[prev in list] [next in list] [prev in thread] [next in thread]
List: glibc-cvs
Subject: GNU C Library master sources branch release/2.27/master updated. glibc-2.27-57-g6c99e37
From: fw () sourceware ! org
Date: 2018-05-24 13:50:47
Message-ID: 20180524135047.83703.qmail () sourceware ! org
[Download RAW message or body]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, release/2.27/master has been updated
via 6c99e37f6fb640a50a3113b2dbee5d5389843c1e (commit)
from 50df56ca86a281c8fd99a8100aac75539813788d (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=6c99e37f6fb640a50a3113b2dbee5d5389843c1e
commit 6c99e37f6fb640a50a3113b2dbee5d5389843c1e
Author: Florian Weimer <fweimer@redhat.com>
Date: Thu May 24 15:50:29 2018 +0200
NEWS: Move security-lated changes before bug list
This matches the practice for previous releases.
diff --git a/NEWS b/NEWS
index 28535db..2c58d07 100644
--- a/NEWS
+++ b/NEWS
@@ -13,6 +13,19 @@ Major new features:
Czech languages. The Catalan and Greek languages now support abbreviated
alternative month names.
+Security related changes:
+
+ CVE-2017-18269: An SSE2-based memmove implementation for the i386
+ architecture could corrupt memory. Reported by Max Horn.
+
+ CVE-2018-11236: Very long pathname arguments to realpath function could
+ result in an integer overflow and buffer overflow. Reported by Alexey
+ Izbyshev.
+
+ CVE-2018-11237: The mempcpy implementation for the Intel Xeon Phi
+ architecture could write beyond the target buffer, resulting in a buffer
+ overflow. Reported by Andreas Schwab.
+
The following bugs are resolved with this release:
[6889] 'PWD' mentioned but not specified
@@ -50,19 +63,6 @@ The following bugs are resolved with this release:
[23166] sunrpc: Remove stray exports without --enable-obsolete-rpc
[23196] __mempcpy_avx512_no_vzeroupper mishandles large copies
-Security related changes:
-
- CVE-2017-18269: An SSE2-based memmove implementation for the i386
- architecture could corrupt memory. Reported by Max Horn.
-
- CVE-2018-11236: Very long pathname arguments to realpath function could
- result in an integer overflow and buffer overflow. Reported by Alexey
- Izbyshev.
-
- CVE-2018-11237: The mempcpy implementation for the Intel Xeon Phi
- architecture could write beyond the target buffer, resulting in a buffer
- overflow. Reported by Andreas Schwab.
-
Version 2.27
-----------------------------------------------------------------------
Summary of changes:
NEWS | 26 +++++++++++++-------------
1 files changed, 13 insertions(+), 13 deletions(-)
hooks/post-receive
--
GNU C Library master sources
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic