ELSA-2024-3588

ELSA-2024-3588 - glibc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-06-05

Description

[2.17-326.3]
- Forward-port Oracle patches to 2.17-326.3
Reviewed-by: Jose E. Marchesi

[2.17-326.3]
- nscd: Fix timeout type in netgroup cache (RHEL-34263)

[2.17-326.2]
- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules

[2.17-326.1]
- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)

Related CVEs

CVE-2024-33600

CVE-2024-2961

CVE-2024-33599

CVE-2024-33601

CVE-2024-33602

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	glibc-2.17-326.0.6.el7_9.3.src.rpm	d813113ebc809a2f5eb11c60ef871f602eda86f43d9074a580b856b64e1a2af9	ELSA-2024-12444	ol7_aarch64_latest
	glibc-2.17-326.0.6.el7_9.3.src.rpm	d813113ebc809a2f5eb11c60ef871f602eda86f43d9074a580b856b64e1a2af9	ELSA-2024-12444	ol7_aarch64_optional_latest
	glibc-2.17-326.0.6.el7_9.3.src.rpm	d813113ebc809a2f5eb11c60ef871f602eda86f43d9074a580b856b64e1a2af9	ELSA-2024-12444	ol7_aarch64_u9_patch
	glibc-2.17-326.0.6.el7_9.3.aarch64.rpm	4019779b6ba45de5a26d36d83fc55269d9d61ca0f798b5d6f240efffb85d6dca	ELSA-2024-12444	ol7_aarch64_latest
	glibc-2.17-326.0.6.el7_9.3.aarch64.rpm	4019779b6ba45de5a26d36d83fc55269d9d61ca0f798b5d6f240efffb85d6dca	ELSA-2024-12444	ol7_aarch64_u9_patch
	glibc-common-2.17-326.0.6.el7_9.3.aarch64.rpm	566ac8383f7f3b1c6b2427a6c0aef7f38390f01fd4a68cbf3a9354d965ec6699	ELSA-2024-12444	ol7_aarch64_latest
	glibc-common-2.17-326.0.6.el7_9.3.aarch64.rpm	566ac8383f7f3b1c6b2427a6c0aef7f38390f01fd4a68cbf3a9354d965ec6699	ELSA-2024-12444	ol7_aarch64_u9_patch
	glibc-devel-2.17-326.0.6.el7_9.3.aarch64.rpm	d87af6d144b52c5a62ae5a9ead1355483d8bff5f395fced025e28923e047ae52	ELSA-2024-12444	ol7_aarch64_latest
	glibc-devel-2.17-326.0.6.el7_9.3.aarch64.rpm	d87af6d144b52c5a62ae5a9ead1355483d8bff5f395fced025e28923e047ae52	ELSA-2024-12444	ol7_aarch64_u9_patch
	glibc-headers-2.17-326.0.6.el7_9.3.aarch64.rpm	2e34e03a6c4b2397ebfed447f2be16691af353bc3cbc9c5f30afc61a1bd07105	ELSA-2024-12444	ol7_aarch64_latest
	glibc-headers-2.17-326.0.6.el7_9.3.aarch64.rpm	2e34e03a6c4b2397ebfed447f2be16691af353bc3cbc9c5f30afc61a1bd07105	ELSA-2024-12444	ol7_aarch64_u9_patch
	glibc-static-2.17-326.0.6.el7_9.3.aarch64.rpm	5bd8896ef31eed83c4678beab202d413240fbb7589864052d284b8e5739e41fe	ELSA-2024-12444	ol7_aarch64_optional_latest
	glibc-utils-2.17-326.0.6.el7_9.3.aarch64.rpm	fb4346892b4968d03601e9a34ab7140228d47c7e6f49a516ec388b0f2ee55790	ELSA-2024-12444	ol7_aarch64_latest
	glibc-utils-2.17-326.0.6.el7_9.3.aarch64.rpm	fb4346892b4968d03601e9a34ab7140228d47c7e6f49a516ec388b0f2ee55790	ELSA-2024-12444	ol7_aarch64_u9_patch
	nscd-2.17-326.0.6.el7_9.3.aarch64.rpm	f98072d46caa96218cfb3e794a20e7b1c4b2f431ced102c02cd1d08373bfe321	ELSA-2024-12444	ol7_aarch64_latest
	nscd-2.17-326.0.6.el7_9.3.aarch64.rpm	f98072d46caa96218cfb3e794a20e7b1c4b2f431ced102c02cd1d08373bfe321	ELSA-2024-12444	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	glibc-2.17-326.0.9.el7_9.3.src.rpm	4e85bee85f1da819ed75d797efcb392e1d8a0df42d479aa2c8db08f59ead3359	ELSA-2024-12444	ol7_x86_64_latest
	glibc-2.17-326.0.9.el7_9.3.src.rpm	4e85bee85f1da819ed75d797efcb392e1d8a0df42d479aa2c8db08f59ead3359	ELSA-2024-12444	ol7_x86_64_optional_latest
	glibc-2.17-326.0.9.el7_9.3.src.rpm	4e85bee85f1da819ed75d797efcb392e1d8a0df42d479aa2c8db08f59ead3359	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-2.17-326.0.9.el7_9.3.i686.rpm	09e2257d38e285d1298bc7b932309c07ddc75c0c82e1f4e16a18fb9d640a6704	ELSA-2024-12444	ol7_x86_64_latest
	glibc-2.17-326.0.9.el7_9.3.i686.rpm	09e2257d38e285d1298bc7b932309c07ddc75c0c82e1f4e16a18fb9d640a6704	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.25.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.26.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.27.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.28.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.29.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.30.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.31.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.32.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	exadata_dbserver_22.1.33.0.0_x86_64_base
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	ol7_x86_64_latest
	glibc-2.17-326.0.9.el7_9.3.x86_64.rpm	e2260c78238c370f4fdcdfa9ab63b6064c4e939ffd24576b5e9a148c60a40b55	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.25.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.26.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.27.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.28.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.29.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.30.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.31.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.32.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	exadata_dbserver_22.1.33.0.0_x86_64_base
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	ol7_x86_64_latest
	glibc-common-2.17-326.0.9.el7_9.3.x86_64.rpm	cd6267406f0780f6c7956241c3f05aeb4342e1eeb7a2104ab89905408e44fc49	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-devel-2.17-326.0.9.el7_9.3.i686.rpm	88d950cad0d9c65441fafd0508c06f83261aa08d500260b715dbbc0e86064430	ELSA-2024-12444	ol7_x86_64_latest
	glibc-devel-2.17-326.0.9.el7_9.3.i686.rpm	88d950cad0d9c65441fafd0508c06f83261aa08d500260b715dbbc0e86064430	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.25.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.26.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.27.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.28.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.29.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.30.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.31.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.32.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	exadata_dbserver_22.1.33.0.0_x86_64_base
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	ol7_x86_64_latest
	glibc-devel-2.17-326.0.9.el7_9.3.x86_64.rpm	0975130b4d5f74bc86575639e3e8dfdd503347875ca6d5387f6fe0c764ba2a72	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.25.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.26.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.27.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.28.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.29.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.30.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.31.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.32.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	exadata_dbserver_22.1.33.0.0_x86_64_base
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	ol7_x86_64_latest
	glibc-headers-2.17-326.0.9.el7_9.3.x86_64.rpm	ba20a76dfe259de6fb5c69f3f3c60cd41334411e73828e9277a90855d65e4211	ELSA-2024-12444	ol7_x86_64_u9_patch
	glibc-static-2.17-326.0.9.el7_9.3.i686.rpm	306f5324269287d7a55a7d7e3ef579242a78ad16d0796cbc68cd49d33500be45	ELSA-2024-12444	ol7_x86_64_optional_latest
	glibc-static-2.17-326.0.9.el7_9.3.x86_64.rpm	deb9657edc3e6b2bc21f6d28883d1433fe0ba802ad299d6b82e4ba009706f1b5	ELSA-2024-12444	ol7_x86_64_optional_latest
	glibc-utils-2.17-326.0.9.el7_9.3.x86_64.rpm	496bec35857fa5778d76cf6d1625b5abe90497ec6ac2f877b24f4f46020ba299	ELSA-2024-12444	ol7_x86_64_latest
	glibc-utils-2.17-326.0.9.el7_9.3.x86_64.rpm	496bec35857fa5778d76cf6d1625b5abe90497ec6ac2f877b24f4f46020ba299	ELSA-2024-12444	ol7_x86_64_u9_patch
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.25.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.26.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.27.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.28.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.29.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.30.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.31.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.32.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	exadata_dbserver_22.1.33.0.0_x86_64_base
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	ol7_x86_64_latest
	nscd-2.17-326.0.9.el7_9.3.x86_64.rpm	caa27f2cefb3177ec7a2c9fe104860c2a1500b8c088154fdfea26583d274f4b6	ELSA-2024-12444	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team