SUSE-SU-2023:4110-1: Security update for glibc
This update for glibc fixes the following issues: Security issue fixed: CVE-2023-4813: Fixed a potential use-after-free in gaihinet() (bsc#1215286, BZ #28931) Also a regression from a previous update was fixed: elf: Align argument of munmap to page size (bsc#1215891, BZ #28676)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/glibc-extra-debuginfoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utilsto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utils-src-debugsourceto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-extrato a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/nscd-debuginfoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utils-debuginfoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/nscdto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-devel-debuginfoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-devel-staticto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-debugsourceto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibcto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-debuginfoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-develto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-locale-baseto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-profileto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-localeto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-locale-base-debuginfoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-htmlto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-infoto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-langto a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-i18ndatato a version that resolves this vulnerability.Fixed in 2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-locale-baseto a version that resolves this vulnerability.Fixed in 32bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-devel-staticto a version that resolves this vulnerability.Fixed in 32bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibcto a version that resolves this vulnerability.Fixed in 32bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibcto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-profileto a version that resolves this vulnerability.Fixed in 32bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-locale-baseto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utilsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utilsto a version that resolves this vulnerability.Fixed in 32bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-develto a version that resolves this vulnerability.Fixed in 32bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-develto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utilsto a version that resolves this vulnerability.Fixed in 64bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-profileto a version that resolves this vulnerability.Fixed in 64bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-develto a version that resolves this vulnerability.Fixed in 64bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-develto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibcto a version that resolves this vulnerability.Fixed in 64bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-utilsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibcto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-locale-baseto a version that resolves this vulnerability.Fixed in 64bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-devel-staticto a version that resolves this vulnerability.Fixed in 64bit-2.31-150300.63.1 - Upgrade
Upgrade
suse/glibc-locale-baseto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-2.31-150300.63.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-4110=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-4110=1