- Home
- CVEs with nessus.description==This update for the `glibc` package addresses one moderate security
vulnerability and several defects.
- CVE-2018-19591: A file descriptor leak in
`if_nametoindex` can lead to a denial of service due to
resource exhaustion when processing `getaddrinfo` calls
with crafted host names. Reported by Guido Vranken.
(RHBZ#1654000)
- Failure to create the helper thread for
`getaddrinfo_a`/`libanl` could result in a crash.
(RHBZ#1646381)
- On certain Haswell-class Intel CPUs, string function
feature flags could be set incorrectly, leading to a
suboptimal choice of string functions. (RHBZ#1641980)
- Parallel building of locales led to nondeterminism in
the RPM build process. (RHBZ#1652228)
- Various minor bug fixes from the upstream 2.27 release
branch were imported as part of this update
([swbz#17630](https://sourceware.org/bugzilla/show_bug.c
gi?id=17630),
[swbz#22753](https://sourceware.org/bugzilla/show_bug.cg
i?id=22753),
[swbz#23275](https://sourceware.org/bugzilla/show_bug.cg
i?id=23275),
[swbz#23562](https://sourceware.org/bugzilla/show_bug.cg
i?id=23562),
[swbz#23579](https://sourceware.org/bugzilla/show_bug.cg
i?id=23579),
[swbz#23822](https://sourceware.org/bugzilla/show_bug.cg
i?id=23822)).
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top