SHA256
6
0
forked from pool/glibc

Accepting request 568213 from home:Andreas_Schwab:Factory

- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)

- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  #22607, BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)

OBS-URL: https://build.opensuse.org/request/show/568213
OBS-URL: https://build.opensuse.org/package/show/Base:System/glibc?expand=0&rev=488
This commit is contained in:
2018-01-22 16:14:59 +00:00
committed by Git OBS Bridge
parent 3d1d35fa2b
commit dc304305df
5 changed files with 237 additions and 1 deletions

View File

@@ -1,3 +1,18 @@
-------------------------------------------------------------------
Mon Jan 22 10:32:36 UTC 2018 - schwab@suse.de
- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)
-------------------------------------------------------------------
Tue Jan 2 10:43:09 UTC 2018 - schwab@suse.de
- dl-init-paths-overflow.patch: Count components of the expanded path in
_dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
#22607, BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
-------------------------------------------------------------------
Wed Dec 13 15:04:54 UTC 2017 - schwab@suse.de