DSA-1973-1 glibc, eglibc -- information disclosure

Related Vulnerabilities: CVE-2010-0015  

Christoph Pleger has discovered that the GNU C Library (aka glibc) and its derivatives add information from the passwd.adjunct.byname map to entries in the passwd map, which allows local users to obtain the encrypted passwords of NIS accounts by calling the getpwnam function. For the oldstable distribution (etch), this problem has been fixed in version 2.3.6.ds1-13etch10 of the glibc package. For the stable distribution (lenny), this problem has been fixed in version 2.7-18lenny2 of the glibc package. For the unstable distribution (sid) this problem has been fixed in version 2.10.2-4 of the eglibc package. We recommend that you upgrade your glibc or eglibc package.

Debian Security Advisory

DSA-1973-1 glibc, eglibc -- information disclosure

Date Reported:
19 Jan 2010
Affected Packages:
glibc, eglibc
Vulnerable:
Yes
Security database references:
In the Debian bugtracking system: Bug 560333.
In Mitre's CVE dictionary: CVE-2010-0015.
More information:

Christoph Pleger has discovered that the GNU C Library (aka glibc) and its derivatives add information from the passwd.adjunct.byname map to entries in the passwd map, which allows local users to obtain the encrypted passwords of NIS accounts by calling the getpwnam function.

For the oldstable distribution (etch), this problem has been fixed in version 2.3.6.ds1-13etch40 of the glibc package.

For the stable distribution (lenny), this problem has been fixed in version 2.7-18lenny2 of the glibc package.

For the unstable distribution (sid) this problem has been fixed in version 2.10.2-4 of the eglibc package.

We recommend that you upgrade your glibc or eglibc package.

Fixed in:

Debian GNU/Linux 4.0 (etch)

Source:
http://security.debian.org/pool/updates/main/g/glibc/glibc_2.3.6.ds1-13etch40.dsc
http://security.debian.org/pool/updates/main/g/glibc/glibc_2.3.6.ds1-13etch40.diff.gz
http://security.debian.org/pool/updates/main/g/glibc/glibc_2.3.6.ds1.orig.tar.gz
Architecture-independent component:
http://security.debian.org/pool/updates/main/g/glibc/glibc-doc_2.3.6.ds1-13etch40_all.deb
http://security.debian.org/pool/updates/main/g/glibc/locales_2.3.6.ds1-13etch40_all.deb
Alpha:
http://security.debian.org/pool/updates/main/g/glibc/libc6.1_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-udeb_2.3.6.ds1-13etch40_alpha.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-prof_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-pic_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dbg_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_alpha.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dev_2.3.6.ds1-13etch40_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_alpha.udeb
AMD64:
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_amd64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_amd64.udeb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-i386_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_amd64.udeb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-i386_2.3.6.ds1-13etch40_amd64.deb
ARM:
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_arm.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_arm.udeb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_arm.udeb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_arm.deb
HP Precision:
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_hppa.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_hppa.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_hppa.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_hppa.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_i386.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-xen_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-i686_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-amd64_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-amd64_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_i386.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_i386.udeb
Intel IA-64:
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-udeb_2.3.6.ds1-13etch40_ia64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dev_2.3.6.ds1-13etch40_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_ia64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-prof_2.3.6.ds1-13etch40_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1_2.3.6.ds1-13etch40_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_ia64.udeb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dbg_2.3.6.ds1-13etch40_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-pic_2.3.6.ds1-13etch40_ia64.deb
Little-endian MIPS:
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_mipsel.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_mipsel.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_mipsel.udeb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_mipsel.deb
PowerPC:
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_powerpc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_powerpc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-ppc64_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-ppc64_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_powerpc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_powerpc.deb
IBM S/390:
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_s390.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-s390x_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_s390.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-s390x_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_s390.udeb
Sun Sparc:
http://security.debian.org/pool/updates/main/g/glibc/libc6-sparcv9b_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-sparc64_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.3.6.ds1-13etch40_sparc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.3.6.ds1-13etch40_sparc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-sparcv9_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-sparc64_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.3.6.ds1-13etch40_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.3.6.ds1-13etch40_sparc.udeb

Debian GNU/Linux 5.0 (lenny)

Source:
http://security.debian.org/pool/updates/main/g/glibc/glibc_2.7.orig.tar.gz
http://security.debian.org/pool/updates/main/g/glibc/glibc_2.7-18lenny2.diff.gz
http://security.debian.org/pool/updates/main/g/glibc/glibc_2.7-18lenny2.dsc
Architecture-independent component:
http://security.debian.org/pool/updates/main/g/glibc/locales_2.7-18lenny2_all.deb
http://security.debian.org/pool/updates/main/g/glibc/glibc-doc_2.7-18lenny2_all.deb
http://security.debian.org/pool/updates/main/g/glibc/glibc-source_2.7-18lenny2_all.deb
Alpha:
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dbg_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-pic_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-prof_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_alpha.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-udeb_2.7-18lenny2_alpha.udeb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_alpha.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dev_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-alphaev67_2.7-18lenny2_alpha.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_alpha.deb
AMD64:
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-i386_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_amd64.udeb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_amd64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_amd64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_amd64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-i386_2.7-18lenny2_amd64.deb
ARM:
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_arm.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_arm.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_arm.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_arm.udeb
ARM EABI:
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_armel.udeb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_armel.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_armel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_armel.udeb
HP Precision:
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_hppa.udeb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_hppa.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_hppa.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_hppa.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_hppa.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-i686_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-amd64_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_i386.udeb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_i386.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_i386.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-xen_2.7-18lenny2_i386.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-amd64_2.7-18lenny2_i386.deb
Intel IA-64:
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dbg_2.7-18lenny2_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_ia64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-prof_2.7-18lenny2_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1_2.7-18lenny2_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_ia64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-udeb_2.7-18lenny2_ia64.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-pic_2.7-18lenny2_ia64.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6.1-dev_2.7-18lenny2_ia64.deb
Big-endian MIPS:
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-mips64_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-mips64_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-mipsn32_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_mips.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-mipsn32_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_mips.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_mips.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_mips.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_mips.deb
Little-endian MIPS:
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-mips64_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-mipsn32_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_mipsel.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-mips64_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-mipsn32_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_mipsel.udeb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_mipsel.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_mipsel.udeb
PowerPC:
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_powerpc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_powerpc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-ppc64_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_powerpc.udeb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_powerpc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-ppc64_2.7-18lenny2_powerpc.deb
IBM S/390:
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_s390.udeb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_s390.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-s390x_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-s390x_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_s390.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_s390.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_s390.deb
Sun Sparc:
http://security.debian.org/pool/updates/main/g/glibc/libc6-pic_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/locales-all_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-sparc64_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-udeb_2.7-18lenny2_sparc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libnss-dns-udeb_2.7-18lenny2_sparc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-sparcv9b_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-prof_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/nscd_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libnss-files-udeb_2.7-18lenny2_sparc.udeb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dbg_2.7-18lenny2_sparc.deb
http://security.debian.org/pool/updates/main/g/glibc/libc6-dev-sparc64_2.7-18lenny2_sparc.deb

MD5 checksums of the listed files are available in the original advisory.