summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
GNU Libc Maintainers [Sat, 8 Oct 2022 15:53:16 +0000 (16:53 +0100)]
git-updates
GIT update of https://sourceware.org/git/glibc.git/release/2.28/master from glibc-2.28
GIT update of https://sourceware.org/git/glibc.git/release/2.28/master from glibc-2.28
Gbp-Pq: Name git-updates.diff
Helmut Grohne [Sat, 8 Oct 2022 15:53:16 +0000 (16:53 +0100)]
glibc (2.28-10+deb10u2) buster-security; urgency=medium
* Non-maintainer upload by LTS team.
* CVE-2016-10228 iconv option parsing Closes: #856503
* CVE-2019-19126 setuid environment filtering Closes: #945250
* CVE-2019-25013 oob read in iconv Closes: #979273
* CVE-2020-1752 use after free in glob Closes: #953788
* CVE-2020-6096 [arm] memcpy underflow Closes: #961452
* CVE-2020-10029 sinl buffer overflow Closes: #953108
* CVE-2020-27618 iconv infinite loop Closes: #973914
* CVE-2021-3326 iconv abort Closes: #981198
* CVE-2021-3999 oob write for getcwd size 1
* CVE-2021-27645 nscd double free Closes: #983479
* CVE-2021-33574 mq_notify use after free Closes: #989147
* CVE-2021-35942 wordexp input validation Closes: #990542
* CVE-2022-23218 svcunix_create buffer overflow
* CVE-2022-23219 clnt_create buffer overflow
[dgit import unpatched glibc 2.28-10+deb10u2]
Helmut Grohne [Sat, 8 Oct 2022 15:53:16 +0000 (16:53 +0100)]
Import glibc_2.28-10+deb10u2.debian.tar.xz
[dgit import tarball glibc 2.28-10+deb10u2 glibc_2.28-10+deb10u2.debian.tar.xz]
Aurelien Jarno [Mon, 29 Oct 2018 23:11:37 +0000 (23:11 +0000)]
Import glibc_2.28.orig.tar.xz
[dgit import orig glibc_2.28.orig.tar.xz]