Security update for glibc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1123-1 Final 1 1 2022-04-06T11:05:42Z current 2022-04-06T11:05:42Z 2022-04-06T11:05:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for glibc This update for glibc fixes the following issues: - CVE-2020-1752: Fix use-after-free in glob when expanding ~user (bsc#1167631) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles12sp3:latest-2022-1123,HPE-Helion-OpenStack-8-2022-1123,SUSE-2022-1123,SUSE-OpenStack-Cloud-8-2022-1123,SUSE-OpenStack-Cloud-Crowbar-8-2022-1123,SUSE-SLE-SAP-12-SP3-2022-1123,SUSE-SLE-SERVER-12-SP2-BCL-2022-1123,SUSE-SLE-SERVER-12-SP3-2022-1123,SUSE-SLE-SERVER-12-SP3-BCL-2022-1123 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221123-1/ Link for SUSE-SU-2022:1123-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010664.html E-Mail link for SUSE-SU-2022:1123-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1167631 SUSE Bug 1167631 https://www.suse.com/security/cve/CVE-2020-1752/ SUSE CVE CVE-2020-1752 page Container suse/sles12sp3:latest HPE Helion OpenStack 8 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 glibc-2.22-123.1 glibc-32bit-2.22-123.1 glibc-devel-2.22-123.1 glibc-devel-32bit-2.22-123.1 glibc-html-2.22-123.1 glibc-i18ndata-2.22-123.1 glibc-info-2.22-123.1 glibc-locale-2.22-123.1 glibc-locale-32bit-2.22-123.1 glibc-profile-2.22-123.1 glibc-profile-32bit-2.22-123.1 nscd-2.22-123.1 glibc-64bit-2.22-123.1 glibc-devel-64bit-2.22-123.1 glibc-devel-static-2.22-123.1 glibc-devel-static-32bit-2.22-123.1 glibc-devel-static-64bit-2.22-123.1 glibc-extra-2.22-123.1 glibc-locale-64bit-2.22-123.1 glibc-obsolete-2.22-123.1 glibc-profile-64bit-2.22-123.1 glibc-utils-2.22-123.1 glibc-utils-32bit-2.22-123.1 glibc-utils-64bit-2.22-123.1 glibc-2.22-123.1 as a component of Container suse/sles12sp3:latest glibc-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-32bit-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-devel-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-devel-32bit-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-html-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-i18ndata-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-info-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-locale-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-locale-32bit-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-profile-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-profile-32bit-2.22-123.1 as a component of HPE Helion OpenStack 8 nscd-2.22-123.1 as a component of HPE Helion OpenStack 8 glibc-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-devel-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-devel-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-html-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-i18ndata-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-info-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-locale-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-locale-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-profile-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-profile-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL nscd-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL glibc-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-devel-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-devel-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-html-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-i18ndata-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-info-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-locale-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-locale-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-profile-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-profile-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL nscd-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL glibc-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-devel-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-devel-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-html-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-i18ndata-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-info-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-locale-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-locale-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-profile-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-profile-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS nscd-2.22-123.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS glibc-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-devel-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-devel-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-html-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-i18ndata-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-info-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-locale-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-locale-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-profile-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-profile-32bit-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 nscd-2.22-123.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 glibc-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-devel-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-devel-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-html-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-i18ndata-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-info-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-locale-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-locale-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-profile-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-profile-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud 8 nscd-2.22-123.1 as a component of SUSE OpenStack Cloud 8 glibc-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-devel-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-devel-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-html-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-i18ndata-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-info-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-locale-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-locale-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-profile-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 glibc-profile-32bit-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 nscd-2.22-123.1 as a component of SUSE OpenStack Cloud Crowbar 8 A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. CVE-2020-1752 Container suse/sles12sp3:latest:glibc-2.22-123.1 HPE Helion OpenStack 8:glibc-2.22-123.1 HPE Helion OpenStack 8:glibc-32bit-2.22-123.1 HPE Helion OpenStack 8:glibc-devel-2.22-123.1 HPE Helion OpenStack 8:glibc-devel-32bit-2.22-123.1 HPE Helion OpenStack 8:glibc-html-2.22-123.1 HPE Helion OpenStack 8:glibc-i18ndata-2.22-123.1 HPE Helion OpenStack 8:glibc-info-2.22-123.1 HPE Helion OpenStack 8:glibc-locale-2.22-123.1 HPE Helion OpenStack 8:glibc-locale-32bit-2.22-123.1 HPE Helion OpenStack 8:glibc-profile-2.22-123.1 HPE Helion OpenStack 8:glibc-profile-32bit-2.22-123.1 HPE Helion OpenStack 8:nscd-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-devel-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-devel-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-html-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-i18ndata-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-info-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-locale-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-locale-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-profile-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:glibc-profile-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP2-BCL:nscd-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-devel-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-devel-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-html-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-i18ndata-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-info-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-locale-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-locale-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-profile-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:glibc-profile-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-BCL:nscd-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-devel-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-devel-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-html-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-i18ndata-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-info-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-locale-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-locale-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-profile-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:glibc-profile-32bit-2.22-123.1 SUSE Linux Enterprise Server 12 SP3-LTSS:nscd-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-32bit-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-devel-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-devel-32bit-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-html-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-i18ndata-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-info-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-locale-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-locale-32bit-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-profile-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:glibc-profile-32bit-2.22-123.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:nscd-2.22-123.1 SUSE OpenStack Cloud 8:glibc-2.22-123.1 SUSE OpenStack Cloud 8:glibc-32bit-2.22-123.1 SUSE OpenStack Cloud 8:glibc-devel-2.22-123.1 SUSE OpenStack Cloud 8:glibc-devel-32bit-2.22-123.1 SUSE OpenStack Cloud 8:glibc-html-2.22-123.1 SUSE OpenStack Cloud 8:glibc-i18ndata-2.22-123.1 SUSE OpenStack Cloud 8:glibc-info-2.22-123.1 SUSE OpenStack Cloud 8:glibc-locale-2.22-123.1 SUSE OpenStack Cloud 8:glibc-locale-32bit-2.22-123.1 SUSE OpenStack Cloud 8:glibc-profile-2.22-123.1 SUSE OpenStack Cloud 8:glibc-profile-32bit-2.22-123.1 SUSE OpenStack Cloud 8:nscd-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-32bit-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-devel-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-devel-32bit-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-html-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-i18ndata-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-info-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-locale-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-locale-32bit-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-profile-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:glibc-profile-32bit-2.22-123.1 SUSE OpenStack Cloud Crowbar 8:nscd-2.22-123.1 important 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221123-1/ https://www.suse.com/security/cve/CVE-2020-1752.html CVE-2020-1752 https://bugzilla.suse.com/1167631 SUSE Bug 1167631