-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2013-10-01 20:14:40 UTC
-
mfrom:
(42.1.6 lucid-proposed)
-
Revision ID:
package-import@ubuntu.com-20131001201440-b0xu0pmftfbonwc8
Tags: 2.11.1-0ubuntu7.13
* SECURITY UPDATE: denial of service and possible code execution via
strcoll overflows
- debian/patches/any/CVE-2012-44xx.diff: fix overflows in
string/strcoll_l.c, add test to string/tst-strcoll-overflow.c,
string/Makefile.
- CVE-2012-4412
- CVE-2012-4424
* SECURITY UPDATE: denial of service in regular expression matcher
- debian/patches/any/CVE-2013-0242.diff: fix buffer overrun in
posix/regexec.c, add test to posix/bug-regex34.c, posix/Makefile.
- CVE-2013-0242
* SECURITY UPDATE: denial of service in getaddrinfo
- debian/patches/any/CVE-2013-1914.diff: fix overflow in
sysdeps/posix/getaddrinfo.c, add libc_hidden_proto for
__libc_alloca_cutoff in include/alloca.h, nptl/Versions,
nptl/alloca_cutoff.c.
- CVE-2013-1914
* SECURITY UPDATE: denial of service and possible code execution via
readdir_r
- debian/patches/any/CVE-2013-4237.diff: enforce NAME_MAX limit in
sysdeps/unix/readdir_r.c, add errcode to sysdeps/unix/dirstream.h,
sysdeps/unix/opendir.c, sysdeps/unix/rewinddir.c, remove
GETDENTS_64BIT_ALIGNED from
sysdeps/unix/sysv/linux/i386/readdir64_r.c,
sysdeps/unix/sysv/linux/wordsize-64/readdir_r.c.
- CVE-2013-4237
* SECURITY UPDATE: denial of service and possible code execution via
overflows in memory allocator
- debian/patches/any/CVE-2013-4332.diff: check for overflows in
malloc/malloc.c.
- CVE-2013-4332