SUSE-SU-2018:2883-1

Description of the patch:

This update for glibc fixes the following security issues:

• CVE-2017-15670: Prevent off-by-one error that lead to a heap-based buffer overflow in the glob function, related to the processing of home directories using the ~ operator followed by a long string (bsc#1064583)
• CVE-2017-15804: The glob function contained a buffer overflow during unescaping of user names with the ~ operator (bsc#1064580)
• CVE-2015-5180: res_query in libresolv allowed remote attackers to cause a denial of service (NULL pointer dereference and process crash) (bsc#941234).

This non-security issue was fixed:

• Fix inaccuracies in casin, cacos, casinh, cacosh (bsc#1058774)