This is the mail archive of the
glibc-cvs@sourceware.org
mailing list for the glibc project.
GNU C Library master sources branch release/2.27/master updated. glibc-2.27-1-gbdac162
- From: fw at sourceware dot org
- To: glibc-cvs at sourceware dot org
- Date: 6 Feb 2018 08:21:21 -0000
- Subject: GNU C Library master sources branch release/2.27/master updated. glibc-2.27-1-gbdac162
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, release/2.27/master has been updated
via bdac1623cca4c3d1683e24cc7d093201c5d9fa26 (commit)
from 23158b08a0908f381459f273a984c6fd328363cb (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=bdac1623cca4c3d1683e24cc7d093201c5d9fa26
commit bdac1623cca4c3d1683e24cc7d093201c5d9fa26
Author: Florian Weimer <fweimer@redhat.com>
Date: Tue Feb 6 09:19:03 2018 +0100
Record CVE-2018-6551 in NEWS and ChangeLog [BZ #22774]
(cherry picked from commit 71aa429b029fdb6f9e65d44050388b51eca460d6)
diff --git a/ChangeLog b/ChangeLog
index f3fe271..76e2767 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -710,7 +710,9 @@
2018-01-18 Arjun Shankar <arjun@redhat.com>
[BZ #22343]
+ [BZ #22774]
CVE-2018-6485
+ CVE-2018-6551
* malloc/malloc.c (checked_request2size): call REQUEST_OUT_OF_RANGE
after padding.
(_int_memalign): check for integer overflow before calling
diff --git a/NEWS b/NEWS
index a71c103..0f7b0d5 100644
--- a/NEWS
+++ b/NEWS
@@ -262,6 +262,10 @@ Security related changes:
an object size near the value of SIZE_MAX, would return a pointer to a
buffer which is too small, instead of NULL. Reported by Jakub Wilk.
+ CVE-2018-6551: The malloc function, when called with an object size near
+ the value of SIZE_MAX, would return a pointer to a buffer which is too
+ small, instead of NULL.
+
The following bugs are resolved with this release:
[866] glob: glob should match dangling symlinks
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 2 ++
NEWS | 4 ++++
2 files changed, 6 insertions(+), 0 deletions(-)
hooks/post-receive
--
GNU C Library master sources