MGASA-2023-0270

Advisory lineage Upstream: 2 Downstream: 0
Published: 27 Sept 2023, 16:31
Last modified:16 Apr 2026, 04:22

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Sept 2023, 16:31
Published
Vulnerability first disclosed
16 Apr 2026, 04:22
Last Modified
Vulnerability information updated

Description

Updated glibc packages fix security and other bugs getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806) Stack read overflow with large TCP responses in no-aaaa mode (CVE-2023-4527) elf: Introduce to _dl_call_fini elf: Do not run constructors for proxy objects elf: Always call destructors in reverse constructor order [BZ #30785] elf: Remove unused l_text_end field from struct link_map elf: Move l_init_called_next to old place of l_text_end in link map elf: Fix slow tls access after dlopen [BZ #19924] intl: Treat C.UTF-8 locale like C locale [BZ# 16621] x86: Increase non_temporal_threshold to roughly "sizeof_L3 / 4" x86: Fix slight bug in shared_per_thread cache size calculation x86: Use 3/4*sizeof(per-thread-L3) as low bound for NT threshold x86: Fix incorrect scope of setting shared_per_thread [BZ #30745]

Affected Systems

  • mageia•glibc

    < 2.36-49.mga9

References (4)