QID 671092

The glibc package contains standard libraries which are used by multiple programs on the system.
In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs.
This particular package contains the most important sets of shared libraries: the standard c library and the standard math library.
Without these two libraries, a linux system will not function.
Security fix(es): in the gnu c library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an ipv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded http headers or other potentially dangerous substrings.(cve-2016-10739) use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the gnu c library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.(cve-2017-12133) stack-based buffer overflow in the glob implementation in gnu c library (aka glibc) before 2.24, when glob_altdirfunc is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.(cve-2016-1234)

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

An arbitrary attacker may exploit this vulnerability to compromise the system.