MGASA-2020-0135

Source
https://advisories.mageia.org/MGASA-2020-0135.html
Import Source
https://advisories.mageia.org/MGASA-2020-0135.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2020-0135
Related
Published
2020-03-08T22:37:31Z
Modified
2020-03-18T14:40:10Z
Summary
Updated glibc packages fix security vulnerabilities
Details

Updated glibc packages fix security vulnerabilities:

Trigonometric functions on x86 targets suffered from stack corruption when they were passed a pseudo-zero argument. Reported by Guido Vranken / ForAllSecure Mayhem. [BZ 25487] (CVE-2020-10029).

Fix use-after-free in glob when expanding ~user [BZ 25414] (CVE-2020-1752)

References
Credits

Affected packages

Mageia:7 / glibc

Package

Name
glibc
Purl
pkg:rpm/mageia/glibc?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.29-20.mga7

Ecosystem specific

{
    "section": "core"
}