1.el7_2.4.x86_64.rpm	32c53d9b62721d33b7dcec4a57ffb315	ELBA-2021-9262
	glibc-devel-2.17-106.0.1.el7_2.4.i686.rpm	9434270dc7f5054b2ae53bef4b118377	ELBA-2021-9262
	glibc-devel-2.17-106.0.1.el7_2.4.x86_64.rpm	06d566f4a66190775b07e8c30cdace4c	ELBA-2021-9262
	glibc-headers-2.17-106.0.1.el7_2.4.x86_64.rpm	c80b71f6c16c5b93d2af76541e119aeb	ELBA-2021-9262
	glibc-static-2.17-106.0.1.el7_2.4.i686.rpm	fba098782885d4531fd0592622c7fe6e	ELBA-2021-9262
	glibc-static-2.17-106.0.1.el7_2.4.x86_64.rpm	05911021a224606b63bec1c7ba8f2f1f	ELBA-2021-9262
	glibc-utils-2.17-106.0.1.el7_2.4.x86_64.rpm	d3df959b889028a49e179c048c75706b	ELBA-2021-9262
	nscd-2.17-106.0.1.el7_2.4.x86_64.rpm	ab704eb417ecff1b0f8486eb6c1c42d0	ELBA-2021-9262

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team