dgit.raspbian.org Git - docker.io.git/commit

author	Justin Cormack <justin.cormack@docker.com>
	Thu, 25 Jul 2019 14:24:39 +0000 (15:24 +0100)
committer	Felix Geyer <fgeyer@debian.org>
	Tue, 3 Sep 2019 17:59:35 +0000 (18:59 +0100)
commit	d85d16c2a1633b95b710ee84e2bf3b0c14cd8434
tree	d5263eed19633583b3bebdb8b06094edd28f3dd9	tree \| snapshot
parent	a6b8761f2c4539797718609e3374b229e1fd4764	commit \| diff

Initialize nss libraries in Glibc so that the dynamic libraries are loaded in the host environment not in the chroot from untrusted files.

See also OpenVZ https://github.com/kolyshkin/vzctl/blob/a3f732ef751998913fcf0a11b3e05236b51fd7e9/src/enter.c#L227-L234

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Signed-off-by: Tibor Vass <tibor@docker.com>
(cherry picked from commit a316b10dab79d9298b02c7930958ed52e0ccf4e4)

Gbp-Pq: Name cve-2019-14271-Initialize-nss-libraries-in-Glibc.patch