Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to stable-0.62 grimoire by Vlad Glagolev (8e5d20205366c115019a093e8fec70385525e219)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to stable-0.62 grimoire by Vlad Glagolev (8e5d20205366c115019a093e8fec70385525e219)
  • Date: Sun, 22 Oct 2017 13:16:49 +0000

GIT changes to stable-0.62 grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

libs/glibc/DETAILS | 2 +-
libs/glibc/HISTORY | 5 +++++
libs/glibc/PRE_BUILD | 1 +
libs/glibc/glibc-2.17-CVE-2017-15670.patch | 12 ++++++++++++
4 files changed, 19 insertions(+), 1 deletion(-)

New commits:
commit 8e5d20205366c115019a093e8fec70385525e219
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

glibc: security update

diff --git a/libs/glibc/DETAILS b/libs/glibc/DETAILS
index 33a141e..498b962 100755
--- a/libs/glibc/DETAILS
+++ b/libs/glibc/DETAILS
@@ -37,7 +37,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
SOURCE_GPG=glibc.gpg:$SOURCE.sig:UPSTREAM_KEY
SOURCE2_IGNORE=signature
- SECURITY_PATCH=5
+ SECURITY_PATCH=6
fi
if [[ $GLIBC_SANITIZE_HEADERS == n ]]; then
HEADERS_VERSION=3.17.4
diff --git a/libs/glibc/HISTORY b/libs/glibc/HISTORY
index 9ee1a02..e6543ae 100644
--- a/libs/glibc/HISTORY
+++ b/libs/glibc/HISTORY
@@ -1,3 +1,8 @@
+2017-10-22 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH++
+ * PRE_BUILD: apply the patch
+ * glibc-2.17-CVE-2017-15670.patch: added, to fix CVE-2017-15670
+
2016-02-17 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS, PRE_BUILD, 10_all_glibc-CVE-2015-7547.patch: add patch from
gentoo to fix CVE-2015-7547, SECURITY_PATCH++
diff --git a/libs/glibc/PRE_BUILD b/libs/glibc/PRE_BUILD
index bf7935f..e9a7722 100755
--- a/libs/glibc/PRE_BUILD
+++ b/libs/glibc/PRE_BUILD
@@ -94,6 +94,7 @@ patch -p1 <
$SPELL_DIRECTORY/00_all_0005-reload-etc-resolv.conf-when-it-has-chan
patch -p1 <
$SPELL_DIRECTORY/00_all_0007-rtld-do-not-ignore-arch-specific-CFLAGS.patch
&&
patch -p1 < $SPELL_DIRECTORY/10_all_glibc-CVE-2015-7547.patch
&&
patch -p1 < $SPELL_DIRECTORY/glibc-2.20-fhs-1.patch
&&
+patch -p1 < $SPELL_DIRECTORY/glibc-2.17-CVE-2017-15670.patch
&&

# disabled libgd detection/building memusagestat for now until a better
# fix has been found, bug #8277
diff --git a/libs/glibc/glibc-2.17-CVE-2017-15670.patch
b/libs/glibc/glibc-2.17-CVE-2017-15670.patch
new file mode 100644
index 0000000..887609a
--- /dev/null
+++ b/libs/glibc/glibc-2.17-CVE-2017-15670.patch
@@ -0,0 +1,12 @@
+diff -ru glibc-2.17_orig/posix/glob.c glibc-2.17/posix/glob.c
+--- glibc-2.17_orig/posix/glob.c 2017-10-22 11:06:53.880727941 +0300
++++ glibc-2.17/posix/glob.c 2017-10-22 11:08:29.124726336 +0300
+@@ -826,7 +826,7 @@
+ *p = '\0';
+ }
+ else
+- *((char *) mempcpy (newp, dirname + 1, end_name - dirname))
++ *((char *) mempcpy (newp, dirname + 1, end_name - dirname -
1))
+ = '\0';
+ user_name = newp;
+ }



  • [SM-Commit] GIT changes to stable-0.62 grimoire by Vlad Glagolev (8e5d20205366c115019a093e8fec70385525e219), Vlad Glagolev, 10/22/2017

Archive powered by MHonArc 2.6.24.

Top of Page