MGASA-2021-0053

Source
https://advisories.mageia.org/MGASA-2021-0053.html
Import Source
https://advisories.mageia.org/MGASA-2021-0053.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0053
Related
Published
2021-01-24T00:36:09Z
Modified
2021-01-23T23:59:12Z
Summary
Updated glibc packages fix security vulnerability
Details

Security fixes: - fix buffer overrun in EUC-KR conversion module [bz #2497] (CVE-2019-25013) - arm: CVE-2020-6096: Fix multiarch memcpy for negative length [BZ #25620] - arm: CVE-2020-6096: fix memcpy and memmove for negative length [BZ #25620] - iconv: Fix incorrect UCS4 inner loop bounds [BZ #26923] (CVE-2020-29562) other upstream fixes: - libio: Disable vtable validation for pre-2.1 interposed handles [BZ #25203] - string.h: Define _CORRECTISOCPPSTRINGHPROTO for Clang [BZ #25232] - misc/test-errno-linux: Handle EINVAL from quotactl - nsscompat: internalend*ent may clobber errno, hiding ERANGE [BZ #25976] - Fix avx2 strncmp offset compare condition check [BZ #25933] - AArch64: Align ENTRY to a cacheline - AArch64: Add optimized Q-register memcpy - AArch64: Improve backwards memmove performance - AArch64: Rename ISARES to ISNEOVERSEN1 - AArch64: Increase small and medium cases for _memcpygeneric - AArch64: Improve integer memcpy - AArch64: Use _memcpysimd on Neoverse N2/V1 - AArch64: Fix DTAARCH64VARIANTPCS handling [BZ #26798] - AArch64: fix stack missing after sp is updated - x86-64: Avoid rep movsb with short distance [BZ #27130] - x86: Assume --enable-cet if GCC defaults to CET [BZ #25225] - x86: Check IFUNC definition in unrelocated executable [BZ #20019] - x86: Set header.feature1 in TCB for always-on CET [BZ #27177] - Fix parsing of /sys/devices/system/cpu/online [BZ #25859] - Use OCLOEXEC in sysconf [BZ #26791]

References
Credits

Affected packages

Mageia:7 / glibc

Package

Name
glibc
Purl
pkg:rpm/mageia/glibc?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.29-21.mga7

Ecosystem specific

{
    "section": "core"
}