ELSA-2016-3515

ELSA-2016-3515 - glibc security update

Type:	SECURITY
Severity:	CRITICAL
Release Date:	2016-02-16

Description

[2.17-106.0.1.4]
- Remove strstr and strcasestr implementations using sse4.2 instructions.
- Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
1818483b15d22016b0eae41d37ee91cc87b37510 backported.

[2.17-106.4]
- Revert problematic libresolv change, not needed for the
CVE-2015-7547 fix (#1296030).

[2.17-106.3]
- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296030).
- Fix madvise performance issues (#1298930).
- Avoid 'monstartup: out of memory' error on powerpc64le (#1298956).

[2.17-106.2]
- Fix CVE-2015-5229: calloc() may return non-zero memory (#1296453).

Related CVEs

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	glibc-2.17-106.0.1.ksplice1.el7_2.4.src.rpm	209efdf9ee6566358c2cb5035764c1c3	ELBA-2021-9262
	glibc-2.17-106.0.1.ksplice1.el7_2.4.i686.rpm	afddc2e62a14d5f5831dc3bdce4cca0d	ELBA-2021-9262
	glibc-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	d117144be7daf0cf58608ceacdcb0ec6	ELBA-2021-9262
	glibc-common-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	a6604cdc340de91d8524d20688733162	ELBA-2021-9262
	glibc-devel-2.17-106.0.1.ksplice1.el7_2.4.i686.rpm	70ac5d6fe31aa1c78f9f145d1aef933e	ELBA-2021-9262
	glibc-devel-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	dae88028811b897fdf75aabcace52d7b	ELBA-2021-9262
	glibc-headers-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	57d35d009a23b428f00fb9d0c6ca2a6c	ELBA-2021-9262
	glibc-static-2.17-106.0.1.ksplice1.el7_2.4.i686.rpm	75a6ed68a09f7c3ccd79c7b89d5a1b99	ELBA-2021-9262
	glibc-static-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	87b72288ce6d2a647bf64888552e8f16	ELBA-2021-9262
	glibc-utils-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	ac44d65991193dd93637be50129a3d90	ELBA-2021-9262
	nscd-2.17-106.0.1.ksplice1.el7_2.4.x86_64.rpm	cfceeb4beba63785f0aa653916c0edac	ELBA-2021-9262

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team