stable

glibc-2.37-18.fc38

FEDORA-2024-07597a0fb3 created by pfrankli 6 months ago for Fedora 38

Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780.

CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER containing a long program name failed to update the required buffer size, leading to the allocation and overflow of a too-small buffer on the heap.

CVE-2023-6779: __vsyslog_internal used the return value of snprintf/vsnprintf to calculate buffer sizes for memory allocation. If these functions (for any reason) failed and returned -1, the resulting buffer would be too small to hold output.

CVE-2023-6780: __vsyslog_internal calculated a buffer size by adding two integers, but did not first check if the addition would overflow.

Reboot Required
After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-07597a0fb3

This update has been submitted for testing by pfrankli.

6 months ago

This update's test gating status has been changed to 'waiting'.

6 months ago

This update's test gating status has been changed to 'passed'.

6 months ago

This update has been pushed to testing.

6 months ago

This update's test gating status has been changed to 'failed'.

6 months ago

This update's test gating status has been changed to 'waiting'.

6 months ago

This update's test gating status has been changed to 'passed'.

6 months ago
User Icon mschwarz commented & provided feedback 6 months ago
karma

works for me ( tested on Server-Cluster 10+ systems)

User Icon rdtcustomercare commented & provided feedback 6 months ago
karma

works

This update can be pushed to stable now if the maintainer wishes

6 months ago
User Icon jwakely provided feedback 6 months ago
karma

This update has been submitted for stable by bodhi.

6 months ago
User Icon mrc0mmand provided feedback 6 months ago
karma

This update has been pushed to stable.

5 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
4
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
6 months ago
in testing
6 months ago
in stable
5 months ago
approved
6 months ago
BZ#2249053 CVE-2023-6246 glibc: heap-based buffer overflow in __vsyslog_internal()
0
0
BZ#2254395 CVE-2023-6779 glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()
0
0
BZ#2254396 CVE-2023-6780 glibc: integer overflow in __vsyslog_internal()
0
0

Automated Test Results