Vulnerability Bulletins |
DSA-2976 eglibc - security update |
|
| Affected software | Debian |
|
Stephane Chazelas discovered that the GNU C library, glibc, processed".." path segments in locale-related environment variables, possiblyallowing attackers to circumvent intended restrictions, such asForceCommand in OpenSSH, assuming that they can supply crafted localesettings. More info: https://www.debian.org/security/2014/dsa-2976 |
|