Your message dated Sun, 27 Feb 2011 15:48:02 +0000
with message-id <e1ptiqo-0001j3...@franck.debian.org>
and subject line Bug#615120: fixed in eglibc 2.11.2-12
has caused the Debian Bug report #615120,
regarding eglibc: alloca memory corruption
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
615120: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615120
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
package: eglibc
version: 2.11.2-10
severity: grave
tag: security
A memory corruption issue has been disclosed for eglibc [0]. I've
checked, and lenny (glibc), squeeze, and sid are affected by the poc.
experimental is not. According to the report, this permits arbitrary
code execution.
[0] http://seclists.org/fulldisclosure/2011/Feb/635
--- End Message ---
--- Begin Message ---
Source: eglibc
Source-Version: 2.11.2-12
We believe that the bug you reported is fixed in the latest version of
eglibc, which is due to be installed in the Debian FTP archive:
eglibc-source_2.11.2-12_all.deb
to main/e/eglibc/eglibc-source_2.11.2-12_all.deb
eglibc_2.11.2-12.diff.gz
to main/e/eglibc/eglibc_2.11.2-12.diff.gz
eglibc_2.11.2-12.dsc
to main/e/eglibc/eglibc_2.11.2-12.dsc
glibc-doc_2.11.2-12_all.deb
to main/e/eglibc/glibc-doc_2.11.2-12_all.deb
libc-bin_2.11.2-12_amd64.deb
to main/e/eglibc/libc-bin_2.11.2-12_amd64.deb
libc-dev-bin_2.11.2-12_amd64.deb
to main/e/eglibc/libc-dev-bin_2.11.2-12_amd64.deb
libc6-dbg_2.11.2-12_amd64.deb
to main/e/eglibc/libc6-dbg_2.11.2-12_amd64.deb
libc6-dev-i386_2.11.2-12_amd64.deb
to main/e/eglibc/libc6-dev-i386_2.11.2-12_amd64.deb
libc6-dev_2.11.2-12_amd64.deb
to main/e/eglibc/libc6-dev_2.11.2-12_amd64.deb
libc6-i386_2.11.2-12_amd64.deb
to main/e/eglibc/libc6-i386_2.11.2-12_amd64.deb
libc6-pic_2.11.2-12_amd64.deb
to main/e/eglibc/libc6-pic_2.11.2-12_amd64.deb
libc6-prof_2.11.2-12_amd64.deb
to main/e/eglibc/libc6-prof_2.11.2-12_amd64.deb
libc6-udeb_2.11.2-12_amd64.udeb
to main/e/eglibc/libc6-udeb_2.11.2-12_amd64.udeb
libc6_2.11.2-12_amd64.deb
to main/e/eglibc/libc6_2.11.2-12_amd64.deb
libnss-dns-udeb_2.11.2-12_amd64.udeb
to main/e/eglibc/libnss-dns-udeb_2.11.2-12_amd64.udeb
libnss-files-udeb_2.11.2-12_amd64.udeb
to main/e/eglibc/libnss-files-udeb_2.11.2-12_amd64.udeb
locales-all_2.11.2-12_amd64.deb
to main/e/eglibc/locales-all_2.11.2-12_amd64.deb
locales_2.11.2-12_all.deb
to main/e/eglibc/locales_2.11.2-12_all.deb
nscd_2.11.2-12_amd64.deb
to main/e/eglibc/nscd_2.11.2-12_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 615...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Aurelien Jarno <aure...@debian.org> (supplier of updated eglibc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 26 Feb 2011 18:28:26 +0100
Source: eglibc
Binary: libc-bin libc-dev-bin glibc-doc eglibc-source locales locales-all nscd
libc6 libc6-dev libc6-dbg libc6-prof libc6-pic libc6-udeb libc6.1 libc6.1-dev
libc6.1-dbg libc6.1-prof libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev
libc0.3-dbg libc0.3-prof libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev
libc0.1-dbg libc0.1-prof libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386
libc6-sparc64 libc6-dev-sparc64 libc6-s390x libc6-dev-s390x libc6-amd64
libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64
libc6-mipsn32 libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc0.1-i386
libc0.1-dev-i386 libc6-sparcv9b libc6-i686 libc6-xen libc0.1-i686 libc0.3-i686
libc0.3-xen libc6.1-alphaev67 libnss-dns-udeb libnss-files-udeb
Architecture: source all amd64
Version: 2.11.2-12
Distribution: unstable
Urgency: medium
Maintainer: Aurelien Jarno <aure...@debian.org>
Changed-By: Aurelien Jarno <aure...@debian.org>
Description:
eglibc-source - Embedded GNU C Library: sources
glibc-doc - Embedded GNU C Library: Documentation
libc-bin - Embedded GNU C Library: Binaries
libc-dev-bin - Embedded GNU C Library: Development binaries
libc0.1 - Embedded GNU C Library: Shared libraries
libc0.1-dbg - Embedded GNU C Library: detached debugging symbols
libc0.1-dev - Embedded GNU C Library: Development Libraries and Header Files
libc0.1-dev-i386 - Embedded GNU C Library: 32bit development libraries for
AMD64
libc0.1-i386 - Embedded GNU C Library: 32bit shared libraries for AMD64
libc0.1-i686 - Embedded GNU C Library: Shared libraries [i686 optimized]
libc0.1-pic - Embedded GNU C Library: PIC archive library
libc0.1-prof - Embedded GNU C Library: Profiling Libraries
libc0.1-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
libc0.3 - Embedded GNU C Library: Shared libraries
libc0.3-dbg - Embedded GNU C Library: detached debugging symbols
libc0.3-dev - Embedded GNU C Library: Development Libraries and Header Files
libc0.3-i686 - Embedded GNU C Library: Shared libraries [i686 optimized]
libc0.3-pic - Embedded GNU C Library: PIC archive library
libc0.3-prof - Embedded GNU C Library: Profiling Libraries
libc0.3-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
libc0.3-xen - Embedded GNU C Library: Shared libraries [Xen version]
libc6 - Embedded GNU C Library: Shared libraries
libc6-amd64 - Embedded GNU C Library: 64bit Shared libraries for AMD64
libc6-dbg - Embedded GNU C Library: detached debugging symbols
libc6-dev - Embedded GNU C Library: Development Libraries and Header Files
libc6-dev-amd64 - Embedded GNU C Library: 64bit Development Libraries for AMD64
libc6-dev-i386 - Embedded GNU C Library: 32-bit development libraries for AMD64
libc6-dev-mips64 - Embedded GNU C Library: 64bit Development Libraries for
MIPS64
libc6-dev-mipsn32 - Embedded GNU C Library: n32 Development Libraries for
MIPS64
libc6-dev-powerpc - Embedded GNU C Library: 32bit powerpc development
libraries for p
libc6-dev-ppc64 - Embedded GNU C Library: 64bit Development Libraries for
PowerPC64
libc6-dev-s390x - Embedded GNU C Library: 64bit Development Libraries for IBM
zSeri
libc6-dev-sparc64 - Embedded GNU C Library: 64bit Development Libraries for
UltraSPAR
libc6-i386 - Embedded GNU C Library: 32-bit shared libraries for AMD64
libc6-i686 - Embedded GNU C Library: Shared libraries [i686 optimized]
libc6-mips64 - Embedded GNU C Library: 64bit Shared libraries for MIPS64
libc6-mipsn32 - Embedded GNU C Library: n32 Shared libraries for MIPS64
libc6-pic - Embedded GNU C Library: PIC archive library
libc6-powerpc - Embedded GNU C Library: 32bit powerpc shared libraries for
ppc64
libc6-ppc64 - Embedded GNU C Library: 64bit Shared libraries for PowerPC64
libc6-prof - Embedded GNU C Library: Profiling Libraries
libc6-s390x - Embedded GNU C Library: 64bit Shared libraries for IBM zSeries
libc6-sparc64 - Embedded GNU C Library: 64bit Shared libraries for UltraSPARC
libc6-sparcv9b - Embedded GNU C Library: Shared libraries [v9b optimized]
libc6-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
libc6-xen - Embedded GNU C Library: Shared libraries [Xen version]
libc6.1 - Embedded GNU C Library: Shared libraries
libc6.1-alphaev67 - Embedded GNU C Library: Shared libraries (EV67 optimized)
libc6.1-dbg - Embedded GNU C Library: detached debugging symbols
libc6.1-dev - Embedded GNU C Library: Development Libraries and Header Files
libc6.1-pic - Embedded GNU C Library: PIC archive library
libc6.1-prof - Embedded GNU C Library: Profiling Libraries
libc6.1-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
libnss-dns-udeb - Embedded GNU C Library: NSS helper for DNS - udeb (udeb)
libnss-files-udeb - Embedded GNU C Library: NSS helper for files - udeb (udeb)
locales - Embedded GNU C Library: National Language (locale) data [support]
locales-all - Embedded GNU C Library: Precompiled locale data
nscd - Embedded GNU C Library: Name Service Cache Daemon
Closes: 527589 612540 614892 615120
Changes:
eglibc (2.11.2-12) unstable; urgency=medium
.
[ Aurelien Jarno ]
* Re-enable build failure in case of testsuite regressions.
* Add patches/any/cvs-fnmatch-alloca.patch from upstream to fix a
memory corruption in fnmatch() that can lead to code execution.
Closes: #615120.
* Add patches/any/cvs-qsort-race.diff from upstream to fix race in
qsort_r(). Closes: #614892.
.
[ Samuel Thibault ]
* patches/any/submitted-sched_h.diff: Synchronize bits/sched.h with
sysdeps/unix/sysv/linux/bits/sched.h (Closes: #527589), rename to
cvs-sched_h.diff.
* patches/hurd-i386/cvs-if_freereq.diff: Fix crash when siocgifconf
actually succeeds.
.
[ Clint Adams ]
* Patch from Nobuhiro Iwamatsu to cope with the removal of
patch --unified-reject-files. closes: #612540.
.
[ Steve Langasek ]
* Merge parts of multiarch patch:
- Use the correct path in the ldd script as well
- Set default rtlddir to /lib and override it when needed.
- Install xen library in $(libdir)/xen instead of /usr/lib/xen.
Checksums-Sha1:
aa5ba03363da5081c1ef3136c9e6c087df9cb31d 2730 eglibc_2.11.2-12.dsc
3239a2408f823a24447c01157714fd8fec0592ea 894979 eglibc_2.11.2-12.diff.gz
f8c5cf3b4aba213f79096b3ce58bf3acabb3b0b8 1843680 glibc-doc_2.11.2-12_all.deb
297472c4b5149eaf3468644c64f999d38018c9c2 11073926
eglibc-source_2.11.2-12_all.deb
d02783d674d5fb2250c1322de582d9fc3322e958 4756444 locales_2.11.2-12_all.deb
a476056f081e60333093b574bb24d38c901be9cc 4273898 libc6_2.11.2-12_amd64.deb
e30995c7cfce45a81d6dc96906d4d7a3ce674ebf 2588330 libc6-dev_2.11.2-12_amd64.deb
ae409d61e5acff0f6f557d9065df7192a15f822d 2034054 libc6-prof_2.11.2-12_amd64.deb
c947508448afd7de28a66081ada9bad75726e905 1547730 libc6-pic_2.11.2-12_amd64.deb
e461ba0ae4cac70ed080ce0f0018473c7d7a9eb8 747060 libc-bin_2.11.2-12_amd64.deb
56b2fde3e526d6d00fb8874c5dd43015013bf448 207546
libc-dev-bin_2.11.2-12_amd64.deb
9356a4d1c2f5615f25c8b71a32a181ceda5bd331 3787132
locales-all_2.11.2-12_amd64.deb
f76a54dabba3b2e8ca2909cde85cb294a39f1f7a 3805802 libc6-i386_2.11.2-12_amd64.deb
15a7ee2bf5bbe8d8dc893d9e489ff9ae7b4d9177 1524786
libc6-dev-i386_2.11.2-12_amd64.deb
0afe1f69a2f50413a84b7417b128ee7d93a6b5d8 197062 nscd_2.11.2-12_amd64.deb
a148d010d51c74956c2c4d742e5c90d95f2f84b9 10426608 libc6-dbg_2.11.2-12_amd64.deb
e449cb5da3f80cc36a4c756eaeb224f44a817a2d 1150622
libc6-udeb_2.11.2-12_amd64.udeb
8c2ae40629cf2a27e9297d3913a9669f408af72c 11128
libnss-dns-udeb_2.11.2-12_amd64.udeb
715ee3124b647931dfbdd1230f31563ef7880238 19690
libnss-files-udeb_2.11.2-12_amd64.udeb
Checksums-Sha256:
dfa076e93a99af5dbbc2b7040a0a5126b91069db400e9c842e1867436a003a9a 2730
eglibc_2.11.2-12.dsc
8f1f7d00b5eec4d17d2481b7c75a4266f0d5d658ee9beeabc13af9abbce2e6d6 894979
eglibc_2.11.2-12.diff.gz
bdf2aeabc6bac70d114113875667e84333e19a31e71d4165c1714469c7ae9429 1843680
glibc-doc_2.11.2-12_all.deb
c5ba8907ccec84f67b9eeb5cff429eee13565d3079424bff4d8da93bf3295f7a 11073926
eglibc-source_2.11.2-12_all.deb
c0f65cff7631ec5262dd4ffd5e7975aeee104311b8f2cc831865ab22404116c9 4756444
locales_2.11.2-12_all.deb
f908208f4e7c350a383b001523a9c7c93736e471d34c8630ab747adf4a7a45b1 4273898
libc6_2.11.2-12_amd64.deb
27aa98c2e0f540bd737f61fe29bab187c78a4152c7870ffafd3fc2ff71e069a5 2588330
libc6-dev_2.11.2-12_amd64.deb
6a69a3a42181cdb0231b822ceb9f59a5bb742cb11eb05d95349135a033fd5ae6 2034054
libc6-prof_2.11.2-12_amd64.deb
2e8b48d7be922fc3f65a8afc52ab073004605995d5671db48dc0b78ed5dc638d 1547730
libc6-pic_2.11.2-12_amd64.deb
577224e218a3f9cca6148b39fff3243c59180a4a375db41c9ea928e2e0683a50 747060
libc-bin_2.11.2-12_amd64.deb
cecbce251b08051ae24f87ffc23c50721c245757e3beae97358fdc0a89dd70de 207546
libc-dev-bin_2.11.2-12_amd64.deb
637a8c6d327fec08afe5ff35766e4b14603e2a8a6fce1fc86189f7fdc241162f 3787132
locales-all_2.11.2-12_amd64.deb
0dec156d128217e744cee92ed8d3466ea05051ea5970919d6e8c4e2c89f26589 3805802
libc6-i386_2.11.2-12_amd64.deb
cbd18dceef61bb230b49f678096bfc9d659210f7a9f52262566a14caf8dec22c 1524786
libc6-dev-i386_2.11.2-12_amd64.deb
6eeece180486980fe44278b90dfd279f3196980593b310a47f4e565418a51b15 197062
nscd_2.11.2-12_amd64.deb
0f8b1e2d877bf3f37b059eb0aa8dfd7c0a904ceed9fb19d32f9dab7d949d2c78 10426608
libc6-dbg_2.11.2-12_amd64.deb
4ca6f241c113c5c9c55d6669700690af7b80e1c5404a869573e227254379163f 1150622
libc6-udeb_2.11.2-12_amd64.udeb
fea251b9967f8957cfc1ae51109014ebc073bfe6b709dc727614bb3301e17a2a 11128
libnss-dns-udeb_2.11.2-12_amd64.udeb
e3bec6a398439a3a98a6749a483883fe554900b01f17697da595393f64c09cf4 19690
libnss-files-udeb_2.11.2-12_amd64.udeb
Files:
29496273b3af06a7c4b4da274e8972c6 2730 libs required eglibc_2.11.2-12.dsc
ca3721edeba177189671d2b5ddfc743f 894979 libs required eglibc_2.11.2-12.diff.gz
5558a1d8f0d7198ab90c9d211058739c 1843680 doc optional
glibc-doc_2.11.2-12_all.deb
5cf1086a9046304970ea074cde918ebc 11073926 devel optional
eglibc-source_2.11.2-12_all.deb
f510362d80df447265ee416a46c627c2 4756444 localization standard
locales_2.11.2-12_all.deb
8de44f03ef10dda26076f2657842e1ed 4273898 libs required
libc6_2.11.2-12_amd64.deb
3ba2ad38cc4b5228517f4a7059fe3bc6 2588330 libdevel optional
libc6-dev_2.11.2-12_amd64.deb
cf056959e7d109ba96c298da8b0e726b 2034054 libdevel extra
libc6-prof_2.11.2-12_amd64.deb
24f2fd4977d6a53964192a8cb11e5c98 1547730 libdevel optional
libc6-pic_2.11.2-12_amd64.deb
f97971f7d4c70e7345ea21316d62286c 747060 libs required
libc-bin_2.11.2-12_amd64.deb
b4da267d94e1359d748adbdad7665123 207546 libdevel optional
libc-dev-bin_2.11.2-12_amd64.deb
a113c0acd1592e556bdcdad256cdcd6f 3787132 localization extra
locales-all_2.11.2-12_amd64.deb
cfb9f685a7598c6b5539f9587835ed50 3805802 libs optional
libc6-i386_2.11.2-12_amd64.deb
44577402b9d747f5433532383290832b 1524786 libdevel optional
libc6-dev-i386_2.11.2-12_amd64.deb
bcd524b1bcbc567f2e6231c9094ee289 197062 admin optional nscd_2.11.2-12_amd64.deb
168a0ade4882d763119b5b1dfe18a561 10426608 debug extra
libc6-dbg_2.11.2-12_amd64.deb
c15e1ee1806ee811555098915781c398 1150622 debian-installer extra
libc6-udeb_2.11.2-12_amd64.udeb
58c27c822a1f467adab5d7d00329aa5a 11128 debian-installer extra
libnss-dns-udeb_2.11.2-12_amd64.udeb
7f2febcab9af508fb77bf14cbdb03f49 19690 debian-installer extra
libnss-files-udeb_2.11.2-12_amd64.udeb
Package-Type: udeb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iD8DBQFNalW1w3ao2vG823MRAo8ZAJ43pnTBhTCi4XzMSWZJghbQzUgO1wCfTUFo
Hlk8v0YYCrGKW7h3Gtk1HeE=
=QMmo
-----END PGP SIGNATURE-----
--- End Message ---