Re: [PATCH] resolv: Reject trailing characters in host names [BZ #20018]

[Florian Weimer <fweimer at redhat dot com>]

* Siddhesh Poyarekar:

> On 19/01/19 1:43 AM, Florian Weimer wrote:
>> This is the main patch.  I kept postponing it because it's a bit
>> involved despite how little actually changes in behavior. 8-/
>> 
>> Siddhesh, do you want this in 2.29?  I will have to request a CVE ID for
>> this, I think, and it would be nice to report the first fixed release to
>> MITRE.
>> 
>> (This needs the other two resolv patches I posted today.)
>
> I'll let this through since this is a security fix; we would have had
> this backported right after the release anyway.  I've looked at all
> three patches and the changes look fine to me with more details in the
> git commit message; the second patch for example only mentions that it's
> a precursor to this bug fix and nothing else.

I've pushed the first and second patch.  For the latter, I filed a
separate bug 24112 and explained the issue in the commit message.

I will push the fix for bug 20018 once I've got the CVE assignment
(probably later today).

Thanks,
Florian