SUSE-SU-2020:0668-1

CVE-2020-10029: Fixed a potential overflow in on-stack buffer during range reduction (bsc#1165784).
Fixed an issue where pthread were not always locked correctly (bsc#1164505).
Document mprotect and introduce section on memory protection (bsc#1163184).

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP1

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.26-13.39.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-extra": "2.26-13.39.1",
            "glibc-i18ndata": "2.26-13.39.1",
            "glibc-32bit": "2.26-13.39.1",
            "glibc-devel": "2.26-13.39.1",
            "glibc-locale": "2.26-13.39.1",
            "glibc-info": "2.26-13.39.1",
            "nscd": "2.26-13.39.1",
            "glibc": "2.26-13.39.1",
            "glibc-profile": "2.26-13.39.1",
            "glibc-locale-base": "2.26-13.39.1",
            "glibc-locale-base-32bit": "2.26-13.39.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP1

glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.26-13.39.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-utils": "2.26-13.39.1",
            "glibc-devel-static": "2.26-13.39.1",
            "glibc-devel-32bit": "2.26-13.39.1"
        }
    ]
}