Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Pavel Vinogradov (eafc95075315b7823155bcf23491d1d882ecec52)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Pavel Vinogradov <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Pavel Vinogradov (eafc95075315b7823155bcf23491d1d882ecec52)
  • Date: Sun, 22 Oct 2017 02:19:17 +0000

GIT changes to master grimoire by Pavel Vinogradov <public AT sourcemage.org>:

libs/glibc/DETAILS | 2 -
libs/glibc/HISTORY | 3 ++
libs/glibc/PRE_BUILD | 3 ++
libs/glibc/glob.patch | 56
++++++++++++++++++++++++++++++++++++++++++++++++++
4 files changed, 63 insertions(+), 1 deletion(-)

New commits:
commit eafc95075315b7823155bcf23491d1d882ecec52
Author: Pavel Vinogradov <public AT sourcemage.org>
Commit: Pavel Vinogradov <public AT sourcemage.org>

libs/glibc: SECURITY_PATCH++, fixed the CVE-2017-15670

diff --git a/libs/glibc/DETAILS b/libs/glibc/DETAILS
index 65d4704..8283ec3 100755
--- a/libs/glibc/DETAILS
+++ b/libs/glibc/DETAILS
@@ -37,7 +37,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
SOURCE_GPG=glibc.gpg:$SOURCE.sig:UPSTREAM_KEY
SOURCE2_IGNORE=signature
- SECURITY_PATCH=9
+ SECURITY_PATCH=10
PATCHLEVEL=1
fi
if [[ $GLIBC_SANITIZE_HEADERS == n ]]; then
diff --git a/libs/glibc/HISTORY b/libs/glibc/HISTORY
index 7b9c1d1..259dafa 100644
--- a/libs/glibc/HISTORY
+++ b/libs/glibc/HISTORY
@@ -1,3 +1,6 @@
+2017-10-21 Pavel Vinogradov <public AT sourcemage.org>
+ * DETAILS, PRE_BUILD, glob.patch: SECURITY_PATCH++, (CVE-2017-15670)
+
2017-09-24 Thomas Orgis <sobukus AT sourcemage.org>
* UP_TRIGGERS: add icu to the xlocale.h offenders,
also trigger on any update crossing 2.26
diff --git a/libs/glibc/PRE_BUILD b/libs/glibc/PRE_BUILD
index c4933c2..2209e06 100755
--- a/libs/glibc/PRE_BUILD
+++ b/libs/glibc/PRE_BUILD
@@ -98,6 +98,9 @@ patch -p0 < $SPELL_DIRECTORY/as_fn_executable_p.patch &&
patch -p1 <
$SPELL_DIRECTORY/00_all_0007-rtld-do-not-ignore-arch-specific-CFLAGS.patch
&&
patch -p1 < $SPELL_DIRECTORY/glibc-2.20-fhs-1.patch
&&

+# CVE-2017-15670 fix
+patch -p1 < "${SPELL_DIRECTORY}/glob.patch"
&&
+
# disabled libgd detection/building memusagestat for now until a better
# fix has been found, bug #8277
#sedit 's/LIBGD=yes/LIBGD=no/' $SOURCE_DIRECTORY/configure &&
diff --git a/libs/glibc/glob.patch b/libs/glibc/glob.patch
new file mode 100644
index 0000000..55864eb
--- /dev/null
+++ b/libs/glibc/glob.patch
@@ -0,0 +1,56 @@
+From c369d66e5426a30e4725b100d5cd28e372754f90 Mon Sep 17 00:00:00 2001
+From: Paul Eggert <eggert AT cs.ucla.edu>
+Date: Fri, 20 Oct 2017 18:41:14 +0200
+Subject: [PATCH] CVE-2017-15670: glob: Fix one-byte overflow [BZ #22320]
+
+---
+ ChangeLog | 6 ++++++
+ NEWS | 4 ++++
+ posix/glob.c | 2 +-
+ 3 files changed, 11 insertions(+), 1 deletion(-)
+
+diff --git a/ChangeLog b/ChangeLog
+index f0512c5..43f5bfa 100644
+--- a/ChangeLog
++++ b/ChangeLog
+@@ -1,3 +1,9 @@
++2017-10-20 Paul Eggert <eggert AT cs.ucla.edu>
++
++ [BZ #22320]
++ CVE-2017-15670
++ * posix/glob.c (__glob): Fix one-byte overflow.
++
+ 2017-08-02 Siddhesh Poyarekar <siddhesh AT sourceware.org>
+
+ * version.h (RELEASE): Set to "stable"
+iff --git a/NEWS b/NEWS
+index ad680db..e0e5056 100644
+--- a/NEWS
++++ b/NEWS
+@@ -72,6 +72,10 @@ Security related changes:
+ vulnerability; only trusted binaries must be examined using the ldd
+ script.)
+
++ CVE-2017-15670: The glob function, when invoked with GLOB_TILDE, suffered
++ from a one-byte overflow during ~ operator processing (either on the stack
++ or the heap, depending on the length of the user name).
++
+ The following bugs are resolved with this release:
+
+ [The release manager will add the list generated by
+diff --git a/posix/glob.c b/posix/glob.c
+index 076ab2b..15a6c0c 100644
+--- a/posix/glob.c
++++ b/posix/glob.c
+@@ -790,7 +790,7 @@ __glob (const char *pattern, int flags, int (*errfunc)
(const char *, int),
+ *p = '\0';
+ }
+ else
+- *((char *) mempcpy (newp, dirname + 1, end_name - dirname))
++ *((char *) mempcpy (newp, dirname + 1, end_name - dirname -
1))
+ = '\0';
+ user_name = newp;
+ }
+--
+2.9.3
+



  • [SM-Commit] GIT changes to master grimoire by Pavel Vinogradov (eafc95075315b7823155bcf23491d1d882ecec52), Pavel Vinogradov, 10/21/2017

Archive powered by MHonArc 2.6.24.

Top of Page