This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug network/19879] nss_dns: Stack overflow in getnetbyname implementation (CVE-2016-3075)
- From: "cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Wed, 20 Apr 2016 14:24:25 +0000
- Subject: [Bug network/19879] nss_dns: Stack overflow in getnetbyname implementation (CVE-2016-3075)
- Auto-submitted: auto-generated
- References: <bug-19879-131 at http dot sourceware dot org/bugzilla/>
https://sourceware.org/bugzilla/show_bug.cgi?id=19879
--- Comment #10 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, ibm/2.18/master has been updated
via 803014df72c4db05dacc738d223ab3e2a2809b27 (commit)
via d3d94abbe8af2aa6e3de6a85983b9f17070a7564 (commit)
from 2eb35ebfb291f773c1ba7939601a049acb4f3706 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=803014df72c4db05dacc738d223ab3e2a2809b27
commit 803014df72c4db05dacc738d223ab3e2a2809b27
Author: Paul E. Murphy <murphyp@linux.vnet.ibm.com>
Date: Wed Apr 20 09:18:20 2016 -0500
NEWS: Add 18665 and 19791 to fixed bug list.
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=d3d94abbe8af2aa6e3de6a85983b9f17070a7564
commit d3d94abbe8af2aa6e3de6a85983b9f17070a7564
Author: Florian Weimer <fweimer@redhat.com>
Date: Wed Apr 20 09:01:33 2016 -0500
CVE-2016-3075: Stack overflow in _nss_dns_getnetbyname_r [BZ #19879]
The defensive copy is not needed because the name may not alias the
output buffer.
(cherry picked from commit 317b199b4aff8cfa27f2302ab404d2bb5032b9a4)
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 7 +++++++
NEWS | 3 ++-
resolv/nss_dns/dns-network.c | 5 +----
3 files changed, 10 insertions(+), 5 deletions(-)
--
You are receiving this mail because:
You are on the CC list for the bug.