- Home
- CVEs with nessus.description==This update for the `glibc` package addresses one moderate security vulnerability and several defects.
- CVE-2018-19591: A file descriptor leak in `if_nametoindex` can lead to a denial of service due to resource exhaustion when processing `getaddrinfo` calls with crafted host names. Reported by Guido Vranken.
(RHBZ#1654000)
- Failure to create the helper thread for `getaddrinfo_a`/`libanl` could result in a crash.
(RHBZ#1646381)
- On certain Haswell-class Intel CPUs, string function feature flags could be set incorrectly, leading to a suboptimal choice of string functions. (RHBZ#1641980)
- Parallel building of locales led to nondeterminism in the RPM build process. (RHBZ#1652228)
- Various minor bug fixes from the upstream 2.27 release branch were imported as part of this update ([swbz#17630](https://sourceware.org/bugzilla/show_bug.c gi?id=17630), [swbz#22753](https://sourceware.org/bugzilla/show_bug.cg i?id=22753), [swbz#23275](https://sourceware.org/bugzilla/show_bug.cg i?id=23275), [swbz#23562](https://sourceware.org/bugzilla/show_bug.cg i?id=23562), [swbz#23579](https://sourceware.org/bugzilla/show_bug.cg i?id=23579), [swbz#23822](https://sourceware.org/bugzilla/show_bug.cg i?id=23822)).
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top