Security update for glibc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2883-1 Final 1 1 2018-09-26T12:20:32Z current 2018-09-26T12:20:32Z 2018-09-26T12:20:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for glibc This update for glibc fixes the following security issues: - CVE-2017-15670: Prevent off-by-one error that lead to a heap-based buffer overflow in the glob function, related to the processing of home directories using the ~ operator followed by a long string (bsc#1064583) - CVE-2017-15804: The glob function contained a buffer overflow during unescaping of user names with the ~ operator (bsc#1064580) - CVE-2015-5180: res_query in libresolv allowed remote attackers to cause a denial of service (NULL pointer dereference and process crash) (bsc#941234). This non-security issue was fixed: - Fix inaccuracies in casin, cacos, casinh, cacosh (bsc#1058774) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-glibc-13795,sleposp3-glibc-13795,slessp3-glibc-13795,slessp4-glibc-13795 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182883-1/ Link for SUSE-SU-2018:2883-1 https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html E-Mail link for SUSE-SU-2018:2883-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1058774 SUSE Bug 1058774 https://bugzilla.suse.com/1064580 SUSE Bug 1064580 https://bugzilla.suse.com/1064583 SUSE Bug 1064583 https://bugzilla.suse.com/941234 SUSE Bug 941234 https://www.suse.com/security/cve/CVE-2015-5180/ SUSE CVE CVE-2015-5180 page https://www.suse.com/security/cve/CVE-2017-15670/ SUSE CVE CVE-2017-15670 page https://www.suse.com/security/cve/CVE-2017-15804/ SUSE CVE CVE-2017-15804 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-html-2.11.3-17.110.19.2 glibc-info-2.11.3-17.110.19.2 glibc-2.11.3-17.110.19.2 glibc-devel-2.11.3-17.110.19.2 glibc-i18ndata-2.11.3-17.110.19.2 glibc-locale-2.11.3-17.110.19.2 glibc-profile-2.11.3-17.110.19.2 nscd-2.11.3-17.110.19.2 glibc-32bit-2.11.3-17.110.19.2 glibc-devel-32bit-2.11.3-17.110.19.2 glibc-locale-32bit-2.11.3-17.110.19.2 glibc-profile-32bit-2.11.3-17.110.19.2 glibc-locale-x86-2.11.3-17.110.19.2 glibc-profile-x86-2.11.3-17.110.19.2 glibc-x86-2.11.3-17.110.19.2 glibc-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-devel-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-html-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-i18ndata-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-info-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-locale-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-profile-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 nscd-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 glibc-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-devel-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-devel-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-html-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-i18ndata-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-info-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-locale-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-locale-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-profile-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-profile-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS nscd-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS glibc-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-devel-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-devel-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-html-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-i18ndata-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-info-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-locale-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-locale-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-profile-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-profile-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nscd-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA glibc-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-devel-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-devel-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-html-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-i18ndata-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-info-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-locale-x86-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-profile-x86-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-x86-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 nscd-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server 11 SP4 glibc-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-devel-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-devel-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-html-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-i18ndata-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-info-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-locale-x86-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-32bit-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-profile-x86-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-x86-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 nscd-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc-html-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-info-2.11.3-17.110.19.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash). CVE-2015-5180 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.19.2 important 1.2 AV:L/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182883-1/ https://www.suse.com/security/cve/CVE-2015-5180.html CVE-2015-5180 https://bugzilla.suse.com/1123874 SUSE Bug 1123874 https://bugzilla.suse.com/1215582 SUSE Bug 1215582 https://bugzilla.suse.com/941234 SUSE Bug 941234 The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string. CVE-2017-15670 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.19.2 important 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182883-1/ https://www.suse.com/security/cve/CVE-2017-15670.html CVE-2017-15670 https://bugzilla.suse.com/1064583 SUSE Bug 1064583 https://bugzilla.suse.com/1110160 SUSE Bug 1110160 https://bugzilla.suse.com/1123874 SUSE Bug 1123874 The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator. CVE-2017-15804 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Point of Sale 11 SP3:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-LTSS:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-locale-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-profile-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:glibc-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server 11 SP4:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-devel-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-i18ndata-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-info-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-locale-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-32bit-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-profile-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:glibc-x86-2.11.3-17.110.19.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nscd-2.11.3-17.110.19.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html-2.11.3-17.110.19.2 SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info-2.11.3-17.110.19.2 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182883-1/ https://www.suse.com/security/cve/CVE-2017-15804.html CVE-2017-15804 https://bugzilla.suse.com/1064580 SUSE Bug 1064580 https://bugzilla.suse.com/1110160 SUSE Bug 1110160 https://bugzilla.suse.com/1123874 SUSE Bug 1123874