bugtraq - [ MDVSA-2014:232 ] glibc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <E1Xtwse-0001l5-Th@titan.mandriva.com>
Date: Thu, 27 Nov 2014 12:05:00 +0100
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDVSA-2014:232 ] glibc

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2014:232
 http://www.mandriva.com/en/support/security/
 _______________________________________________________________________

 Package : glibc
 Date    : November 27, 2014
 Affected: Business Server 1.0
 _______________________________________________________________________

 Problem Description:

 Updated glibc package fixes security vulnerability:
 
 The function wordexp\(\) fails to properly handle the WRDE_NOCMD
 flag when processing arithmetic inputs in the form of $((... ``))
 where ... can be anything valid. The backticks in the arithmetic
 epxression are evaluated by in a shell even if WRDE_NOCMD forbade
 command substitution. This allows an attacker to attempt to pass
 dangerous commands via constructs of the above form, and bypass the
 WRDE_NOCMD flag. This update fixes the issue (CVE-2014-7817).
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7817
 http://advisories.mageia.org/MGASA-2014-0496.html
 _______________________________________________________________________

 Updated Packages:

 Mandriva Business Server 1/X86_64:
 87ae1aa0260d5f271b8a49df1ca96c92  mbs1/x86_64/glibc-2.14.1-12.10.mbs1.x86_64.rpm
 fbdc85e27c41425f5f0faa17226e2fa4  mbs1/x86_64/glibc-devel-2.14.1-12.10.mbs1.x86_64.rpm
 729c49b58fbb5ba6fb3ce703ec8d9353  mbs1/x86_64/glibc-doc-2.14.1-12.10.mbs1.noarch.rpm
 a14e93fbabc854d6d913c20c33a7b060  mbs1/x86_64/glibc-doc-pdf-2.14.1-12.10.mbs1.noarch.rpm
 b3f4903a52588c6b391ed234cacfc4fd  mbs1/x86_64/glibc-i18ndata-2.14.1-12.10.mbs1.x86_64.rpm
 1363d9159b189daaa0b4933e9d645480  mbs1/x86_64/glibc-profile-2.14.1-12.10.mbs1.x86_64.rpm
 7a2f3ec56db9f916897338ce764b65ed  mbs1/x86_64/glibc-static-devel-2.14.1-12.10.mbs1.x86_64.rpm
 7941468822129b1034c7284a49539864  mbs1/x86_64/glibc-utils-2.14.1-12.10.mbs1.x86_64.rpm
 dc952727199d879d209e102c2b938c3b  mbs1/x86_64/nscd-2.14.1-12.10.mbs1.x86_64.rpm 
 5e1ca0b6bd6d1b095459d6e9de32e663  mbs1/SRPMS/glibc-2.14.1-12.10.mbs1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/en/support/security/advisories/

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFUdvdRmqjQ0CJFipgRArw8AJwNC712ClfzCbT7gqXDVCtml2JSQwCgzLFa
rkKj1OpuF/CX1tRhPAYXRHw=
=8D8z
-----END PGP SIGNATURE-----