glibc-2.5-49.6.0.1.AXS3

エラータID: AXSA:2010-475:05

Release date: 
Wednesday, October 27, 2010 - 13:49
Subject: 
glibc-2.5-49.6.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.
Security issues fixed with this release:
CVE-2010-3847
No information available at the time of writing, see the CVE link below.
Fixed bugs:
- Fixed a race condition in the 'free' function when the 'MLLOC_CHECK' feature was enabled: this would result in an internal heap corruption in multi-threaded applications.

Solution: 

Update packages.

CVEs: 
CVE-2010-3847
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.


Additional Info: 

N/A

Download: 

SRPMS
  1. glibc-2.5-49.6.0.1.AXS3.src.rpm
    MD5: 3cb01642b5ab23e78744238b5998d399
    SHA-256: d6a0cb2cf0a719199f6dcb219ae6c9a85522d5a3aa88a224df63e6bcd3b2307c
    Size: 15.70 MB

Asianux Server 3 for x86
  1. glibc-2.5-49.6.0.1.AXS3.i686.rpm
    MD5: 3ad599d38090deaffcb393079737276e
    SHA-256: 6e89cd6251694eb45e263b8f31b4c6fe290c946cfe61ceac45805ebb0a842062
    Size: 5.34 MB
  2. glibc-2.5-49.6.0.1.AXS3.i386.rpm
    MD5: bd10dcda22f9bfe1c3a67efa0b5e92e6
    SHA-256: fe2b5c7c5149f0e42aee79c17baea3cc2849ecac52d3ce08858b0f7a04c6b69a
    Size: 4.48 MB
  3. glibc-common-2.5-49.6.0.1.AXS3.i386.rpm
    MD5: c3838087fe2d08bc0186706a62e4770c
    SHA-256: 6009404c759c760e137c56ce25fc6d00509a7c57d853fb6583000612226e566b
    Size: 16.81 MB
  4. glibc-devel-2.5-49.6.0.1.AXS3.i386.rpm
    MD5: be1acbc44781abe0d8df2326d66a3b6c
    SHA-256: 4d54b1ff00210e30b805fe2044f4851ac3e20594460c239b0172e5523b958d68
    Size: 2.04 MB
  5. glibc-headers-2.5-49.6.0.1.AXS3.i386.rpm
    MD5: 0db6d5736829f48ca08e5ccb4b4b1bf2
    SHA-256: 3828948bac54ffd390e458fa5d065c161b22b281e328dc25fb925699754884b1
    Size: 612.83 kB
  6. glibc-utils-2.5-49.6.0.1.AXS3.i386.rpm
    MD5: 152052adb27d8a9bb0eb3b0e2c0c699d
    SHA-256: 9897e902dc572351813b5a6dfcce2e079411993e426fc35c6adfe9b304fcb9d9
    Size: 131.92 kB
  7. nscd-2.5-49.6.0.1.AXS3.i386.rpm
    MD5: 632c4e54c34db390ee7034f5b58b803b
    SHA-256: 8797e75ac7c6da60f7d8eb9fbd1f8b0012da464d31c7563aadb1b94b0432b787
    Size: 166.26 kB

Asianux Server 3 for x86_64
  1. glibc-2.5-49.6.0.1.AXS3.x86_64.rpm
    MD5: b057435e0590d234018f62555e6a5a38
    SHA-256: 032757d9b2dc84853f9b49630de4ad7ff523883a6b8e119512876c4cca59a7bf
    Size: 4.76 MB
  2. glibc-common-2.5-49.6.0.1.AXS3.x86_64.rpm
    MD5: f2508de2b68165eea3016b0c726e54cd
    SHA-256: 73fc61d1d5f8c67b711aea579b363164b6e764fb3d78556a45d6f4ec7f615d5e
    Size: 16.83 MB
  3. glibc-devel-2.5-49.6.0.1.AXS3.x86_64.rpm
    MD5: 619ea00e8067509e2083fcaf6978f448
    SHA-256: b4ce7cdfa07e8d883e80554f9c61bb9e9b9b3426894a16da3202a45724ea0789
    Size: 2.41 MB
  4. glibc-headers-2.5-49.6.0.1.AXS3.x86_64.rpm
    MD5: cfe183a20748ccd01a5186903938f3ac
    SHA-256: fa3602323e1419d7dfdae106cd8baa1d7416be159b3617a0175e5e26074fc5e5
    Size: 603.13 kB
  5. glibc-utils-2.5-49.6.0.1.AXS3.x86_64.rpm
    MD5: c1e6ab0cb4d9bfbae5f00ab8e68c5c22
    SHA-256: b68b7b0aa6fd8d374522467e32c0d390116ed546838de8cd7f7856baad4f8faf
    Size: 130.46 kB
  6. nscd-2.5-49.6.0.1.AXS3.x86_64.rpm
    MD5: 00a19723cf2254b223045005060a591c
    SHA-256: 690dde516bde8ada1db129e51e8c1eab1ebe09814dca7b18e3b7ae917dc50d84
    Size: 166.50 kB