Gentoo has issued an update for glibc. This fixes multiple weaknesses and vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and cause a DoS (Denial of Service) and by malicious people to potentially compromise a vulnerable system.

1) Integer overflows in the libc "strfmon()" function can be exploited to cause a crash or potentially execute arbitrary code via specially crafted format specifiers.

2) The mntent function family does not correctly handle newlines characters. This can be exploited to e.g. cause a DoS or gain escalated privileges, but requires that an attacker can inject newline characters into a mount entry (e.g. via vulnerable mount helpers).

3) A signedness error when processing certain ELF headers can be exploited to e.g. execute arbitrary code via a specially crafted ELF file.

For more information:
SA41795

Solution
Update to version "sys-libs/glibc-2.11.2-r3" or later.
Original Advisory
GLSA 201011-01:
http://www.gentoo.org/security/en/glsa/glsa-201011-01.xml

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers