<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd">
<generator>
<oval:product_name>Oracle Errata System</oval:product_name>
<oval:product_version>Oracle Linux</oval:product_version>
<oval:schema_version>5.11</oval:schema_version>
<oval:timestamp>2024-09-21T18:53:10</oval:timestamp>
</generator>
<definitions>
<definition id="oval:com.oracle.elsa:def:20173601" version="501" class="patch">
<metadata>
<title>
ELSA-2017-3601:  glibc security update (IMPORTANT)
</title>
<affected family="unix">
<platform>Oracle Linux 7</platform>

</affected>
<reference source="elsa" ref_id="ELSA-2017-3601" ref_url="https://linux.oracle.com/errata/ELSA-2017-3601.html"/>

<description>
[2.17-196]
- Avoid large allocas in the dynamic linker (#1452721)

[2.17-195]
- Rounding issues on POWER (#1457177)

[2.17-194]
- Use a built-in list of system call names (#1439165)

[2.17-193]
- Inhibit FMA while compiling sqrt, pow (#1413638)

[2.17-192]
- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).

[2.17-191]
- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).

[2.17-190]
- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).

[2.17-189]
- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)

[2.17-188]
- Improve exp() and pow() performance in libm (#1409611)
- Add optimized strcmp and strncmp for IBM POWER9 hardware (#1320947)

[2.17-187]
- Define MSG_FASTOPEN. (#1387874)

[2.17-186]
- Update patch for glibc-rh1288613.patch to include tst-res_hconf_reorder
  in the list of tests to be built and run. (#1367804)

[2.17-185]
- math: Regenerate ULPs for POWER (#1385004)

[2.17-184]
- Correct s390 definition of SIZE_MAX (#1385003)

[2.17-183]
- Fix CVE-2015-8776 glibc: Segmentation fault caused by passing
  out-of-range data to strftime() (#1374658)

[2.17-182]
- Fix CVE-2015-8778: Integer overflow in hcreate and hcreate_r (#1374657)

[2.17-181]
- Fix rare case where calloc may not zero memory properly (#1430477)

[2.17-180]
- malloc: additional unlink hardening for non-small bins (#1326739)

[2.17-179]
- Add improvements and optimizations to take advantage of the new
  z13 processor design (#1380680)

[2.17-178]
- Backport the latest POWER8 performance optimizations (#1385004)

[2.17-177]
- LD_POINTER_GUARD in the environment is not sanitized (#1383951)

[2.17-176]
- Fix cmpli usage in power6 memset. (#1418997)

[2.17-175]
- Avoid accessing user-controlled stdio locks in forked child (#1322544)

[2.17-174]
- Fix unbounded stack allocation in catopen function (#1374654)

[2.17-173]
- Fix unbounded stack allocation in nan* functions (#1374652)

[2.17-172]
- Handle /var/cache/ldconfig/aux-cache corruption (#1325138)

[2.17-171]
- Make padding in struct sockaddr_storage explicit (#1338672)

[2.17-170]
- Add AF_VSOCK/PF_VSOCK, TCP_TIMESTAMP (#1417205)

[2.17-169]
- Define &lt;inttypes.h&gt; and &lt;stdint.h&gt; macros unconditionally (#1318877)

[2.17-168]
- Backport the groups merging feature (#1298975)

[2.17-167]
- Fix sunrpc UDP client timeout handling (#1228114)

[2.17-166]
- Add 'sss' service to the automount database in nsswitch.conf (#1392540)

[2.17-165]
- Fix use of uninitialized data in getaddrinfo with nscd (#1324568)
- Remove the 'power8' AT_PLATFORM directory (#1404435)
- Fix profil on aarch64 (#1144516)

[2.17-164]
- Fix TOC stub on powerpc64 clone() (#1398244)

[2.17-163]
- stdio buffer auto-tuning should reject large buffer sizes (#988869)

[2.17-162]
- Backport support/ subdirectory from upstream (#1418978)
- Fix deadlock between fork, malloc, flush (NULL) (#906468)

[2.17-161]
- Fix tst-cancel17/tst-cancelx17 was sometimes segfaulting.
  Wait for the read to finish before returning. (#1337242)

[2.17-160]
- Add internal-only support for O_TMPFILE (#1330705)

[2.17-158]
- Do not set initgroups in default nsswitch.conf (#1366569)
- nss_db: Request larger buffers for long group entries (#1318890)
- nss_db: Fix get*ent crash without preceding set*ent (#1213603)
- nss_db: Fix endless loop in services database processing (#1370630)
</description>
<!--
 ~~~~~~~~~~~~~~~~~~~~   advisory details   ~~~~~~~~~~~~~~~~~~~ 
-->
<advisory>
<severity>IMPORTANT</severity>
<rights>Copyright 2017 Oracle, Inc.</rights>
<issued date="2017-08-09"/>

<affected_cpe_list>
<cpe>cpe:/a:oracle:linux:7::userspace_ksplice</cpe>
</affected_cpe_list>
</advisory>
</metadata>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601001" comment="Oracle Linux 7 is installed"/>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601002" comment="Oracle Linux arch is x86_64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601003" comment="glibc is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601004" comment="glibc is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601005" comment="glibc is ksplice-based"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601006" comment="glibc-common is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601007" comment="glibc-common is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601008" comment="glibc-common is ksplice-based"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601009" comment="glibc-devel is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601010" comment="glibc-devel is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601011" comment="glibc-devel is ksplice-based"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601012" comment="glibc-headers is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601013" comment="glibc-headers is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601014" comment="glibc-headers is ksplice-based"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601015" comment="glibc-static is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601016" comment="glibc-static is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601017" comment="glibc-static is ksplice-based"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601018" comment="glibc-utils is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601019" comment="glibc-utils is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601020" comment="glibc-utils is ksplice-based"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20173601021" comment="nscd is earlier than 2:2.17-196.ksplice1.el7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601022" comment="nscd is signed with the Oracle Linux 7 key"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20173601023" comment="nscd is ksplice-based"/>
</criteria>
</criteria>
</criteria>
</criteria>

</definition>
</definitions>
<!--
 ~~~~~~~~~~~~~~~~~~~~~   rpminfo tests   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<tests>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601001"  version="501" comment="Oracle Linux 7 is installed" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601001" />
<state state_ref="oval:com.oracle.elsa:ste:20173601003" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601002"  version="501" comment="Oracle Linux arch is x86_64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601001" />
<state state_ref="oval:com.oracle.elsa:ste:20173601004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601003"  version="501" comment="glibc is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601002" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601004"  version="501" comment="glibc is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601002" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601005"  version="501" comment="glibc is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601002" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601006"  version="501" comment="glibc-common is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601003" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601007"  version="501" comment="glibc-common is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601003" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601008"  version="501" comment="glibc-common is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601003" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601009"  version="501" comment="glibc-devel is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601004" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601010"  version="501" comment="glibc-devel is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601004" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601011"  version="501" comment="glibc-devel is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601004" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601012"  version="501" comment="glibc-headers is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601005" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601013"  version="501" comment="glibc-headers is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601005" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601014"  version="501" comment="glibc-headers is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601005" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601015"  version="501" comment="glibc-static is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601006" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601016"  version="501" comment="glibc-static is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601006" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601017"  version="501" comment="glibc-static is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601006" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601018"  version="501" comment="glibc-utils is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601007" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601019"  version="501" comment="glibc-utils is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601007" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601020"  version="501" comment="glibc-utils is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601007" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601021"  version="501" comment="nscd is earlier than 2:2.17-196.ksplice1.el7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601008" />
<state state_ref="oval:com.oracle.elsa:ste:20173601005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601022"  version="501" comment="nscd is signed with the Oracle Linux 7 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601008" />
<state state_ref="oval:com.oracle.elsa:ste:20173601001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20173601023"  version="501" comment="nscd is ksplice-based" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20173601008" />
<state state_ref="oval:com.oracle.elsa:ste:20173601002" />
</rpminfo_test>

</tests>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo objects   ~~~~~~~~~~~~~~~~~~~~ 
-->
<objects>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601004" version="501">
<name>glibc-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601007" version="501">
<name>glibc-utils</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601001" version="501">
<name>oraclelinux-release</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601002" version="501">
<name>glibc</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601008" version="501">
<name>nscd</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601005" version="501">
<name>glibc-headers</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601006" version="501">
<name>glibc-static</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20173601003" version="501">
<name>glibc-common</name>
</rpminfo_object>

</objects>
<states>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo states   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20173601001" version="501">
<signature_keyid operation="equals">72f97b74ec551f03</signature_keyid>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20173601002" version="501">
<release operation="pattern match">ksplice</release>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20173601003" version="501">
<version operation="pattern match">^7</version>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20173601004" version="501">
<arch operation="pattern match">x86_64</arch>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20173601005" version="501">
<evr datatype="evr_string" operation="less than">2:2.17-196.ksplice1.el7</evr>
</rpminfo_state>

</states>
</oval_definitions>
