{"id":"CLSA-2021-1635459213","summary":"Fix CVE(s): CVE-2021-33574, CVE-2021-38604, CVE-2021-35942","details":"\n   * debian/patches/any/add-pthread-attr-copy.patch: adopt\n     pthread_attr_copy functionality.\n   * debian/patches/any/add-test-for-pthread-attr-copy.patch: add\n     test case for it.\n   * SECURITY UPDATE: Use-after-free in mq_notify\n     - debian/patches/any/CVE-2021-33574.patch: use __pthread_attr_copy\n       to completely duplicate thread attribute, avoid NULL pointer\n       dereference in helper_thread as per CVE-2021-38604.\n     - CVE-2021-33574\n     - CVE-2021-38604\n   * SECURITY UPDATE: Out-of-bounds read in wordexp\n     - debian/patches/any/CVE-2021-35942.patch: use strtoul and\n       'unsigned long' to prevent signed integer overflow\n       in array index.\n     - CVE-2021-35942","modified":"2026-06-04T10:04:39.302727088Z","published":"2021-10-28T22:13:33Z","upstream":["CVE-2021-33574","CVE-2021-35942","CVE-2021-38604"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635459213"}],"affected":[{"package":{"name":"glibc-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/glibc-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"glibc-source","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/glibc-source?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc-bin","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc-bin?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc-dev-bin","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc-dev-bin?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6-dev-i386","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6-dev-i386?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6-dev-x32","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6-dev-x32?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6-i386","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6-i386?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6-pic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6-pic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"libc6-x32","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libc6-x32?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"locales","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/locales?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"locales-all","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/locales-all?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"multiarch-support","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/multiarch-support?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}},{"package":{"name":"nscd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/nscd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459213.json"}}],"schema_version":"1.7.5"}