SUSE-SU-2023:0015-1

MEDIUM4.5

Security update for glibc

Published Jan 3, 2023

Modified 3 years ago

Fix available

Details

Description of the patch:

This update for glibc fixes the following issues:

CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings (bsc#1122729)

Affected Packages(12 packages)

glibc

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-32bit

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-devel

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-devel-32bit

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-html

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-i18ndata

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-info

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-locale

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-locale-32bit

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

glibc-profile

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

2.22-133.1

References

https://bugzilla.suse.com/1122729

https://lists.suse.com/pipermail/sle-security-updates/2023-January/013417.html

https://www.suse.com/security/cve/CVE-2016-10739/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2023/suse-su-20230015-1/

CVSS Analysis

CVSS v3.0

4.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Upstream

Ecosystems

SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL

Timeline

PublishedJan 3, 2023

ModifiedJan 3, 2023

SUSE-SU-2023:0015-1 | Mondoo Vulnerability Intelligence