From Moritz Muehlenhoff@21:1/5 to All on Sun Oct 22 13:00:01 2017
XPost: linux.debian.bugs.dist
Package: libc6
Version: 2.24-17
Severity: important
Tags: security
Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670:
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one
error leading to a heap-based buffer overflow in the glob function in
glob.c, related to the processing of home directories using the ~ operator followed by a long string.