glibc-2.17-105.el7

The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.

Security issues fixed with this release:

CVE-2013-7423
The send_dg function in resolv/res_send.c in GNU C Library (aka glibc
or libc6) before 2.20 does not properly reuse file descriptors, which
allows remote attackers to send DNS queries to unintended locations
via a large number of request that trigger a call to the getaddrinfo
function.
CVE-2015-1472
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka
glibc or libc6) before 2.21 does not properly consider data-type size
during memory allocation, which allows context-dependent attackers to
cause a denial of service (buffer overflow) or possibly have
unspecified other impact via a long line containing wide characters
that are improperly handled in a wscanf call.
CVE-2015-1473
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka
glibc or libc6) before 2.21 does not properly consider data-type size
during a risk-management decision for use of the alloca function,
which might allow context-dependent attackers to cause a denial of
service (segmentation violation) or overwrite memory locations beyond
the stack boundary via a long line containing wide characters that are
improperly handled in a wscanf call.
CVE-2015-1781
Buffer overflow in the gethostbyname_r and other unspecified NSS
functions in the GNU C Library (aka glibc or libc6) before 2.22 allows
context-dependent attackers to cause a denial of service (crash) or
execute arbitrary code via a crafted DNS response, which triggers a
call with a misaligned buffer.

Fixed bugs:

These updated glibc packages also include numerous bug fixes and one enhancement.