This is the mail archive of the
glibc-cvs@sourceware.org
mailing list for the glibc project.
GNU C Library master sources branch release/2.22/master updated. glibc-2.22-52-gfc58942
- From: tuliom at sourceware dot org
- To: glibc-cvs at sourceware dot org
- Date: 1 Apr 2016 19:04:03 -0000
- Subject: GNU C Library master sources branch release/2.22/master updated. glibc-2.22-52-gfc58942
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, release/2.22/master has been updated
via fc58942b399b240b939e160e164ce95da3cefd10 (commit)
from 883dceebc8f11921a9890211a4e202e5be17562f (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=fc58942b399b240b939e160e164ce95da3cefd10
commit fc58942b399b240b939e160e164ce95da3cefd10
Author: Tulio Magno Quites Machado Filho <tuliom@linux.vnet.ibm.com>
Date: Fri Apr 1 15:58:16 2016 -0300
NEWS: update from previous commit
diff --git a/NEWS b/NEWS
index a3dd3c7..8aa1206 100644
--- a/NEWS
+++ b/NEWS
@@ -25,7 +25,12 @@ Version 2.22.1
17905, 18420, 18421, 18480, 18589, 18743, 18778, 18781, 18787, 18796,
18870, 18887, 18921, 18928, 18969, 18985, 19003, 19018, 19058, 19174,
- 19178, 19590, 19682, 19791, 19822.
+ 19178, 19590, 19682, 19791, 19822, 19879.
+
+* The getnetbyname implementation in nss_dns had a potentially unbounded
+ alloca call (in the form of a call to strdupa), leading to a stack
+ overflow (stack exhaustion) and a crash if getnetbyname is invoked
+ on a very long name. (CVE-2016-3075)
* The LD_POINTER_GUARD environment variable can no longer be used to
disable the pointer guard feature. It is always enabled.
-----------------------------------------------------------------------
Summary of changes:
NEWS | 7 ++++++-
1 files changed, 6 insertions(+), 1 deletions(-)
hooks/post-receive
--
GNU C Library master sources