Hello community, here is the log from the commit of package patchinfo.4693 for openSUSE:13.2:Update checked in at 2016-02-18 21:01:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/patchinfo.4693 (Old) and /work/SRC/openSUSE:13.2:Update/.patchinfo.4693.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.4693" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="4693"> <issue id="961721" tracker="bnc">VUL-0: CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow</issue> <issue id="962736" tracker="bnc">VUL-1: CVE-2015-8776: glibc: Passing out of range data to strftime() causes a segfault</issue> <issue id="956716" tracker="bnc">Issue with lock elision and 3rd party software</issue> <issue id="962739" tracker="bnc">VUL-1: CVE-2015-8779: glibc: catopen() Multiple unbounded stack allocations</issue> <issue id="962738" tracker="bnc">VUL-1: CVE-2014-9761: glibc: nan function unbounded stack allocation</issue> <issue id="962737" tracker="bnc">VUL-1: CVE-2015-8778: glibc: hcreate((size_t)-1) should fail with ENOMEM</issue> <issue id="958315" tracker="bnc">dl_load_write_lock isn't reinitialised during fork</issue> <issue id="CVE-2015-8779" tracker="cve" /> <issue id="CVE-2015-8778" tracker="cve" /> <issue id="CVE-2015-8776" tracker="cve" /> <issue id="CVE-2015-7547" tracker="cve" /> <issue id="CVE-2014-9761" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>AndreasStieger</packager> <description> This update for glibc fixes the following issues: - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (boo#956716, BZ #17514) - reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (boo#958315, BZ #19282) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, boo#961721, BZ #18665) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, boo#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, boo#962737, BZ #18240) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, boo#962738, BZ #16962) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, boo#962739, BZ #17905) </description> <summary>Security update for glibc</summary> </patchinfo>