This is the mail archive of the crossgcc@sourceware.org mailing list for the crossgcc project.

See crosstool-NG for lots more information.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[crosstool-ng/crosstool-ng] 6fadfa: libc/glibc: Add patch to fix CVE-2015-0235


  Branch: refs/heads/master
  Home:   https://github.com/crosstool-ng/crosstool-ng
  Commit: 6fadfa909b0018514bfc1c0b80d6a379631aeffb
      https://github.com/crosstool-ng/crosstool-ng/commit/6fadfa909b0018514bfc1c0b80d6a379631aeffb
  Author: Bernhard Walle <bernhard@bwalle.de>
  Date:   2015-02-03 (Tue, 03 Feb 2015)

  Changed paths:
    A patches/glibc/2.16.0/500-fix-parsing-of-numeric-hosts-in-gethostbyname_r.patch

  Log Message:
  -----------
  libc/glibc: Add patch to fix CVE-2015-0235

This patch fixes the so-called "GHOST" buffer overflow in glibc 2.16.
See http://www.openwall.com/lists/oss-security/2015/01/27/9.

Signed-off-by: Bernhard Walle <bernhard@bwalle.de>


  Commit: ae17f9015e99dfc603145af6847292d4771c1108
      https://github.com/crosstool-ng/crosstool-ng/commit/ae17f9015e99dfc603145af6847292d4771c1108
  Author: Bryan Hundven <bryanhundven@gmail.com>
  Date:   2015-02-03 (Tue, 03 Feb 2015)

  Changed paths:
    A patches/glibc/2.16.0/500-fix-parsing-of-numeric-hosts-in-gethostbyname_r.patch

  Log Message:
  -----------
  Merge pull request #43 from bwalle/glibc-2.16-ghost

libc/glibc: Add patch to fix CVE-2015-0235


Compare: https://github.com/crosstool-ng/crosstool-ng/compare/6168aff98d9a...ae17f9015e99
--
For unsubscribe information see http://sourceware.org/lists.html#faq

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]