BZ #21361 backport to version prior 2.26? Was: +

Tulio Magno Quites Machado Filho tuliom@linux.vnet.ibm.com
Sun Jan 1 00:00:00 GMT 2017


Hi Simon,

"Sudler, Simon" <simon.sudler@siemens.com> writes:

> I noticed, that the #21361 (CVE-2017-12132) issue was fixed for 2.26, but was not applied in the any older release branches. The patch applies perfectly for the code with the vulnerability, only the tests requires some backporting.

It was also backported to glibc 2.25:
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=47db584c74e2bbcf1ba55e62d949c1a738da5e0a

> Is there any reason why this issue has not been fixed in any older release? 

Because no one proposed this backport.  ;-)

Are you looking for a backport for a particular version?

-- 
Tulio Magno



More information about the Libc-stable mailing list