Red Hat Customer Portal

Skip to main content

Main Navigation

  • Products & Services
    • Back
    • View All Products
    • Infrastructure and Management
      • Back
      • Red Hat Enterprise Linux
      • Red Hat Virtualization
      • Red Hat Identity Management
      • Red Hat Directory Server
      • Red Hat Certificate System
      • Red Hat Satellite
      • Red Hat Subscription Management
      • Red Hat Update Infrastructure
      • Red Hat Insights
      • Red Hat Ansible Automation Platform
    • Cloud Computing
      • Back
      • Red Hat CloudForms
      • Red Hat OpenStack Platform
      • Red Hat OpenShift Container Platform
      • Red Hat OpenShift Online
      • Red Hat OpenShift Dedicated
      • Red Hat Advanced Cluster Management for Kubernetes
      • Red Hat Quay
      • Red Hat CodeReady Workspaces
    • Storage
      • Back
      • Red Hat Gluster Storage
      • Red Hat Hyperconverged Infrastructure
      • Red Hat Ceph Storage
      • Red Hat Openshift Container Storage
    • Runtimes
      • Back
      • Red Hat Runtimes
      • Red Hat JBoss Enterprise Application Platform
      • Red Hat Data Grid
      • Red Hat JBoss Web Server
      • Red Hat Single Sign On
      • Red Hat support for Spring Boot
      • Red Hat build of Node.js
      • Red Hat build of Thorntail
      • Red Hat build of Eclipse Vert.x
      • Red Hat build of OpenJDK
      • Red Hat build of Quarkus
      • Red Hat CodeReady Studio
    • Integration and Automation
      • Back
      • Red Hat Integration
      • Red Hat Fuse
      • Red Hat AMQ
      • Red Hat 3scale API Management
      • Red Hat JBoss Data Virtualization
      • Red Hat Process Automation
      • Red Hat Process Automation Manager
      • Red Hat Decision Manager
    • Support
    • Production Support
    • Development Support
    • Product Life Cycles
    • Documentation
    • Red Hat Enterprise Linux
    • Red Hat JBoss Enterprise Application Platform
    • Red Hat OpenStack Platform
    • Red Hat OpenShift Container Platform
    • Services
    • Consulting
    • Technical Account Management
    • Training & Certifications
    • Ecosystem Catalog
    • Partner Resources
    • Red Hat in the Public Cloud
  • Tools
    • Back
    • Red Hat Insights
    • Tools
    • Solution Engine
    • Packages
    • Errata
    • Customer Portal Labs
    • Explore Labs
    • Configuration
    • Deployment
    • Security
    • Troubleshooting
  • Security
    • Back
    • Product Security Center
    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Security Labs
    • Resources
    • Overview
    • Security Blog
    • Security Measurement
    • Severity Ratings
    • Backporting Policies
    • Product Signing (GPG) Keys
  • Community
    • Back
    • Customer Portal Community
    • Discussions
    • Blogs
    • Private Groups
    • Community Activity
    • Customer Events
    • Red Hat Convergence
    • Red Hat Summit
    • Stories
    • Red Hat Subscription Value
    • You Asked. We Acted.
    • Open Source Communities
  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
  • Account
    • Back
    • Log In
    • Register
    • Red Hat Account Number:
    • Account Details
    • User Management
    • Account Maintenance
    • My Profile
    • Notifications
    • Help
    • Log Out
  • Language
    • Back
    • English
    • 한국어
    • 日本語
    • 中文 (中国)
Red Hat Customer Portal
  • Products & Services
    • Back
    • View All Products
    • Infrastructure and Management
      • Back
      • Red Hat Enterprise Linux
      • Red Hat Virtualization
      • Red Hat Identity Management
      • Red Hat Directory Server
      • Red Hat Certificate System
      • Red Hat Satellite
      • Red Hat Subscription Management
      • Red Hat Update Infrastructure
      • Red Hat Insights
      • Red Hat Ansible Automation Platform
    • Cloud Computing
      • Back
      • Red Hat CloudForms
      • Red Hat OpenStack Platform
      • Red Hat OpenShift Container Platform
      • Red Hat OpenShift Online
      • Red Hat OpenShift Dedicated
      • Red Hat Advanced Cluster Management for Kubernetes
      • Red Hat Quay
      • Red Hat CodeReady Workspaces
    • Storage
      • Back
      • Red Hat Gluster Storage
      • Red Hat Hyperconverged Infrastructure
      • Red Hat Ceph Storage
      • Red Hat Openshift Container Storage
    • Runtimes
      • Back
      • Red Hat Runtimes
      • Red Hat JBoss Enterprise Application Platform
      • Red Hat Data Grid
      • Red Hat JBoss Web Server
      • Red Hat Single Sign On
      • Red Hat support for Spring Boot
      • Red Hat build of Node.js
      • Red Hat build of Thorntail
      • Red Hat build of Eclipse Vert.x
      • Red Hat build of OpenJDK
      • Red Hat build of Quarkus
      • Red Hat CodeReady Studio
    • Integration and Automation
      • Back
      • Red Hat Integration
      • Red Hat Fuse
      • Red Hat AMQ
      • Red Hat 3scale API Management
      • Red Hat JBoss Data Virtualization
      • Red Hat Process Automation
      • Red Hat Process Automation Manager
      • Red Hat Decision Manager
    • Support
    • Production Support
    • Development Support
    • Product Life Cycles
    • Documentation
    • Red Hat Enterprise Linux
    • Red Hat JBoss Enterprise Application Platform
    • Red Hat OpenStack Platform
    • Red Hat OpenShift Container Platform
    • Services
    • Consulting
    • Technical Account Management
    • Training & Certifications
    • Ecosystem Catalog
    • Partner Resources
    • Red Hat in the Public Cloud
  • Tools
    • Back
    • Red Hat Insights
    • Tools
    • Solution Engine
    • Packages
    • Errata
    • Customer Portal Labs
    • Explore Labs
    • Configuration
    • Deployment
    • Security
    • Troubleshooting
  • Security
    • Back
    • Product Security Center
    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Security Labs
    • Resources
    • Overview
    • Security Blog
    • Security Measurement
    • Severity Ratings
    • Backporting Policies
    • Product Signing (GPG) Keys
  • Community
    • Back
    • Customer Portal Community
    • Discussions
    • Blogs
    • Private Groups
    • Community Activity
    • Customer Events
    • Red Hat Convergence
    • Red Hat Summit
    • Stories
    • Red Hat Subscription Value
    • You Asked. We Acted.
    • Open Source Communities
  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
  • Account
    • Back
    • Log In
    • Register
    • Red Hat Account Number:
    • Account Details
    • User Management
    • Account Maintenance
    • My Profile
    • Notifications
    • Help
    • Log Out
  • Language
    • Back
    • English
    • 한국어
    • 日本語
    • 中文 (中国)
  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
  • Search
  • Log In
  • Language
Or troubleshoot an issue.

Log in to Your Red Hat Account

Log In

Your Red Hat account gives you access to your profile, preferences, and services, depending on your status.

Register

If you are a new customer, register now for access to product evaluations and purchasing capabilities.

Need access to an account?

If your company has an existing Red Hat account, your organization administrator can grant you access.

If you have any questions, please contact customer service.

Red Hat Account Number:

Red Hat Account

  • Account Details
  • User Management
  • Account Maintenance
  • Account Team

Customer Portal

  • My Profile
  • Notifications
  • Help

For your security, if you’re on a public computer and have finished using your Red Hat services, please be sure to log out.

Log Out

Select Your Language

  • English
  • 한국어
  • 日本語
  • 中文 (中国)
Red Hat Customer Portal Red Hat Customer Portal
  • Products & Services
  • Tools
  • Security
  • Community
  • Infrastructure and Management

  • Cloud Computing

  • Storage

  • Runtimes

  • Integration and Automation

  • Red Hat Enterprise Linux
  • Red Hat Virtualization
  • Red Hat Identity Management
  • Red Hat Directory Server
  • Red Hat Certificate System
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Update Infrastructure
  • Red Hat Insights
  • Red Hat Ansible Automation Platform
  • Red Hat CloudForms
  • Red Hat OpenStack Platform
  • Red Hat OpenShift Container Platform
  • Red Hat OpenShift Online
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat CodeReady Workspaces
  • Red Hat OpenShift Service on AWS
  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat Openshift Container Storage
  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat Single Sign On
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Thorntail
  • Red Hat build of Eclipse Vert.x
  • Red Hat build of OpenJDK
  • Red Hat build of Quarkus
  • Red Hat CodeReady Studio
  • Red Hat Integration
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
  • Red Hat JBoss Data Virtualization
  • Red Hat Process Automation
  • Red Hat Process Automation Manager
  • Red Hat Decision Manager
View All Products
  • Support
  • Production Support
  • Development Support
  • Product Life Cycles

Services

  • Consulting
  • Technical Account Management
  • Training & Certifications
  • Documentation
  • Red Hat Enterprise Linux
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat OpenStack Platform
  • Red Hat OpenShift Container Platform
  • Ecosystem Catalog
  • Red Hat in the Public Cloud
  • Partner Resources

Tools

  • Solution Engine
  • Packages
  • Errata
  • Customer Portal Labs
  • Configuration
  • Deployment
  • Security
  • Troubleshooting

Red Hat Insights

Increase visibility into IT operations to detect and resolve technical issues before they impact your business.

  • Learn more
  • Go to Insights

Red Hat Product Security Center

Engage with our Red Hat Product Security team, access security updates, and ensure your environments are not exposed to any known security vulnerabilities.

Product Security Center

Security Updates

  • Security Advisories
  • Red Hat CVE Database
  • Security Labs

Keep your systems secure with Red Hat's specialized responses to security vulnerabilities.

  • View Responses

Resources

  • Overview
  • Security Blog
  • Security Measurement
  • Severity Ratings
  • Backporting Policies
  • Product Signing (GPG) Keys

Customer Portal Community

  • Discussions
  • Blogs
  • Private Groups
  • Community Activity

Customer Events

  • Red Hat Convergence
  • Red Hat Summit

Stories

  • Red Hat Subscription Value
  • You Asked. We Acted.
  • Open Source Communities
Red Hat Product Errata RHSA-2015:0101 - Security Advisory
Issued:
2015-01-28
Updated:
2015-01-28

RHSA-2015:0101 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Critical: glibc security update

Type/Severity

Security Advisory: Critical

Topic

Updated glibc packages that fix one security issue are now available for
Red Hat Enterprise Linux 4 Extended Life Cycle Support.

Red Hat Product Security has rated this update as having Critical security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The glibc packages provide the standard C libraries (libc), POSIX thread
libraries (libpthread), standard math libraries (libm), and the Name
Server Caching Daemon (nscd) used by multiple programs on the system.
Without these libraries, the Linux system cannot function correctly.

A heap-based buffer overflow was found in glibc's
__nss_hostname_digits_dots() function, which is used by the gethostbyname()
and gethostbyname2() glibc function calls. A remote attacker able to make
an application call either of these functions could use this flaw to
execute arbitrary code with the permissions of the user running the
application. (CVE-2015-0235)

Red Hat would like to thank Qualys for reporting this issue.

All glibc users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 4 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 4 ia64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 4 i386

Fixes

  • BZ - 1183461 - CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow

CVEs

  • CVE-2015-0235

References

  • https://access.redhat.com/security/updates/classification/#critical
  • Note: More recent versions of these packages may be available. Click a package name for more details.

    Red Hat Enterprise Linux Server - Extended Life Cycle Support 4

    SRPM
    glibc-2.3.4-2.57.el4.2.src.rpm SHA-256: 07054cb3f0da72cbc5585438397fecdef17e0e400aac6ebdc63698194dba567c
    x86_64
    glibc-2.3.4-2.57.el4.2.i686.rpm SHA-256: 710c36189d6bff2481430ea4118de85010d7467dd85f595ff63b079470dd87d0
    glibc-2.3.4-2.57.el4.2.i686.rpm SHA-256: 710c36189d6bff2481430ea4118de85010d7467dd85f595ff63b079470dd87d0
    glibc-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 714f186b1ca5f9376659436e4d9673344b0bedb73fc18dfaf3dbe69a3ab02856
    glibc-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 714f186b1ca5f9376659436e4d9673344b0bedb73fc18dfaf3dbe69a3ab02856
    glibc-common-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 306f6b61c0e09377f61963e0ec7102e15ba4deca45c1aa63cc6018e4e1a332f7
    glibc-common-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 306f6b61c0e09377f61963e0ec7102e15ba4deca45c1aa63cc6018e4e1a332f7
    glibc-devel-2.3.4-2.57.el4.2.i386.rpm SHA-256: 6e2e1404c23dc0aefe97f7f8ecec362dc297ad895fcc074db89cd2f6683cfed5
    glibc-devel-2.3.4-2.57.el4.2.i386.rpm SHA-256: 6e2e1404c23dc0aefe97f7f8ecec362dc297ad895fcc074db89cd2f6683cfed5
    glibc-devel-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 5598615952ca74682e08353a85b2254b8dce86f162657d03d5416553af4c5c72
    glibc-devel-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 5598615952ca74682e08353a85b2254b8dce86f162657d03d5416553af4c5c72
    glibc-headers-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 5f7b60c1699110569d0c41db8a3e47028565ca09899b38e4a30e4ead11c4eb2c
    glibc-headers-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 5f7b60c1699110569d0c41db8a3e47028565ca09899b38e4a30e4ead11c4eb2c
    glibc-profile-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 46f29697a4df76d7ea03891e53cffce4fcf87d0ff459d952c148bf5099381f23
    glibc-profile-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 46f29697a4df76d7ea03891e53cffce4fcf87d0ff459d952c148bf5099381f23
    glibc-utils-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: cc59d5fdb521cb683ec70fbfd78b58e2b302379229e9fe568b8688d1c5f36063
    glibc-utils-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: cc59d5fdb521cb683ec70fbfd78b58e2b302379229e9fe568b8688d1c5f36063
    nptl-devel-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 665a371417990943e1a3a2ceb5141bf29166d7b6aee00d3b041502fe6cdfd798
    nptl-devel-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: 665a371417990943e1a3a2ceb5141bf29166d7b6aee00d3b041502fe6cdfd798
    nscd-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: a7bae3667f85cfff8d3e61415efbdb04b3a98941b1e499139a4130c5475080f3
    nscd-2.3.4-2.57.el4.2.x86_64.rpm SHA-256: a7bae3667f85cfff8d3e61415efbdb04b3a98941b1e499139a4130c5475080f3
    ia64
    glibc-2.3.4-2.57.el4.2.i686.rpm SHA-256: 710c36189d6bff2481430ea4118de85010d7467dd85f595ff63b079470dd87d0
    glibc-2.3.4-2.57.el4.2.ia64.rpm SHA-256: b7b1c85a48e66f05eb17ebf61bdfdb1c284fd640fd3683f8121fabc797a4421e
    glibc-common-2.3.4-2.57.el4.2.ia64.rpm SHA-256: 88a0e00358fd93bef6267a4594749ad58ae73399590192ce6c487d4e8a4f879e
    glibc-devel-2.3.4-2.57.el4.2.ia64.rpm SHA-256: d80ad88b4915cc19a5417e1101da0e4bf2d3be79d153f4ef7f096ecff9fcd40a
    glibc-headers-2.3.4-2.57.el4.2.ia64.rpm SHA-256: a3d463d7c1e5438e3775539795dffbdf4da7c34745f401e822e7558d29e8f14a
    glibc-profile-2.3.4-2.57.el4.2.ia64.rpm SHA-256: 7c89797774e5c687a39a1456fe39c9b91cdf90c68ace8daf5af7299ee019c299
    glibc-utils-2.3.4-2.57.el4.2.ia64.rpm SHA-256: e7bdb60699e868799e443a6bc68d93c0d8c08a1f508336859a2d291cb2b5598d
    nptl-devel-2.3.4-2.57.el4.2.ia64.rpm SHA-256: 9e0fce30c934560a3c61f4fa80235a6617bda787f64d942879885e1f4dac505d
    nscd-2.3.4-2.57.el4.2.ia64.rpm SHA-256: d0e4cf0ced2f4cc4cd245d4a86974935dc9510855f6e97de76daf3611d7d5dcd
    i386
    glibc-2.3.4-2.57.el4.2.i386.rpm SHA-256: d9d19fca30601a3d6309a6c5b8619d032a3d42ac4e0a7375ffcdce6b6e4c2ba7
    glibc-2.3.4-2.57.el4.2.i386.rpm SHA-256: d9d19fca30601a3d6309a6c5b8619d032a3d42ac4e0a7375ffcdce6b6e4c2ba7
    glibc-2.3.4-2.57.el4.2.i686.rpm SHA-256: 710c36189d6bff2481430ea4118de85010d7467dd85f595ff63b079470dd87d0
    glibc-2.3.4-2.57.el4.2.i686.rpm SHA-256: 710c36189d6bff2481430ea4118de85010d7467dd85f595ff63b079470dd87d0
    glibc-common-2.3.4-2.57.el4.2.i386.rpm SHA-256: b0ea4cc7799f43ef6b8a3a41ff16519c19836d8acb0fe75306c982a19e545820
    glibc-common-2.3.4-2.57.el4.2.i386.rpm SHA-256: b0ea4cc7799f43ef6b8a3a41ff16519c19836d8acb0fe75306c982a19e545820
    glibc-devel-2.3.4-2.57.el4.2.i386.rpm SHA-256: 6e2e1404c23dc0aefe97f7f8ecec362dc297ad895fcc074db89cd2f6683cfed5
    glibc-devel-2.3.4-2.57.el4.2.i386.rpm SHA-256: 6e2e1404c23dc0aefe97f7f8ecec362dc297ad895fcc074db89cd2f6683cfed5
    glibc-headers-2.3.4-2.57.el4.2.i386.rpm SHA-256: 3578922da3750436b0708b16f49a91b9ad29db10a715c2c71d3ec386b91479c4
    glibc-headers-2.3.4-2.57.el4.2.i386.rpm SHA-256: 3578922da3750436b0708b16f49a91b9ad29db10a715c2c71d3ec386b91479c4
    glibc-profile-2.3.4-2.57.el4.2.i386.rpm SHA-256: 91ef3b9707e605ca7662e7b42714a17e1b60075c00eec318dc939cdb83762245
    glibc-profile-2.3.4-2.57.el4.2.i386.rpm SHA-256: 91ef3b9707e605ca7662e7b42714a17e1b60075c00eec318dc939cdb83762245
    glibc-utils-2.3.4-2.57.el4.2.i386.rpm SHA-256: d528dace670e25d58b87bf5fccf22a8b6365d7fa28f9dec26a31c8d86a54c331
    glibc-utils-2.3.4-2.57.el4.2.i386.rpm SHA-256: d528dace670e25d58b87bf5fccf22a8b6365d7fa28f9dec26a31c8d86a54c331
    nptl-devel-2.3.4-2.57.el4.2.i386.rpm SHA-256: ec848d9ee4548ae102ea2753959373c16fa2489b75b328d2bd7d4cc645ff2cfe
    nptl-devel-2.3.4-2.57.el4.2.i386.rpm SHA-256: ec848d9ee4548ae102ea2753959373c16fa2489b75b328d2bd7d4cc645ff2cfe
    nptl-devel-2.3.4-2.57.el4.2.i686.rpm SHA-256: 1bc215d4cd7cf8f157fba7699125ff89d515556ed27796a616c032506258b97c
    nptl-devel-2.3.4-2.57.el4.2.i686.rpm SHA-256: 1bc215d4cd7cf8f157fba7699125ff89d515556ed27796a616c032506258b97c
    nscd-2.3.4-2.57.el4.2.i386.rpm SHA-256: a225ed8305366e40b8225333b86ab8a0c6a6701e0c2b1bdc8dce64514ce7944a
    nscd-2.3.4-2.57.el4.2.i386.rpm SHA-256: a225ed8305366e40b8225333b86ab8a0c6a6701e0c2b1bdc8dce64514ce7944a

    The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

    Red Hat

    Quick Links

    • Downloads
    • Subscriptions
    • Support Cases
    • Customer Service
    • Product Documentation

    Help

    • Contact Us
    • Customer Portal FAQ
    • Log-in Assistance

    Site Info

    • Trust Red Hat
    • Browser Support Policy
    • Accessibility
    • Awards and Recognition
    • Colophon

    Related Sites

    • redhat.com
    • openshift.com
    • developers.redhat.com
    • connect.redhat.com

    About

    • Red Hat Subscription Value
    • About Red Hat
    • Red Hat Jobs
    Copyright © 2021 Red Hat, Inc.
    • Privacy Statement
    • Customer Portal Terms of Use
    • All Policies and Guidelines
    Red Hat Summit
    Twitter Facebook