FlawAtlas
Search the atlas
SUSE-SU-2019:1958-1 Not scored

Security update for glibc

This update for glibc fixes the following issues: Security issues fixed: - CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308). - CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223). Non-security issues fixed: - Added cfi information for start routines in order to stop unwinding on S390 (bsc#1128574).

Exploit probability Not scored
Published July 23, 2019
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 4 glibc
SUSE:Enterprise Storage 5 glibc
SUSE:Linux Enterprise Server 12 SP2-BCL glibc
SUSE:Linux Enterprise Server 12 SP2-LTSS glibc
SUSE:Linux Enterprise Server 12 SP3-LTSS glibc
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 glibc
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 glibc
SUSE:OpenStack Cloud 7 glibc
SUSE:OpenStack Cloud 8 glibc

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:1958-1

This update for glibc fixes the following issues: Security issues fixed: - CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308). - CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223). Non-security issues fixed: - Added cfi information for start routines in order to stop unwinding on S390 (bsc#1128574).

View original source

05 / REFERENCES

Further evidence