FEDORA-2016-b321728d74 — security update for glibc

stable

glibc-2.23.1-7.fc24

FEDORA-2016-b321728d74 created by fweimer 9 years ago for Fedora 24

This update contains minor security fixes (for CVE-2016-3075, CVE-2016-3706, and CVE-2016-1234) and collects fixes for bugs encountered by Fedora users.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-b321728d74

This update has been submitted for testing by fweimer.

9 years ago

This update has been pushed to testing.

9 years ago

pwalter commented & provided feedback 9 years ago

karma

Works

akurtakov commented & provided feedback 9 years ago

karma

no issues found

fweimer edited this update.

New build(s):

glibc-2.23.1-7.fc24

Removed build(s):

glibc-2.23.1-6.fc24

9 years ago

This update has been submitted for testing by fweimer.

9 years ago

This update has been pushed to testing.

9 years ago

filiperosset commented & provided feedback 9 years ago

karma

no regressions noted

This update has been submitted for stable by fweimer.

9 years ago

This update has been pushed to stable.

9 years ago

genodeftest commented & provided feedback 9 years ago

Is it possible that this release breaks setlocale()? See https://bugzilla.redhat.com/show_bug.cgi?id=1336427 for a full backtrace.

BZ#1335011 dlsym (RTLD_NEXT)/dlerror fix breaks Adress Sanitizer (ASAN)

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

modified

9 years ago

Builds

glibc-2.23.1-7.fc24

BZ#1204521 fr_CH LC_TIME has wrong first day of week

BZ#1282011 first_weekday wrong for hr_HR locale

BZ#1307234 strfmon_l does not group digits.

BZ#1313404 Test suite failure: elf/tst-audit10 and elf/tst-audit4

BZ#1315648 CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory [fedora-all]

BZ#1316972 glibc: NULL pointer dereference in stub resolver with unconnectable name server addresses

BZ#1321372 Incorrect first day of the week for es_CL locale

BZ#1321861 glibc: "getent group" listing using nss_db fails when entries are long

BZ#1321954 CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r [fedora-all]

BZ#1330888 CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458) [fedora-all]

BZ#1332912 glibc: nss_hesiod: Heap overflow in get_txt_records

BZ#1332914 glibc: Backport nss_dns hardening patches

BZ#1332917 glibc: Deadlock between fflush, getdelim, and fork

BZ#1333901 glibc: getnameinfo: fix memory leak and incorrect truncation checks

BZ#1334289 glibc: ldconfig -X should not remove stale symbolic links

BZ#1335011 dlsym (RTLD_NEXT)/dlerror fix breaks Adress Sanitizer (ASAN)

glibc-2.23.1-7.fc24

Automated Test Results

None