shield Security update for glibc

SUSE-SLE-DESKTOP-12-2016-1015

This update for glibc provides the following fixes: - Increase DTV_SURPLUS limit. (bsc#968787) - Do not copy d_name field of struct dirent. (CVE-2016-1234, bsc#969727) - Fix memory leak in _nss_dns_gethostbyname4_r. (bsc#973010) - Fix stack overflow in _nss_dns_getnetbyname_r. (CVE-2016-3075, bsc#973164) - Fix malloc performance regression from SLE 11. (bsc#975930) - Fix getaddrinfo stack overflow in hostent conversion. (CVE-2016-3706, bsc#980483) - Do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854)

• Release Date
  Jun 30 2016
• References
  Bugzilla: 975930, 980854, 980483, 973010, 968787, 973164, 969727
  CVEs: CVE-2016-3706, CVE-2016-4429, CVE-2016-1234, CVE-2016-3075
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  glibc
  Standard Shared Libraries (from the GNU C Library)

  2.19-22.16.2 lock rpm lock src lock nosrc

  glibc-32bit
  Standard Shared Libraries (from the GNU C Library)

  2.19-22.16.2 lock rpm

  glibc-devel
  Include Files and Libraries Mandatory for Development

  2.19-22.16.2 lock rpm

  glibc-devel-32bit
  Include Files and Libraries Mandatory for Development

  2.19-22.16.2 lock rpm

  glibc-i18ndata
  Database Sources for 'locale'

  2.19-22.16.2 lock rpm

  glibc-locale
  Locale Data for Localized Programs

  2.19-22.16.2 lock rpm

  glibc-locale-32bit
  Locale Data for Localized Programs

  2.19-22.16.2 lock rpm

  nscd
  Name Service Caching Daemon

  2.19-22.16.2 lock rpm