openSUSE-SU-2021:0358-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0358-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2021:0358-1
- Related
- Published
- 2021-02-27T21:33:28Z
- Modified
- 2021-02-27T21:33:28Z
- Summary
- Security update for glibc
- Details
-
This update for glibc fixes the following issues:
- Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973)
- x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)
- iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
This update was imported from the SUSE:SLE-15:Update update project.
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WMNRZB427QFJOPYP4EA4KBZOTT622NY3/
- https://bugzilla.suse.com/1178386
- https://bugzilla.suse.com/1179694
- https://bugzilla.suse.com/1179721
- https://bugzilla.suse.com/1180038
- https://bugzilla.suse.com/1181505
- https://bugzilla.suse.com/1182117
- https://www.suse.com/security/cve/CVE-2019-25013
- https://www.suse.com/security/cve/CVE-2020-27618
- https://www.suse.com/security/cve/CVE-2020-29562
- https://www.suse.com/security/cve/CVE-2020-29573
- https://www.suse.com/security/cve/CVE-2021-3326
Affected packages
openSUSE:Leap 15.2 / glibc
Package
- Name
- glibc
- Purl
- pkg:rpm/opensuse/glibc&distro=openSUSE%20Leap%2015.2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.26-lp152.26.6.1
Ecosystem specific
{
"binaries": [
{
"glibc-extra": "2.26-lp152.26.6.1",
"glibc-html": "2.26-lp152.26.6.1",
"glibc-utils-32bit": "2.26-lp152.26.6.1",
"glibc-info": "2.26-lp152.26.6.1",
"glibc-i18ndata": "2.26-lp152.26.6.1",
"glibc-locale": "2.26-lp152.26.6.1",
"glibc-devel-32bit": "2.26-lp152.26.6.1",
"glibc-devel-static-32bit": "2.26-lp152.26.6.1",
"glibc": "2.26-lp152.26.6.1",
"glibc-devel-static": "2.26-lp152.26.6.1",
"glibc-32bit": "2.26-lp152.26.6.1",
"glibc-utils": "2.26-lp152.26.6.1",
"glibc-devel": "2.26-lp152.26.6.1",
"glibc-profile": "2.26-lp152.26.6.1",
"nscd": "2.26-lp152.26.6.1",
"glibc-locale-base": "2.26-lp152.26.6.1",
"glibc-profile-32bit": "2.26-lp152.26.6.1",
"glibc-locale-base-32bit": "2.26-lp152.26.6.1"
}
]
}
openSUSE:Leap 15.2 / glibc-testsuite-src
Package
- Name
- glibc-testsuite-src
- Purl
- pkg:rpm/opensuse/glibc-testsuite-src&distro=openSUSE%20Leap%2015.2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.26-lp152.26.6.1
Ecosystem specific
{
"binaries": [
{
"glibc-extra": "2.26-lp152.26.6.1",
"glibc-html": "2.26-lp152.26.6.1",
"glibc-utils-32bit": "2.26-lp152.26.6.1",
"glibc-info": "2.26-lp152.26.6.1",
"glibc-i18ndata": "2.26-lp152.26.6.1",
"glibc-locale": "2.26-lp152.26.6.1",
"glibc-devel-32bit": "2.26-lp152.26.6.1",
"glibc-devel-static-32bit": "2.26-lp152.26.6.1",
"glibc": "2.26-lp152.26.6.1",
"glibc-devel-static": "2.26-lp152.26.6.1",
"glibc-32bit": "2.26-lp152.26.6.1",
"glibc-utils": "2.26-lp152.26.6.1",
"glibc-devel": "2.26-lp152.26.6.1",
"glibc-profile": "2.26-lp152.26.6.1",
"nscd": "2.26-lp152.26.6.1",
"glibc-locale-base": "2.26-lp152.26.6.1",
"glibc-profile-32bit": "2.26-lp152.26.6.1",
"glibc-locale-base-32bit": "2.26-lp152.26.6.1"
}
]
}