~ubuntu-branches/ubuntu/trusty/eglibc/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/eglibc/trusty-security » Changes from revision 349

From Revision 349 to 330

Rev	Summary	Authors	Tags	Date
349	* REGRESSION UPDATE: revert CVE-2014-9761 fix due to added s... * REGRESSION UPDATE: revert CVE-2014-9761 fix due to added symbol dependency from libm to libc (LP: #1585614) - debian/patches/any/CVE-2014-9761-2.diff: keep exporting __strto*_nan symbols added to libc.	Steve Beattie	2.19-0ubuntu6.9	7 years ago
348	* SECURITY UPDATE: buffer overflow in gethostbyname_r and re... * SECURITY UPDATE: buffer overflow in gethostbyname_r and related functions - debian/patches/any/CVE-2015-1781.diff: take alignment padding into account when computing if buffer is too small. - CVE-2015-1781 * SECURITY UPDATE: glibc Name Service Switch (NSS) denial of sevice - debian/patches/any/CVE-2014-8121-1.diff: do not close NSS files database during iteration. - debian/patches/any/CVE-2014-8121-2.diff: Separate internal state between getXXent and getXXbyYY NSS calls. - CVE-2014-8121 * SECURITY UPDATE: glibc unbounded stack usage in NaN strtod conversion - debian/patches/any/CVE-2014-9761-1.diff: Refactor strtod parsing of NaN payloads. - debian/patches/any/CVE-2014-9761-1.diff: Fix nan functions handling of payload strings - CVE-2014-9761 * SECURITY UPDATE: NSS files long line buffer overflow - debian/patches/any/CVE-2015-5277.diff: Don't ignore too long lines in nss_files - CVE-2015-5277 * SECURITY UPDATE: out of range data to strftime() causes segfault (denial of service) - debian/patches/any/CVE-2015-8776.diff: add range checks to strftime() processing - CVE-2015-8776 * SECURITY UPDATE: glibc honors LD_POINTER_GUARD env for setuid AT_SECURE programs (e.g. setuid), allowing disabling of pointer mangling - debian/patches/any/CVE-2015-8777.diff: Always enable pointer guard - CVE-2015-8777 * SECURITY UPDATE: integer overflow in hcreate and hcreate_r - debian/patches/any/CVE-2015-8778.diff: check for large inputs - CVE-2015-8778 * SECURITY UPDATE: unbounded stack allocation in catopen() - debian/patches/any/CVE-2015-8779.diff: stop using unbounded alloca() - CVE-2015-8779 * SECURITY UPDATE: Stack overflow in _nss_dns_getnetbyname_r - debian/patches/any/CVE-2016-3075.diff: do not make unneeded memory copy on the stack. - CVE-2016-3075 * SECURITY UPDATE: pt_chown privilege escalation - debian/patches/any/CVE-2016-2856.diff: grantpt: trust the kernel about pty group and permission mode - debian/sysdeps/linux.mk: don't build pt_chown - debian/rules.d/debhelper.mk: only install pt_chown when built. - CVE-2016-2856, CVE-2013-2207 * debian/debhelper.in/libc.postinst: add reboot notifications for security updates (LP: #1546457) * debian/patches/ubuntu/submitted-no-stack-backtrace.diff: update patch to eliminate compiler warning.	Steve Beattie	2.19-0ubuntu6.8	8 years ago
347	* SECURITY UPDATE: glibc getaddrinfo stack-based buffer over... * SECURITY UPDATE: glibc getaddrinfo stack-based buffer overflow - debian/patches/any/CVE-2015-7547-pre1.diff: fix memory leak in resolv/nss_dns/dns-host.c. - debian/patches/any/CVE-2015-7547-pre2.diff: fix memory leak in include/resolv.h, resolv/gethnamaddr.c, resolv/nss_dns/dns-canon.c, resolv/nss_dns/dns-host.c, resolv/nss_dns/dns-network.c, resolv/res_query.c, resolv/res_send.c. - debian/patches/any/CVE-2015-7547.diff: fix buffer handling in resolv/nss_dns/dns-host.c, resolv/res_query.c, resolv/res_send.c. - CVE-2015-7547	Marc Deslauriers	2.19-0ubuntu6.7	8 years ago
346	* SECURITY UPDATE: getaddrinfo writes to random file descrip... * SECURITY UPDATE: getaddrinfo writes to random file descriptors under high load - debian/patches/any/cvs-resolv-reuse-fd.diff: reload file descriptor after calling reopen in resolv/res_send.c. - CVE-2013-7423 * SECURITY UPDATE: denial of service via endless loop in getaddr_r - debian/patches/any/cvs-getnetbyname.diff: iterate over alias names in resolv/nss_dns/dns-network.c. - CVE-2014-9402 * SECURITY UPDATE: buffer overflow in wscanf - debian/patches/any/cvs-wscanf.diff: calculate correct size in stdio-common/vfscanf.c, added test to stdio-common/tst-sscanf.c. - CVE-2015-1472 - CVE-2015-1473	Marc Deslauriers	2.19-0ubuntu6.6	9 years ago
345	* SECURITY UPDATE: denial of service in IBM gconv modules * SECURITY UPDATE: denial of service in IBM gconv modules - debian/patches/any/cvs-CVE-2014-6040.diff: fix checks in iconvdata/ibm.c. - CVE-2014-6040 SECURITY UPDATE: arbitrary command execution via wordexp (LP: #1396471) - debian/patches/any/CVE-2014-7817.diff: properly handle WRDE_NOCMD in posix/wordexp.c, added tests to posix/wordexp-test.c. - CVE-2014-7817	Marc Deslauriers	2.19-0ubuntu6.4	9 years ago
344	* SECURITY UPDATE: heap overflow in __gconv_translit_find() ... * SECURITY UPDATE: heap overflow in __gconv_translit_find() (LP: #1362409) - debian/patches/any/cvs-CVE-2014-5119.diff: Backport upstream commit to completely remove support for loadable gconv transliteration modules.	Adam Conrad	2.19-0ubuntu6.3	9 years ago
343	* SECURITY UPDATE: Directory traversal in locale environment... * SECURITY UPDATE: Directory traversal in locale environment handling - debian/patches/any/CVE-2014-0475.diff: validate locale names in locale/findlocale.c, locale/setlocale.c, added test to localedata/tst-setlocale3.c, localedata/Makefile. - CVE-2014-0475 * SECURITY UPDATE: use-after-free via posix_spawn_file_actions_addopen failing to copy the path argument - debian/patches/any/CVE-2014-4043.diff: properly copy path in posix/spawn_faction_addopen.c, posix/spawn_faction_destroy.c, posix/spawn_int.h, added test to posix/tst-spawn.c. - CVE-2014-4043	Marc Deslauriers	2.19-0ubuntu6.1	9 years ago
342	debian/patches/arm64/submitted-setcontext.diff: Update to ne... debian/patches/arm64/submitted-setcontext.diff: Update to new version of Will's setcontext patch to fix sigmask handling bug (LP: #1306829)	Adam Conrad	2.19-0ubuntu6	10 years ago
341	* Merge with unreleased 2.19 from Debian experimental, fixin... * Merge with unreleased 2.19 from Debian experimental, fixing more bugs: - Pull in arm64 patches to fix setcontext corruption (LP: #1279620) - Apply the IBM 2.19 branch for POWER8 bug fixes and optimizations. - Change M_CHECK_ACTION to abort if first MALLOC_CHECK_ bit is set.	Adam Conrad	2.19-0ubuntu5	10 years ago
340	* debian/debhelper.in/libc.preinst: * debian/debhelper.in/libc.preinst: - do not show glibc/restart-services question when the system is uprading via the desktop session (LP: #1298281)	Michael Vogt	2.19-0ubuntu4	10 years ago
339	* Merge with unreleased 2.19 from Debian experimental, fixin... * Merge with unreleased 2.19 from Debian experimental, fixing more bugs: - Fix bzero/__bzero definition on powerpc/ppc64 with static builds. - Enable IFUNC on arm64 builds, now that the toolchain supports it. - Revert removal of the XDR currency for installation-locale FTBFS. - Pull update from 2.19 branch, fixing bad math in __sin and __cos. * debian/sysdeps/{i386,amd64}.mk: Build i386 flavours with -fno-regmove, this can be reverted when gcc-4.9 becomes the default distro compiler. * debian/*: Drop the redundant libc6-xen packages on i386 (LP: #1271534)	Adam Conrad	2.19-0ubuntu3	10 years ago
338	* Merge with unreleased 2.19 from Debian experimental, fixin... * Merge with unreleased 2.19 from Debian experimental, fixing some bugs: - debian/patches/any/local-no-malloc-backtrace.diff: Lower the default for MALLOC_CHECK_ to 1, and add it to the list of insecure variables that can't be set for suid binaries. This allows us to not backtrace malloc failures by default (Closes: #739913, LP: #1266492) and skips backtrace for suid binaries where an attacker calling into a corrupt malloc internal data structure with malloc could lead to Bad Things. - Make ldconfig stop operating on the linker entirely, so our packaged symlinks take precedence and hack the postinst to skip ldconfig when we detect a broken setup that the old ldconfig mangles (LP: #915995)	Adam Conrad	2.19-0ubuntu2	10 years ago
337	* debian/patches/ppc64el/ibm-branch.diff: Drop min shlib ver... * debian/patches/ppc64el/ibm-branch.diff: Drop min shlib vers to 2.17. * debian/patches/ppc64el/lookup-hack.diff: Treat 2.18 symbols as 2.17.	Adam Conrad	2.18-0ubuntu7	10 years ago
336	* debian/sysdeps/ppc64el.mk: Use --with-cpu=power7 to optimi... * debian/sysdeps/ppc64el.mk: Use --with-cpu=power7 to optimize properly. * debian/patches/ppc64el/cvs-ppc64-MCOUNT.diff: Fix uses of CALL_MCOUNT.	Adam Conrad	2.18-0ubuntu6	10 years ago
335	* debian/patches/arm/cvs-arm__{longjmp,sigsetjmp}-thumb.diff... * debian/patches/arm/cvs-arm__{longjmp,sigsetjmp}-thumb.diff: Pull patch from upstream to allow building longjmp and sigsetjmp code with Thumb. * debian/patches/arm/cvs-arm-pointer-mangle-frame.diff: Upstream diff to no longer apply pointer encryption to the frame pointer (LP: #1268937)	Adam Conrad	2.18-0ubuntu5	10 years ago
334	debian/patches/ppc64el/ibm-branch.diff: Rebase against vfsca... debian/patches/ppc64el/ibm-branch.diff: Rebase against vfscanf patch.	Adam Conrad	2.18-0ubuntu4	10 years ago
333	* debian/patches/i386/cvs-sse42-strstr: Backport upstream c... debian/patches/i386/cvs-sse42-strstr: Backport upstream commits which drop buggy SSE4.2 srtstr implementations in favour of an SSE2 version. debian/patches/kfreebsd/submitted-waitid.diff: Drop this patch pending the resolution of the upstream bug and the Linux/libc header mismatch.	Adam Conrad	2.18-0ubuntu2	10 years ago
332	* Merge with latest 2.18 from Debian experimental, remaining... * Merge with latest 2.18 from Debian experimental, remaining changes: - Drop the Breaks line from libc6, which refers to a Debian transition - Remove the libc6 recommends on libc6-i686, which we don't build - Enable libc6{,-dev}-armel on armhf and libc6{-dev}-armhf on armel - Ship update-locale and validlocale in /usr/sbin in libc-bin - Don't build locales or locales-all in Ubuntu, we rely on langpacks - Heavily mangle the way we do service restarting on major upgrades - Use different MIN_KERNEL_SUPPORTED versions than Debian, due to buildd needs. This should be universally bumped to 2.6.32 once all our buildds (including the PPA guests) are running precise kernels - Build i386 variants as -march=i686, build amd64 with -O3, and build ppc64 variants (both 64-bit and 32-bit) with -O3 -fno-tree-vectorize - debian/patches/ubuntu/local-CVE-2012-3406.diff: switch to malloc when array grows too large to handle via alloca extension (CVE-2012-3406) - Build generic i386/i686 flavour with -mno-tls-direct-seg-refs * debian/patches/ubuntu/local-linaro-cortex-strings.diff: Dropped at the request of Will Newton, who will upstream something more performant. * debian/patches/i386/cvs-nonascii-case-strcmp.diff: Pull upstream patch to fix LC_CTYPE nonascii-case fallback in i686 strcasecmp/strncasecmp. * debian/testsuite-checking/: Update 686 targets to match the 586 ones. Generate expected-results-powerpc64le-linux-gnu-libc for ppc64el port.	Adam Conrad	2.18-0ubuntu1	10 years ago
331	* patches/arm64/cvs-setjmp-clobber.diff: __sigsetjmp clobber... * patches/arm64/cvs-setjmp-clobber.diff: __sigsetjmp clobbers register x1 before making the tail call to __sigjmp_save, which causes the latter to always save the signal mask. Backport git patch to fix. * patches/series: Revert the CVE-2013-2207 pt_chown fix until we come up with a sane plan to avoid users shooting themselves in the foot. * debhelper.in/libc-bin.install: Install pt_chown again for the above.	Adam Conrad	2.17-93ubuntu4	10 years ago
330	Merge with Debian unstable, bringing in testsuite and securi... Merge with Debian unstable, bringing in testsuite and security fixes.	Adam Conrad	2.17-93ubuntu1	10 years ago

Older »