SUSE-SU-2021:0608-1

UNKNOWN

Security update for glibc

Published Feb 25, 2021

Modified 5 years ago

Fix available

Details

This update for glibc fixes the following issues:

Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973)
gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)
Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
powerpc: Add support for POWER10 (bsc#1181365)

Affected Packages(13 packages)

glibc

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.22-114.5.1

glibc-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-devel-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-html

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-i18ndata

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-info

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.22-114.5.1

glibc-locale

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-locale-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

glibc-profile

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.22-114.5.1

References

REPORT

https://bugzilla.suse.com/1180038

REPORT

https://bugzilla.suse.com/1181365

REPORT

https://bugzilla.suse.com/1181505

REPORT

https://bugzilla.suse.com/1182117

WEB

https://www.suse.com/security/cve/CVE-2019-25013

WEB

https://www.suse.com/security/cve/CVE-2021-3326

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20210608-1/

Upstream

CVE-2019-25013 CVE-2021-3326

Ecosystems

SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5

Timeline

PublishedFeb 25, 2021

ModifiedFeb 25, 2021

SUSE-SU-2021:0608-1 | Mondoo Vulnerability Intelligence