Skip to content
OpenAdvisories
High ELSA-2015-2172 1 CVE

Important: glibc security update (Oracle Linux 7)

Published Nov 25, 2015 · Updated Nov 25, 2015

Ecosystem: Oracle Linux

Summary

[2.17-106.0.1.1]
- Remove strstr and strcasestr implementations using sse4.2 instructions.
- Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
1818483b15d22016b0eae41d37ee91cc87b37510 backported.

[2.17-106.1]
- Rebuild with corrected release.

[2.17-106]
- Add fix for CVE-2015-5277 (#1275920).

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 glibc 0:2.17-106.0.1.el7_2.1
Oracle Linux · 7 glibc-common 0:2.17-106.0.1.el7_2.1
Oracle Linux · 7 glibc-devel 0:2.17-106.0.1.el7_2.1
Oracle Linux · 7 glibc-headers 0:2.17-106.0.1.el7_2.1
Oracle Linux · 7 glibc-static 0:2.17-106.0.1.el7_2.1
Oracle Linux · 7 glibc-utils 0:2.17-106.0.1.el7_2.1
Oracle Linux · 7 nscd 0:2.17-106.0.1.el7_2.1

Vulnerabilities 1

  • Unscored —
    CVE-2015-5277

    The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc…

    glibc eglibc Debian Ubuntu