[PATCH v1.1] __gconv_translit_find: Actually append ".so" to module name [BZ #17187]
Florian Weimer
fweimer@redhat.com
Tue Aug 26 18:45:00 GMT 2014
On 08/26/2014 06:55 PM, Florian Weimer wrote:
> The internal transliteration code only supports TRANSLIT and IGNORE, so
> I suggest this NEWS entry:
>
> * Support for loadable gconv transliteration modules has been removed.
> The support for transliteration modules has been non-functional for
> over a decade, and the removal is prompted by security defects. The
> normal gconv conversion modules are still supported. Transliteration
> with //TRANSLIT is still possible, and the //IGNORE specifier
> continues to be supported. (CVE-2014-5119)
I'm afraid I had to fix a typo in the CVE ID in a separate commit. The
above NEWS entry contains the corrected ID.
--
Florian Weimer / Red Hat Product Security
More information about the Libc-alpha
mailing list