{"affected":[{"ecosystem_specific":{"binaries":[{"glibc":"2.26-13.24.1","glibc-32bit":"2.26-13.24.1","glibc-devel":"2.26-13.24.1","glibc-extra":"2.26-13.24.1","glibc-i18ndata":"2.26-13.24.1","glibc-info":"2.26-13.24.1","glibc-locale":"2.26-13.24.1","glibc-locale-base":"2.26-13.24.1","glibc-profile":"2.26-13.24.1","nscd":"2.26-13.24.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","name":"glibc","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"glibc":"2.26-13.24.1","glibc-32bit":"2.26-13.24.1","glibc-devel":"2.26-13.24.1","glibc-extra":"2.26-13.24.1","glibc-i18ndata":"2.26-13.24.1","glibc-info":"2.26-13.24.1","glibc-locale":"2.26-13.24.1","glibc-locale-base":"2.26-13.24.1","glibc-profile":"2.26-13.24.1","nscd":"2.26-13.24.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","name":"glibc","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"glibc-devel-32bit":"2.26-13.24.1","glibc-devel-static":"2.26-13.24.1","glibc-utils":"2.26-13.24.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","name":"glibc","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"glibc-devel-32bit":"2.26-13.24.1","glibc-devel-static":"2.26-13.24.1","glibc-utils":"2.26-13.24.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","name":"glibc","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for glibc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308).\n- CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223).\n\nNon-security issues fixed:\n\n- Does no longer compress debug sections in crt*.o files (bsc#1123710)\n- Fixes a concurrency problem in ldconfig (bsc#1117993)\n- Fixes a race condition in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)\n","id":"SUSE-SU-2019:1877-1","modified":"2019-07-18T09:32:06Z","published":"2019-07-18T09:32:06Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191877-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1117993"},{"type":"REPORT","url":"https://bugzilla.suse.com/1123710"},{"type":"REPORT","url":"https://bugzilla.suse.com/1127223"},{"type":"REPORT","url":"https://bugzilla.suse.com/1127308"},{"type":"REPORT","url":"https://bugzilla.suse.com/1131330"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2009-5155"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-9169"}],"related":["CVE-2009-5155","CVE-2019-9169"],"summary":"Security update for glibc","upstream":["CVE-2009-5155","CVE-2019-9169"]}