glibc-2.5-107.4.0.1.AXS3

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.

Security issues fixed with this release:

• CVE-2013-0242
Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.

• CVE-2013-1914
No description at the time of writing, please use the CVE link below.

Fixed bugs:

• Reduced the performance penalty linked to the more accurate floating point functions in the math library.

• Fixed a invalid memory access that made the application crash.

• When trying to use the dynamically loaded character conversion routine, the C library security mechanism failed to handle it when it was loaded at specific virtual addresses and the application would crash. This has been fixed.