Arch Linux Information for VU#967332

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow

Status

Affected

Vendor Statement

"Arch Linux is not vulnerable. [Arch Linux is] on a modern version of glibc so [Arch Linux] should have been safe for 18+ months."

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

None

Addendum

If using an edition of Arch Linux older than about 18 months, you may wish to check with the vendor to find out if you need to upgrade.

If you have feedback, comments, or additional information about this vulnerability, please send us email.