Summary
This update of glibc fixes the following issues:
Security issue fixed:
- CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931)
Other issues fixed:
- S390: Fix relocation of _nl_current_LC_CATETORY_used in static build (bsc#1215504, BZ #19860)
- added GB18030-2022 charmap (jsc#PED-4908, BZ #30243)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 SP5 Linux Enterprise Server 12 SP5 | glibc | 2.22-114.31.1 |
| SUSE · SLES for SAP 12 SP5 Linux Enterprise Server for SAP Applications 12 SP5 | glibc | 2.22-114.31.1 |
| SUSE · SLES 12 SP5 Linux Enterprise Software Development Kit 12 SP5 | glibc | 2.22-114.31.1 |
Vulnerabilities 1
-
Medium 5.9CVE-2023-4813 Public exploit
Glibc: potential use-after-free in gaih_inet()
A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/…