Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2015-8985: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing. CVE-2009-5155: In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
Fixed packages 201
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | glibc | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-all-langpacks | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-benchtests | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-common | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-debuginfo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-debuginfo-common | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-devel | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-headers | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-aa | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-af | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ak | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-am | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-an | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-anp | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ar | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-as | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ast | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ayc | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-az | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-be | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bem | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ber | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bg | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bhb | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bho | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-br | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-brx | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bs | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-byn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ca | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ce | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-chr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cmn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-crh | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cs | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-csb | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cv | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cy | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-da | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-de | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-doi | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-dv | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-dz | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-el | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-en | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-eo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-es | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-et | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-eu | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fa | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ff | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fi | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fil | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fur | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fy | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ga | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gd | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gez | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gu | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gv | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ha | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hak | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-he | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hi | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hne | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hsb | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ht | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hu | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hy | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ia | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-id | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ig | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ik | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-is | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-it | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-iu | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ja | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ka | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kk | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-km | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ko | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kok | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ks | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ku | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kw | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ky | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lb | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lg | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-li | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lij | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ln | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lt | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lv | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lzh | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mag | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mai | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mg | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mhr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mi | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mk | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ml | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mni | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ms | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mt | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-my | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nan | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nb | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nds | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ne | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nhn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-niu | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nso | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-oc | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-om | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-or | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-os | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pa | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pap | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ps | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pt | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-quz | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-raj | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ro | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ru | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-rw | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sa | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sat | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sc | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sd | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-se | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sgs | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-shs | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-si | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sid | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sk | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-so | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sq | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ss | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-st | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sv | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sw | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-szl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ta | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tcy | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-te | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tg | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-th | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-the | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ti | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tig | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tk | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tl | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tn | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tr | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ts | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tt | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ug | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-uk | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-unm | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ur | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-uz | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ve | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-vi | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wa | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wae | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wal | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-xh | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-yi | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-yo | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-yue | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-zh | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-langpack-zu | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-locale-source | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-minimal-langpack | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-nss-devel | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-static | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | glibc-utils | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | libcrypt | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | libcrypt-nss | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | nscd | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | nss_db | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | nss_hesiod | 0:2.26-62.amzn2 |
| Amazon Linux · 2 | nss_nis | 0:2.26-62.amzn2 |
Vulnerabilities 2
-
Unscored —
In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which a…
-
Unscored —
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a den…