glibc-2.5-81.4.0.1.AXS3

エラータID: AXSA:2012-695:04

Release date: 
Thursday, August 2, 2012 - 16:26
Subject: 
glibc-2.5-81.4.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.

Security issues fixed with this release:

• CVE-2012-3406
No description available at the time of writing, please refer to the CVE link below.

Fixed bugs:

• Fixed iconv() segfault if the invalid multibyte character "0xffff" is in the input (file or string) when converting from IBM930 .

Solution: 

Update packages.

CVEs: 
CVE-2012-3406
The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.


Additional Info: 

N/A

Download: 

SRPMS
  1. glibc-2.5-81.4.0.1.AXS3.src.rpm
    MD5: 580176ec8e79f2d0375d68bff496f9ee
    SHA-256: 808e01004a4c539193cba2ac0f88cddaf5726681f68bc0e353249ac70884cf7a
    Size: 15.82 MB

Asianux Server 3 for x86
  1. glibc-2.5-81.4.0.1.AXS3.i386.rpm
    MD5: 082049e37b6e99c521bb3e8ffa4d15c9
    SHA-256: 4a8bb52ec56ceb8258b5e8b53230aa3a0d28f88821da1620e670ddbae37ebd0c
    Size: 4.49 MB
  2. glibc-2.5-81.4.0.1.AXS3.i686.rpm
    MD5: e3359d92ea250573898dfa5783f27693
    SHA-256: ddf1fb8b595e0f58fda432f7294f5c53d55dea8cb121e22736428b04af3684a3
    Size: 5.35 MB
  3. glibc-common-2.5-81.4.0.1.AXS3.i386.rpm
    MD5: 533fd6001dfe938710b47cf60051b44d
    SHA-256: d041a6987165b05173dc6519a245a6e48b42d09ff03161ee9a7caacdda4a2e83
    Size: 16.81 MB
  4. glibc-devel-2.5-81.4.0.1.AXS3.i386.rpm
    MD5: af22087d78bd6282a68716f97c89617a
    SHA-256: 0a079f07519c1dc7b62e42d5ff53be1103158d00f36d3a8aabf3d6045a6a0988
    Size: 2.05 MB
  5. glibc-headers-2.5-81.4.0.1.AXS3.i386.rpm
    MD5: 113005a644ca8d095c2ffb910ca43c46
    SHA-256: 081e2e0a6d7bb16a4bad7d44458a21e08ef56035d30eb21deac9266d024d4cb1
    Size: 617.23 kB
  6. glibc-utils-2.5-81.4.0.1.AXS3.i386.rpm
    MD5: 4d7149a0c966a6583e301ae571007d1a
    SHA-256: 4852b764d89638d5a577fa34a54141272221bc1805d070ebb8c509265af33909
    Size: 136.18 kB
  7. nscd-2.5-81.4.0.1.AXS3.i386.rpm
    MD5: 0e063541631bd49b1b146de90ff8fbf3
    SHA-256: f475707c352accec8b9ed7e28bbf9228e47f77dd280a8c12483ac76af9e32d2a
    Size: 172.66 kB

Asianux Server 3 for x86_64
  1. glibc-2.5-81.4.0.1.AXS3.x86_64.rpm
    MD5: 203bfe7379c416c8fc93d57adee981db
    SHA-256: aef36a98812aee37afc35710bb3279aee1397392ec5e56a4149ffa6644b2f51c
    Size: 4.77 MB
  2. glibc-common-2.5-81.4.0.1.AXS3.x86_64.rpm
    MD5: 5af0bb425e3f1019fbdeafc5049c059b
    SHA-256: 64bcced0b9e9cbb16f152313206ebb4af6c8abd7555f8a1516c9923f38f14fa3
    Size: 16.84 MB
  3. glibc-devel-2.5-81.4.0.1.AXS3.x86_64.rpm
    MD5: 7ddfde4924912042861f52263ae72eb9
    SHA-256: 3199edad195afdeed2667351bed38817b9170f09b78adad4c271a52014ae4899
    Size: 2.42 MB
  4. glibc-headers-2.5-81.4.0.1.AXS3.x86_64.rpm
    MD5: e6b73686c12bdec9ed2d4689e842fd74
    SHA-256: 6450e8cbe85012d3a4bb5e83bbfacd07af42a89aa33cd20da9ac1c3cab6d3444
    Size: 607.61 kB
  5. glibc-utils-2.5-81.4.0.1.AXS3.x86_64.rpm
    MD5: 449ebba1f02088a88ba69af8d680d839
    SHA-256: 9c6254eaa48f3a5bab68284b26ce917178fc816bc606661238d0e693c5901c11
    Size: 134.74 kB
  6. nscd-2.5-81.4.0.1.AXS3.x86_64.rpm
    MD5: b9981271be5ade9dcc6c53a702668c73
    SHA-256: 4765ef3b0409c9fe2c6b5700e21a02e60a9bc3bfdc58fe117fbef3d638327992
    Size: 172.71 kB