- Home
- CVEs with nessus.description==- Locale names, including those obtained from environment variables (LANG and the LC_* variables), are more tightly checked for proper syntax. setlocale will now fail (with EINVAL) for locale names that are overly long, contain slashes without starting with a slash, or contain '..' path components. (CVE-2014-0475) Previously, some valid locale names were silently replaced with the 'C' locale when running in AT_SECURE mode (e.g., in a SUID program). This is no longer necessary because of the additional checks.
- Support for loadable gconv transliteration modules has been removed because it did not work at all. Regular gconv conversion modules are still supported.
(CVE-2014-5119)
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top