Skip to content
OpenAdvisories
High ELSA-2014-1110 2 CVEs

Important: glibc security update (Oracle Linux 7)

Published Aug 29, 2014 · Updated Aug 29, 2014

Ecosystem: Oracle Linux

Summary

[2.12-1.132.4]
- Remove gconv transliteration loadable modules support (CVE-2014-5119,
- _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 glibc 0:2.17-55.0.4.el7_0.1
Oracle Linux · 7 glibc-common 0:2.17-55.0.4.el7_0.1
Oracle Linux · 7 glibc-devel 0:2.17-55.0.4.el7_0.1
Oracle Linux · 7 glibc-headers 0:2.17-55.0.4.el7_0.1
Oracle Linux · 7 glibc-static 0:2.17-55.0.4.el7_0.1
Oracle Linux · 7 glibc-utils 0:2.17-55.0.4.el7_0.1
Oracle Linux · 7 nscd 0:2.17-55.0.4.el7_0.1

Vulnerabilities 2

  • Unscored —
    CVE-2014-0475

    Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent …

    glibc eglibc Debian Ubuntu
  • Unscored —
    CVE-2014-5119 Public exploit EPSS 17%

    Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dep…

    glibc eglibc Debian Ubuntu