From: Raspbian automatic forward porter Date: Wed, 30 Jun 2021 17:56:21 +0000 (+0100) Subject: Merge version 2.0.4-9+rpi1 and 2.0.4-9+deb9u1 to produce 2.0.4-9+rpi1+deb9u1 X-Git-Tag: archive/raspbian/2.0.4-9+rpi1+deb9u1^0 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=fdc78abffc9fd8358fc111dc699bb196e1807bf9;p=klibc.git Merge version 2.0.4-9+rpi1 and 2.0.4-9+deb9u1 to produce 2.0.4-9+rpi1+deb9u1 --- fdc78abffc9fd8358fc111dc699bb196e1807bf9 diff --cc debian/changelog index 3fcaaa8,0354691..3b96d56 --- a/debian/changelog +++ b/debian/changelog @@@ -1,9 -1,16 +1,23 @@@ - klibc (2.0.4-9+rpi1) stretch-staging; urgency=medium ++klibc (2.0.4-9+rpi1+deb9u1) stretch-staging; urgency=medium + + [changes brought forward from 2.0.4-2+rpi1 by Peter Michael Green at Wed, 26 Nov 2014 22:01:00 +0000] + * Change compiler settings to values suitable for raspberry pi + - -- Raspbian forward porter Tue, 17 May 2016 23:45:58 +0000 ++ -- Raspbian forward porter Wed, 30 Jun 2021 17:56:21 +0000 ++ + klibc (2.0.4-9+deb9u1) stretch-security; urgency=high + + * Never clean files in quilt status directory + * debian/rules: Use $(MAKE) for recursive make + * debian/rules: Change override_dh_auto_test rule to actually run tests + * Apply security fixes from 2.0.9 (Closes: #989505): + - malloc: Set errno on failure + - malloc: Fail if requested size > PTRDIFF_MAX (CVE-2021-31873) + - calloc: Fail if multiplication overflows (CVE-2021-31870) + - cpio: Fix possible integer overflow on 32-bit systems (CVE-2021-31872) + - cpio: Fix possible crash on 64-bit systems (CVE-2021-31871) + + -- Ben Hutchings Mon, 28 Jun 2021 16:24:37 +0200 klibc (2.0.4-9) unstable; urgency=medium