Security update for glibc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0565-1 Final 1 1 2018-02-28T16:32:49Z current 2018-02-28T16:32:49Z 2018-02-28T16:32:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for glibc This update for glibc fixes the following issues: Security issues: - CVE-2017-8804: Fix memory leak after deserialization failure in xdr_bytes, xdr_string (bsc#1037930) - CVE-2017-12132: Reduce EDNS payload size to 1200 bytes (bsc#1051791) - CVE-2018-6485,CVE-2018-6551: Fix integer overflows in internal memalign and malloc functions (bsc#1079036) - CVE-2018-1000001: Avoid underflow of malloced area in realpath (bsc#1074293) Also a non security issue was fixed: - Do not fail if one of the two responses to AF_UNSPEC fails (bsc#978209) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-glibc-13494,sleposp3-glibc-13494,slessp3-glibc-13494,slessp4-glibc-13494 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180565-1/ Link for SUSE-SU-2018:0565-1 https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html E-Mail link for SUSE-SU-2018:0565-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1037930 SUSE Bug 1037930 https://bugzilla.suse.com/1051791 SUSE Bug 1051791 https://bugzilla.suse.com/1074293 SUSE Bug 1074293 https://bugzilla.suse.com/1079036 SUSE Bug 1079036 https://bugzilla.suse.com/978209 SUSE Bug 978209 https://www.suse.com/security/cve/CVE-2017-12132/ SUSE CVE CVE-2017-12132 page https://www.suse.com/security/cve/CVE-2017-8804/ SUSE CVE CVE-2017-8804 page https://www.suse.com/security/cve/CVE-2018-1000001/ SUSE CVE CVE-2018-1000001 page https://www.suse.com/security/cve/CVE-2018-6485/ SUSE CVE CVE-2018-6485 page https://www.suse.com/security/cve/CVE-2018-6551/ SUSE CVE CVE-2018-6551 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-html-2.11.3-17.110.6.2 glibc-info-2.11.3-17.110.6.2 glibc-2.11.3-17.110.6.2 glibc-devel-2.11.3-17.110.6.2 glibc-i18ndata-2.11.3-17.110.6.2 glibc-locale-2.11.3-17.110.6.2 glibc-profile-2.11.3-17.110.6.2 nscd-2.11.3-17.110.6.2 glibc-32bit-2.11.3-17.110.6.2 glibc-devel-32bit-2.11.3-17.110.6.2 glibc-locale-32bit-2.11.3-17.110.6.2 glibc-profile-32bit-2.11.3-17.110.6.2 glibc-locale-x86-2.11.3-17.110.6.2 glibc-profile-x86-2.11.3-17.110.6.2 glibc-x86-2.11.3-17.110.6.2 glibc-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-devel-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-html-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-i18ndata-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-info-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-locale-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-profile-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 nscd-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-devel-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-devel-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-html-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-i18ndata-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-info-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-locale-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-locale-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-profile-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-profile-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS nscd-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-devel-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-devel-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-html-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-i18ndata-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-info-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-locale-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-locale-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-profile-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-profile-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nscd-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-devel-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-devel-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-html-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-i18ndata-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-info-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-x86-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-x86-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-x86-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 nscd-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-devel-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-devel-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-html-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-i18ndata-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-info-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-x86-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-32bit-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-x86-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-x86-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 nscd-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-html-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-info-2.11.3-17.110.6.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation. CVE-2017-12132 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.6.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180565-1/ https://www.suse.com/security/cve/CVE-2017-12132.html CVE-2017-12132 https://bugzilla.suse.com/1051791 SUSE Bug 1051791 https://bugzilla.suse.com/1123874 SUSE Bug 1123874 ** DISPUTED ** The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references] CVE-2017-8804 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.6.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180565-1/ https://www.suse.com/security/cve/CVE-2017-8804.html CVE-2017-8804 https://bugzilla.suse.com/1037559 SUSE Bug 1037559 https://bugzilla.suse.com/1037930 SUSE Bug 1037930 In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution. CVE-2018-1000001 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.6.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180565-1/ https://www.suse.com/security/cve/CVE-2018-1000001.html CVE-2018-1000001 https://bugzilla.suse.com/1074293 SUSE Bug 1074293 https://bugzilla.suse.com/1099047 SUSE Bug 1099047 https://bugzilla.suse.com/1123874 SUSE Bug 1123874 An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption. CVE-2018-6485 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.6.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180565-1/ https://www.suse.com/security/cve/CVE-2018-6485.html CVE-2018-6485 https://bugzilla.suse.com/1079036 SUSE Bug 1079036 https://bugzilla.suse.com/1123874 SUSE Bug 1123874 The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption. CVE-2018-6551 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.6.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.6.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180565-1/ https://www.suse.com/security/cve/CVE-2018-6551.html CVE-2018-6551 https://bugzilla.suse.com/1079036 SUSE Bug 1079036