[Bug glob/33814] wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

cvs-commit at gcc dot gnu.org sourceware-bugzilla@sourceware.org
Sun Mar 29 21:40:19 GMT 2026


https://sourceware.org/bugzilla/show_bug.cgi?id=33814

--- Comment #23 from Sourceware Commits <cvs-commit at gcc dot gnu.org> ---
The release/2.38/master branch has been updated by Aurelien Jarno
<aurel32@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=d2f15e1aca64547e3521dbb336d281157fb209fd

commit d2f15e1aca64547e3521dbb336d281157fb209fd
Author: Florian Weimer <fweimer@redhat.com>
Date:   Mon Jan 26 17:12:37 2026 +0100

    posix: Run tst-wordexp-reuse-mem test

    The test was not properly scheduled for execution with a Makefile
    dependency.

    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").

    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list