[ GLSA 201503-04 ] GNU C Library

[GLSA]

Gentoo Linux Security Advisory

Title: GNU C Library: Multiple vulnerabilities (GLSA 201503-04)
Severity: normal
Exploitable: remote
Date: March 08, 2015
Bug(s): #431218, #434408, #454862, #464634, #477330, #480734, #484646, #488084, #489234, #501196, #513090, #521930, #537990
ID: 201503-04

Synopsis

Multiple vulnerabilities have been found in GNU C Library, the
worst of which allowing a local attacker to execute arbitrary code or cause
a Denial of Service .


Background

The GNU C library is the standard C library used by Gentoo Linux
systems.


Affected Packages

Package: sys-libs/glibc
Vulnerable: < 2.19-r1
Unaffected: >= 2.19-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in the GNU C Library.
Please review the CVE identifiers referenced below for details.


Impact

A local attacker may be able to execute arbitrary code or cause a Denial
of Service condition,.


Workaround

There is no known workaround at this time.

Resolution

All glibc users should upgrade to the latest version: