[PATCH v1.1] __gconv_translit_find: Actually append ".so" to module name [BZ #17187]

Florian Weimer fweimer@redhat.com
Tue Aug 26 18:45:00 GMT 2014


On 08/26/2014 06:55 PM, Florian Weimer wrote:

> The internal transliteration code only supports TRANSLIT and IGNORE, so
> I suggest this NEWS entry:
>
> * Support for loadable gconv transliteration modules has been removed.
>    The support for transliteration modules has been non-functional for
>    over a decade, and the removal is prompted by security defects.  The
>    normal gconv conversion modules are still supported.  Transliteration
>    with //TRANSLIT is still possible, and the //IGNORE specifier
>    continues to be  supported. (CVE-2014-5119)

I'm afraid I had to fix a typo in the CVE ID in a separate commit.  The 
above NEWS entry contains the corrected ID.

-- 
Florian Weimer / Red Hat Product Security



More information about the Libc-alpha mailing list