Summary
[2.17-106.0.1.4]
- Remove strstr and strcasestr implementations using sse4.2 instructions.
- Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
1818483b15d22016b0eae41d37ee91cc87b37510 backported.
[2.17-106.4]
- Revert problematic libresolv change, not needed for the
CVE-2015-7547 fix (#1296030).
[2.17-106.3]
- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296030).
- Fix madvise performance issues (#1298930).
- Avoid 'monstartup: out of memory' error on powerpc64le (#1298956).
[2.17-106.2]
- Fix CVE-2015-5229: calloc() may return non-zero memory (#1296453).
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | glibc | 0:2.17-106.0.1.el7_2.4 |
| Oracle Linux · 7 | glibc-common | 0:2.17-106.0.1.el7_2.4 |
| Oracle Linux · 7 | glibc-devel | 0:2.17-106.0.1.el7_2.4 |
| Oracle Linux · 7 | glibc-headers | 0:2.17-106.0.1.el7_2.4 |
| Oracle Linux · 7 | glibc-static | 0:2.17-106.0.1.el7_2.4 |
| Oracle Linux · 7 | glibc-utils | 0:2.17-106.0.1.el7_2.4 |
| Oracle Linux · 7 | nscd | 0:2.17-106.0.1.el7_2.4 |
Vulnerabilities 2
-
Unscored —
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize me…
-
Unscored —
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU …