{"id":"SUSE-SU-2019:1877-1","summary":"Security update for glibc","details":"This update for glibc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308).\n- CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223).\n\nNon-security issues fixed:\n\n- Does no longer compress debug sections in crt*.o files (bsc#1123710)\n- Fixes a concurrency problem in ldconfig (bsc#1117993)\n- Fixes a race condition in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)\n","modified":"2026-03-11T07:10:16.715811Z","published":"2019-07-18T09:32:06Z","related":["CVE-2009-5155","CVE-2019-9169"],"upstream":["CVE-2009-5155","CVE-2019-9169"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191877-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1117993"},{"type":"REPORT","url":"https://bugzilla.suse.com/1123710"},{"type":"REPORT","url":"https://bugzilla.suse.com/1127223"},{"type":"REPORT","url":"https://bugzilla.suse.com/1127308"},{"type":"REPORT","url":"https://bugzilla.suse.com/1131330"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2009-5155"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-9169"}],"affected":[{"package":{"name":"glibc","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}]}],"ecosystem_specific":{"binaries":[{"glibc-32bit":"2.26-13.24.1","glibc-i18ndata":"2.26-13.24.1","glibc-locale":"2.26-13.24.1","glibc-profile":"2.26-13.24.1","glibc":"2.26-13.24.1","nscd":"2.26-13.24.1","glibc-devel":"2.26-13.24.1","glibc-extra":"2.26-13.24.1","glibc-info":"2.26-13.24.1","glibc-locale-base":"2.26-13.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1877-1.json"}},{"package":{"name":"glibc","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}]}],"ecosystem_specific":{"binaries":[{"glibc-extra":"2.26-13.24.1","glibc-i18ndata":"2.26-13.24.1","glibc-locale-base":"2.26-13.24.1","glibc-locale":"2.26-13.24.1","nscd":"2.26-13.24.1","glibc-32bit":"2.26-13.24.1","glibc-devel":"2.26-13.24.1","glibc-info":"2.26-13.24.1","glibc-profile":"2.26-13.24.1","glibc":"2.26-13.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1877-1.json"}},{"package":{"name":"glibc","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}]}],"ecosystem_specific":{"binaries":[{"glibc-devel-32bit":"2.26-13.24.1","glibc-devel-static":"2.26-13.24.1","glibc-utils":"2.26-13.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1877-1.json"}},{"package":{"name":"glibc","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","purl":"pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.24.1"}]}],"ecosystem_specific":{"binaries":[{"glibc-devel-32bit":"2.26-13.24.1","glibc-devel-static":"2.26-13.24.1","glibc-utils":"2.26-13.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1877-1.json"}}],"schema_version":"1.7.5"}