This is the mail archive of the
libc-help@sourceware.org
mailing list for the glibc project.
Re: glibc 2.5 - patch for GHOST (CVE-2015-0235)
- From: Florian Weimer <fweimer at redhat dot com>
- To: czezz <czezz at o2 dot pl>, "libc-help at sourceware dot org" <libc-help at sourceware dot org>
- Date: Tue, 21 Apr 2015 16:52:52 +0200
- Subject: Re: glibc 2.5 - patch for GHOST (CVE-2015-0235)
- Authentication-results: sourceware.org; auth=none
- References: <59fc2e2a dot 4847a622 dot 5530d2d1 dot 4aa6f at o2 dot pl> <55365318 dot 50501 at redhat dot com> <264b9eac dot 63986d84 dot 553659e9 dot b28c0 at o2 dot pl> <55365A99 dot 1010808 at redhat dot com> <444ba325 dot 943dfb0 dot 553662f0 dot bf499 at o2 dot pl>
On 04/21/2015 04:47 PM, czezz wrote:
> Well, that was my initial idea.
> But as only I looked little bit deeper I realized I cannot go like that.
> Some of patches from your repository/link contain lines like following:
> glibc-rh947882.patch:diff -urN glibc-2.5-20061008T1257.orig/sysdeps/posix/getaddrinfo.c glibc-2.5-20061008T1257/sysdeps/posix/getaddrinfo.c
> glibc-rh947882.patch:--- glibc-2.5-20061008T1257.orig/sysdeps/posix/getaddrinfo.c 2013-04-11 14:41:39.224166628 -0400
> glibc-rh947882.patch:+++ glibc-2.5-20061008T1257/sysdeps/posix/getaddrinfo.c 2013-04-11 15:30:32.186995962 -0400
> so, the script for building in your repository expects to have source files/some of source files in dir glibc-2.5-20061008T1257/
> where in Slackware's building script it is glibc-2.5/
> Of course I can re-tar and re-compress Slackware's source glibc but then I must modify all Slack's diff files (which is in the end and idea).
> Im more worried that I have compared eg:
> glibc-rh645672.patch with glibc.CVE-2010-3856.diff.gz. They are similar but not identical...
Ah, I misunderstood you. I assumed that you were attempting to backport
a single fix. If you want to reach bug fix parity with a still-support
glibc (be it from Debian, Red Hat or SuSE), that is going to be a *lot*
more work.
--
Florian Weimer / Red Hat Product Security