Security update for glibc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2302-1 Final 1 1 2018-08-10T13:23:31Z current 2018-08-10T13:23:31Z 2018-08-10T13:23:31Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for glibc This update for glibc fixes the following issues: Security issue fixed: - CVE-2018-11236: Fix 32bit arch integer overflow in stdlib/canonicalize.c when processing very long pathname arguments (bsc#1094161). Bug fixes: - bsc#1086690: Fix crash in resolver on memory allocation failure. - bsc#1077763: Fix allocation in in6ailist_add. - bsc#1079625: Fix allocation in nss_compat for large number of memberships to a group. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-glibc-13721,sleposp3-glibc-13721,slessp3-glibc-13721,slessp4-glibc-13721 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182302-1/ Link for SUSE-SU-2018:2302-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004403.html E-Mail link for SUSE-SU-2018:2302-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1077763 SUSE Bug 1077763 https://bugzilla.suse.com/1079625 SUSE Bug 1079625 https://bugzilla.suse.com/1086690 SUSE Bug 1086690 https://bugzilla.suse.com/1094161 SUSE Bug 1094161 https://www.suse.com/security/cve/CVE-2018-11236/ SUSE CVE CVE-2018-11236 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-html-2.11.3-17.110.14.1 glibc-info-2.11.3-17.110.14.1 glibc-2.11.3-17.110.14.1 glibc-devel-2.11.3-17.110.14.1 glibc-i18ndata-2.11.3-17.110.14.1 glibc-locale-2.11.3-17.110.14.1 glibc-profile-2.11.3-17.110.14.1 nscd-2.11.3-17.110.14.1 glibc-32bit-2.11.3-17.110.14.1 glibc-devel-32bit-2.11.3-17.110.14.1 glibc-locale-32bit-2.11.3-17.110.14.1 glibc-profile-32bit-2.11.3-17.110.14.1 glibc-locale-x86-2.11.3-17.110.14.1 glibc-profile-x86-2.11.3-17.110.14.1 glibc-x86-2.11.3-17.110.14.1 glibc-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-devel-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-html-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-i18ndata-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-info-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-locale-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-profile-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 nscd-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-devel-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-devel-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-html-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-i18ndata-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-info-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-locale-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-locale-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-profile-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-profile-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS nscd-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-devel-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-devel-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-html-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-i18ndata-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-info-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-locale-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-locale-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-profile-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-profile-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nscd-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-devel-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-devel-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-html-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-i18ndata-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-info-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-x86-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-x86-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-x86-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 nscd-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-devel-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-devel-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-html-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-i18ndata-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-info-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-x86-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-32bit-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-x86-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-x86-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 nscd-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-html-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-info-2.11.3-17.110.14.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. CVE-2018-11236 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.14.1 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.14.1 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.14.1 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.14.1 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.14.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182302-1/ https://www.suse.com/security/cve/CVE-2018-11236.html CVE-2018-11236 https://bugzilla.suse.com/1094161 SUSE Bug 1094161 https://bugzilla.suse.com/1110160 SUSE Bug 1110160 https://bugzilla.suse.com/1118435 SUSE Bug 1118435 https://bugzilla.suse.com/1123874 SUSE Bug 1123874