p PatchFirst

SUSE-SU-2025:20038-1

SUSE-SU-2025:20038-1 · Security update for glibc

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

This update for glibc fixes the following issues: Fixed security issues: - CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425) - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423) - CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bsc#1223424) - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bsc#1223424) - CVE-2024-33601, CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (bsc#1223425) - CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992) Fixed non-security issues: - Add workaround for invalid use of libc_nonshared.a with non-SUSE libc (bsc#1221482) - Fix segfault in wcsncmp (bsc#1228041) - Also include stat64 in the 32-bit libc_nonshared.a workaround (bsc#1221482) - Avoid creating ULP prologue for _start routine (bsc#1221940) - Also add libc_nonshared.a workaround to 32-bit x86 compat package (bsc#1221482) - malloc: Use __get_nprocs on arena_get2 - linux: Use rseq area unconditionally in sched_getcpu

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • glibc SUSE:Linux Micro 6.0

    Plages de versions concernées
    • ECOSYSTEM: < 2.38-7.1

    Mettez à jour vers 2.38-7.1

Sources originales

Vérifiez votre serveur →