~ubuntu-branches/ubuntu/lucid/eglibc/lucid-updates : changes

~ubuntu-branches/ubuntu/lucid/eglibc/lucid-updates » Changes from revision 60

From Revision 60 to 41

Rev	Summary	Authors	Tags	Date
60	* SECURITY UPDATE: getaddrinfo writes to random file descrip... * SECURITY UPDATE: getaddrinfo writes to random file descriptors under high load - debian/patches/any/cvs-resolv-reuse-fd.diff: reload file descriptor after calling reopen in resolv/res_send.c. - CVE-2013-7423 * SECURITY UPDATE: denial of service via endless loop in getaddr_r - debian/patches/any/cvs-getnetbyname.diff: iterate over alias names in resolv/nss_dns/dns-network.c. - CVE-2014-9402	Marc Deslauriers	2.11.1-0ubuntu7.21	9 years ago
59	* SECURITY UPDATE: buffer overflow in __nss_hostname_digits_... * SECURITY UPDATE: buffer overflow in __nss_hostname_digits_dots - debian/patches/any/CVE-2015-0235.diff: fix overflow in nss/digits_dots.c - CVE-2015-0235	Steve Beattie	2.11.1-0ubuntu7.20	9 years ago
58	* SECURITY UPDATE: denial of service in IBM gconv modules * SECURITY UPDATE: denial of service in IBM gconv modules - debian/patches/any/CVE-2012-6656.diff: fix check in iconvdata/ibm930.c. - debian/patches/any/cvs-CVE-2014-6040.diff: fix checks in iconvdata/ibm.c. - CVE-2012-6656 - CVE-2014-6040 SECURITY UPDATE: arbitrary command execution via wordexp (LP: #1396471) - debian/patches/any/CVE-2014-7817.diff: properly handle WRDE_NOCMD in posix/wordexp.c, added tests to posix/wordexp-test.c. - CVE-2014-7817	Marc Deslauriers	2.11.1-0ubuntu7.19	9 years ago
57	* SECURITY REGRESSION: memleak in getaddrinfo (LP: #1364584) * SECURITY REGRESSION: memleak in getaddrinfo (LP: #1364584) - debian/patches/CVE-2013-4357-memleak.patch: fix memleak in sysdeps/posix/getaddrinfo.c introduced by patch for CVE-2013-4357.	Marc Deslauriers	2.11.1-0ubuntu7.17	9 years ago
56	* SECURITY UPDATE: heap overflow in __gconv_translit_find() ... * SECURITY UPDATE: heap overflow in __gconv_translit_find() (LP: #1362409) - debian/patches/any/cvs-CVE-2014-5119.diff: Backport upstream commit to completely remove support for loadable gconv transliteration modules. * SECURITY REGRESSION: localplt regression introduced in 2.11.1-0ubuntu7.14 - debian/patches/any/submitted-CVE-2014-0475.diff: update with a backport of upstream commit ca38dc17 to include memmem hidden alias declaration.	Adam Conrad	2.11.1-0ubuntu7.16	9 years ago
55	* SECURITY REGRESSION: segfault when using nscd (LP: #135250... * SECURITY REGRESSION: segfault when using nscd (LP: #1352504) - debian/patches/lp1352504.diff: don't free non-malloced memory and fix memory leak in nscd/nscd_getserv_r.c.	Marc Deslauriers	2.11.1-0ubuntu7.15	9 years ago
54	* SECURITY UPDATE: denial of service via buffer overflow in ... * SECURITY UPDATE: denial of service via buffer overflow in getaddrinfo - debian/patches/CVE-2013-4357.patch: fix overflow in include/alloca.h, nis/nss_nis/nis-alias.c, nscd/nscd_getserv_r.c, posix/glob.c, sysdeps/posix/getaddrinfo.c. - CVE-2013-4357 * SECURITY UPDATE: denial of service via buffer overflow in getaddrinfo - debian/patches/any/CVE-2013-4458.patch: fix overflow in sysdeps/posix/getaddrinfo.c. - CVE-2013-4458 * SECURITY UPDATE: Directory traversal in locale environment handling - debian/patches/any/CVE-2014-0475.diff: validate locale names in locale/findlocale.c, locale/setlocale.c, added test to localedata/tst-setlocale3.c, localedata/Makefile. - CVE-2014-0475 * SECURITY UPDATE: use-after-free via posix_spawn_file_actions_addopen failing to copy the path argument - debian/patches/any/CVE-2014-4043.diff: properly copy path in posix/spawn_faction_addopen.c, posix/spawn_faction_destroy.c, posix/spawn_int.h, added test to posix/tst-spawn.c. - CVE-2014-4043 * debian/patches/any/CVE-2013-4237-part2.diff: fix alignment issue causing a readdir regression on sparc. * debian/patches/any/CVE-2013-4332-part2.diff: added a couple of extra commits to fix another overflow and an infinite loop.	Marc Deslauriers	2.11.1-0ubuntu7.14	9 years ago
53	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via strcoll overflows - debian/patches/any/CVE-2012-44xx.diff: fix overflows in string/strcoll_l.c, add test to string/tst-strcoll-overflow.c, string/Makefile. - CVE-2012-4412 - CVE-2012-4424 * SECURITY UPDATE: denial of service in regular expression matcher - debian/patches/any/CVE-2013-0242.diff: fix buffer overrun in posix/regexec.c, add test to posix/bug-regex34.c, posix/Makefile. - CVE-2013-0242 * SECURITY UPDATE: denial of service in getaddrinfo - debian/patches/any/CVE-2013-1914.diff: fix overflow in sysdeps/posix/getaddrinfo.c, add libc_hidden_proto for __libc_alloca_cutoff in include/alloca.h, nptl/Versions, nptl/alloca_cutoff.c. - CVE-2013-1914 * SECURITY UPDATE: denial of service and possible code execution via readdir_r - debian/patches/any/CVE-2013-4237.diff: enforce NAME_MAX limit in sysdeps/unix/readdir_r.c, add errcode to sysdeps/unix/dirstream.h, sysdeps/unix/opendir.c, sysdeps/unix/rewinddir.c, remove GETDENTS_64BIT_ALIGNED from sysdeps/unix/sysv/linux/i386/readdir64_r.c, sysdeps/unix/sysv/linux/wordsize-64/readdir_r.c. - CVE-2013-4237 * SECURITY UPDATE: denial of service and possible code execution via overflows in memory allocator - debian/patches/any/CVE-2013-4332.diff: check for overflows in malloc/malloc.c. - CVE-2013-4332	Marc Deslauriers	2.11.1-0ubuntu7.13	10 years ago
52	* Pull three interdependent patches from Debian to fix AVX d... * Pull three interdependent patches from Debian to fix AVX detection problems on kernels or CPUs that lack support for it (LP: #979003): - amd64/cvs-avx-detection.diff: Improved detection on old kernels. - amd64/cvs-dl_trampoline-cfi.diff: fix CFI in dl_trampoline code. - amd64/cvs-avx-osxsave.diff: Disable AVX without OSXAVE support. * Also backport amd64/submitted-tst-audit6-avx.diff from oneiric to skip tests if AVX extensions are not available on the build host. * Use non-deprecated --reject-format=unified QUILT_PATCH_OPTS option.	Adam Conrad	2.11.1-0ubuntu7.12	11 years ago
51	* SECURITY UPDATE: buffer overflow in vfprintf handling * SECURITY UPDATE: buffer overflow in vfprintf handling - debian/patches/any/CVE-2012-3404.patch: Fix allocation when handling positional parameters in printf. - CVE-2012-3404 * SECURITY UPDATE: buffer overflow in vfprintf handling - debian/patches/any/CVE-2012-3405.patch: fix extension of array - CVE-2012-3405 * SECURITY UPDATE: stack buffer overflow in vfprintf handling (LP: #1031301) - debian/patches/any/CVE-2012-3406.patch: switch to malloc when array grows too large to handle via alloca extension - CVE-2012-3406 * SECURITY UPDATE: stdlib strtod integer/buffer overflows - debian/patches/any/CVE-2012-3480.patch: rearrange calculations and modify types to void integer overflows - CVE-2012-3480 * debian/patches/any/strtod_overflow_bug7066.patch: Fix array overflow in floating point parser triggered by applying patch for CVE-2012-3480 * debian/testsuite-checking/expected-results-x86_64-linux-gnu-libc, debian/testsuite-checking/expected-results-i486-linux-gnu-libc, debian/testsuite-checking/expected-results-i686-linux-gnu-i386, debian/testsuite-checking/expected-results-i686-linux-gnu-i686, debian/testsuite-checking/expected-results-i686-linux-gnu-xen, debian/testsuite-checking/expected-results-sparc64-linux-gnu-sparc64: update for pre-existing testsuite failures that prevents FTBFS when the testsuite is enabled.	Steve Beattie	2.11.1-0ubuntu7.11	11 years ago
50	* SECURITY UPDATE: timezone header parsing integer overflow ... * SECURITY UPDATE: timezone header parsing integer overflow (LP: #906961) - debian/patches/any/glibc-CVE-2009-5029.patch: Check values from TZ file header - CVE-2009-5029 * SECURITY UPDATE: memory consumption denial of service in fnmatch - debian/patches/any/glibc-CVE-2011-1071.patch: avoid too much stack use in fnmatch. - CVE-2011-1071 * SECURITY UPDATE: /etc/mtab corruption denial of service - debian/patches/any/glibc-CVE-2011-1089.patch: Report write error in addmnt even for cached streams - CVE-2011-1089 * SECURITY UPDATE: insufficient locale environment sanitization - debian/patches/any/glibc-CVE-2011-1095.patch: escape contents of LANG environment variable. - CVE-2011-1095 * SECURITY UPDATE: ld.so insecure handling of privileged programs' RPATHs with $ORIGIN - debian/patches/any/glibc-CVE-2011-1658.patch: improve handling of RPATH and ORIGIN - CVE-2011-1658 * SECURITY UPDATE: fnmatch integer overflow - debian/patches/any/glibc-CVE-2011-1659.patch: check size of pattern in wide character representation - CVE-2011-1659 * SECURITY UPDATE: signedness bug in memcpy_ssse3 - debian/patches/any/glibc-CVE-2011-2702.patch: use unsigned comparison instructions - CVE-2011-2702 * SECURITY UPDATE: DoS in RPC implementation (LP: #901716) - debian/patches/any/glibc-CVE-2011-4609.patch: nanosleep when too many open fds is detected - CVE-2011-4609 * SECURITY UPDATE: vfprintf nargs overflow leading to FORTIFY check bypass - debian/patches/any/glibc-CVE-2012-0864.patch: check for integer overflow - CVE-2012-0864 * debian/testsuite-checking/expected-results-x86_64-linux-gnu-libc, debian/testsuite-checking/expected-results-i686-linux-gnu-i386, debian/testsuite-checking/expected-results-arm-linux-gnueabi-libc: update for pre-existing testsuite failures that prevents FTBFS when the testsuite is enabled.	Steve Beattie	2.11.1-0ubuntu7.10	12 years ago
49	[ Matthias Klose ] [ Matthias Klose ] * Fix issue #12077, __strncmp_ssse3 can segfault when it over-reads its buffer. LP: #702190. [ Clint Byrum ] * do not run 'telinit u' on upgrade, as this will break upstart. touch /var/run/init.upgraded instead, which will force a re-exec just before remounting root read-only. LP: #672177, LP: #694772.	Matthias Klose	2.11.1-0ubuntu7.8	13 years ago
48	* SECURITY UPDATE: setuid iconv users could load arbitrary l... * SECURITY UPDATE: setuid iconv users could load arbitrary libraries. - debian/patches/any/dst-expansion-fix.diff: refresh with new proposed solution, avoiding iconv issues. - any/cvs-check-setuid-on-audit.diff: upstream fix for CVE-2010-3856, which was already had a work-around in 2.11.1-0ubuntu7.5.	Kees Cook	2.11.1-0ubuntu7.7	13 years ago
47	* Fix issue #12159, x86-64 strchr propagation of search byte... * Fix issue #12159, x86-64 strchr propagation of search byte into all bytes of SSE register. * Fix issue #12113, alignment of AVX safe area on x86_64. LP: #662511. * Fix ifunc thunk for strspn on x86 in static libc. LP: #615953.	Matthias Klose	2.11.1-0ubuntu7.6	13 years ago
46	* SECURITY UPDATE: root escalation via LD_AUDIT DST expansio... * SECURITY UPDATE: root escalation via LD_AUDIT DST expansion. - debian/patches/any/dst-expansion-fix.diff: upstream fixes. - CVE-2010-3847 - debian/patches/any/disable-ld_audit.diff: turn off LD_AUDIT for setuid binaries.	Kees Cook	2.11.1-0ubuntu7.5	13 years ago
45	Fix issue #12092, strstr broken for some inputs on pre-SSE4 ... Fix issue #12092, strstr broken for some inputs on pre-SSE4 machines. LP: #655463.	Matthias Klose	2.11.1-0ubuntu7.4	13 years ago
44	BZ#5553: Fix invalid assertion in case of main_arena being u... BZ#5553: Fix invalid assertion in case of main_arena being used, patch taken from trunk/2.12. LP: #490024.	Matthias Klose	2.11.1-0ubuntu7.3	13 years ago
43	* Fix issues in x86 memset-sse2.S/memset-sse2-rep.S. LP: #58... * Fix issues in x86 memset-sse2.S/memset-sse2-rep.S. LP: #587055. * Apply from the 2.11-x86 branch: x86-64 SSE4 optimized memcmp. LP: #589136.	Matthias Klose	2.11.1-0ubuntu7.2	13 years ago
42	* SECURITY UPDATE: newlines not escaped in /etc/mtab. * SECURITY UPDATE: newlines not escaped in /etc/mtab. - debian/patches/any/git-mntent-newline-escape.diff: upstream fixes. - CVE-2010-0296 * SECURITY UPDATE: arbitrary code execution from ELF headers (LP: #542197). - debian/patches/any/git-fix-dtag-cast.diff: upstream fixes. - CVE-2010-0830	Kees Cook	2.11.1-0ubuntu7.1	14 years ago
41	Fix logic that tests if gdm needs a restart or a reload Fix logic that tests if gdm needs a restart or a reload to handle both the initscript and upstart cases. This fixes a gdm restart during a hardy to lucid upgrade (LP: #568292)	Michael Vogt	2.11.1-0ubuntu7	14 years ago

Older »