diff options
| author | Florian Weimer <fweimer@redhat.com> | 2018-05-24 12:19:11 +0200 |
|---|---|---|
| committer | Aurelien Jarno <aurelien@aurel32.net> | 2018-12-20 08:14:01 +0100 |
| commit | 659b3df5db97948f4c6042203163873fb96ec512 (patch) | |
| tree | 653369e11b73a94efda84db935c3f12fc442208d | |
| parent | b501c7b09eb941dc7ff21f9939c322d2c9c32ec0 (diff) | |
| download | glibc-659b3df5db97948f4c6042203163873fb96ec512.tar glibc-659b3df5db97948f4c6042203163873fb96ec512.tar.gz glibc-659b3df5db97948f4c6042203163873fb96ec512.tar.bz2 glibc-659b3df5db97948f4c6042203163873fb96ec512.zip | |
Add references to CVE-2017-18269, CVE-2018-11236, CVE-2018-11237
(cherry picked from commit 43d4f3d5ad94e1fa5e56d7a7200d0e9f3d8e2f02)
| -rw-r--r-- | ChangeLog | 2 | ||||
| -rw-r--r-- | NEWS | 11 |
2 files changed, 13 insertions, 0 deletions
@@ -10,6 +10,7 @@ 2018-05-09 Paul Pluzhnikov <ppluzhnikov@google.com> [BZ #22786] + CVE-2018-11236 * stdlib/canonicalize.c (__realpath): Fix overflow in path length computation. * stdlib/Makefile (test-bz22786): New test. @@ -19,6 +20,7 @@ Max Horn <max@quendi.de> [BZ #22644] + CVE-2017-18269 * sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S: Fixed branch conditions. * string/test-memmove.c (do_test2): New testcase. @@ -49,6 +49,17 @@ Security related changes: for AT_SECURE or SUID binaries could be used to load libraries from the current directory. + CVE-2017-18269: An SSE2-based memmove implementation for the i386 + architecture could corrupt memory. Reported by Max Horn. + + CVE-2018-11236: Very long pathname arguments to realpath function could + result in an integer overflow and buffer overflow. Reported by Alexey + Izbyshev. + + CVE-2018-11237: The mempcpy implementation for the Intel Xeon Phi + architecture could write beyond the target buffer, resulting in a buffer + overflow. Reported by Andreas Schwab. + The following bugs are resolved with this release: [20790] Fix rpcgen buffer overrun |