glibc-2.12-1.149.AXS4.7

エラータID: AXSA:2015-126:03

Release date: 
Friday, May 8, 2015 - 17:13
Subject: 
glibc-2.12-1.149.AXS4.7
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

Description:

The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.

Security issues fixed with this release:

CVE-2013-7423
CVE-2015-1781

Solution: 

Update package.

CVEs: 
CVE-2013-7423
The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
CVE-2015-1781
Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.
Additional Info: 

N/A

Download: 

SRPMS
  1. glibc-2.12-1.149.AXS4.7.src.rpm
    MD5: a10a97c6d35083e73b7aa0eba79e5e43
    SHA-256: d7648aee9fa37ac017fbe9226b125cd195a1b06e0baccff6669c3d9a42ead012
    Size: 15.44 MB

Asianux Server 4 for x86
  1. glibc-2.12-1.149.AXS4.7.i686.rpm
    MD5: 349953a98186a31a86c270aea58d6813
    SHA-256: 5cb5d1f79308587aea762876bbd80ab5fc28994c3a08a908904309d929cb73ae
    Size: 4.34 MB
  2. glibc-common-2.12-1.149.AXS4.7.i686.rpm
    MD5: 8bfce1271dab9fca9cd0773e13cbea96
    SHA-256: ef05468f68190c08f0daef55d44b474502fe41107520d05e09f47989810eab3f
    Size: 14.18 MB
  3. glibc-devel-2.12-1.149.AXS4.7.i686.rpm
    MD5: ac9d7ed18dccc7ad40977235244d4d4a
    SHA-256: 557f55bdb18a06c63df50c2e8ff23611243fec9a1d792a03bfc3ffe5cf2a0904
    Size: 0.96 MB
  4. glibc-headers-2.12-1.149.AXS4.7.i686.rpm
    MD5: cd02617aaef456c250d85b472d0364e2
    SHA-256: a432df6cbf1daca009db9cd8a48200a0360a64e5fe7b6a1bc6edd31ad047d713
    Size: 619.47 kB
  5. glibc-utils-2.12-1.149.AXS4.7.i686.rpm
    MD5: 7023ac8ae1173866563470e7f9c07d85
    SHA-256: 5ed287a218b2e236aad0ae4b937d99ddb4709950792be67a7bc6278740398193
    Size: 167.76 kB
  6. nscd-2.12-1.149.AXS4.7.i686.rpm
    MD5: 0a17b914bd9dbd85d4e05378374cfe60
    SHA-256: e62ae699f3bc85632fc3439a91a13ed7a5a7f31d2944f9b556c585a6fa48570a
    Size: 222.53 kB

Asianux Server 4 for x86_64
  1. glibc-2.12-1.149.AXS4.7.x86_64.rpm
    MD5: 94e2f6d496934a07dfde9d3392e02b57
    SHA-256: 4c63ef9d16eb11082db9ce0680b403c2c5b7f3030988597efaafbec1e4ffb6dc
    Size: 3.81 MB
  2. glibc-common-2.12-1.149.AXS4.7.x86_64.rpm
    MD5: ec8b3ab48a9e36b46fcd035cfd455da2
    SHA-256: 7563b3f340d754162a83b49621b3f89020c50625760e838d5db6a9c41edf59cb
    Size: 14.19 MB
  3. glibc-devel-2.12-1.149.AXS4.7.x86_64.rpm
    MD5: 45afb9f3597af76a8fae9782a7d56623
    SHA-256: ada4fcbb985e242e97725199997b3b7b03d86eccb83da321ded840e86968324c
    Size: 0.96 MB
  4. glibc-headers-2.12-1.149.AXS4.7.x86_64.rpm
    MD5: c4e66875cc86c3ec1df205416dffe1bf
    SHA-256: 7c8d0bc961d642208854651b954d35cca74f22977facda8ab983b2285da2703b
    Size: 611.00 kB
  5. glibc-utils-2.12-1.149.AXS4.7.x86_64.rpm
    MD5: 7bfdef7971a036af6eeb55a5fddd735c
    SHA-256: c44499a9737ac68671e166e070710d585e5e4555859758ab09cf5d757f4dd1a3
    Size: 165.93 kB
  6. nscd-2.12-1.149.AXS4.7.x86_64.rpm
    MD5: 98e84a0fb813a3c47edfdfeb1cc4e3a5
    SHA-256: 9386df3f69b7cc5fda917f6bbda43bdd85327f2653b69ec8ad7756b50568e937
    Size: 223.75 kB
  7. glibc-2.12-1.149.AXS4.7.i686.rpm
    MD5: 349953a98186a31a86c270aea58d6813
    SHA-256: 5cb5d1f79308587aea762876bbd80ab5fc28994c3a08a908904309d929cb73ae
    Size: 4.34 MB
  8. glibc-devel-2.12-1.149.AXS4.7.i686.rpm
    MD5: ac9d7ed18dccc7ad40977235244d4d4a
    SHA-256: 557f55bdb18a06c63df50c2e8ff23611243fec9a1d792a03bfc3ffe5cf2a0904
    Size: 0.96 MB