Your message dated Wed, 31 Aug 2016 16:25:35 +0000
with message-id <e1bf8kv-0006za...@franck.debian.org>
and subject line Bug#834752: fixed in glibc 2.24-1
has caused the Debian Bug report #834752,
regarding glibc: CVE-2016-6323: Missing unwind information on ARM
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
834752: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834752
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: glibc
Version: 2.23-4
Severity: normal
Tags: security upstream
Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=20435
Hi,
the following vulnerability was published for glibc, filling to track
the issue.
CVE-2016-6323[0]:
Missing unwind information on ARM
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2016-6323
[1] https://sourceware.org/bugzilla/show_bug.cgi?id=20435
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: glibc
Source-Version: 2.24-1
We believe that the bug you reported is fixed in the latest version of
glibc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 834...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Aurelien Jarno <aure...@debian.org> (supplier of updated glibc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 31 Aug 2016 17:51:04 +0200
Source: glibc
Binary: libc-bin libc-dev-bin libc-l10n glibc-doc glibc-source locales
locales-all nscd multiarch-support libc6 libc6-dev libc6-dbg libc6-pic
libc6-udeb libc6.1 libc6.1-dev libc6.1-dbg libc6.1-pic libc6.1-udeb libc0.3
libc0.3-dev libc0.3-dbg libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev
libc0.1-dbg libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 libc6-sparc
libc6-dev-sparc libc6-sparc64 libc6-dev-sparc64 libc6-s390 libc6-dev-s390
libc6-amd64 libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64
libc6-dev-ppc64 libc6-mips32 libc6-dev-mips32 libc6-mipsn32 libc6-dev-mipsn32
libc6-mips64 libc6-dev-mips64 libc0.1-i386 libc0.1-dev-i386 libc6-x32
libc6-dev-x32 libc6-xen libc0.3-xen libc6.1-alphaev67 libc0.1-i686 libc0.3-i686
libc6-i686
Architecture: source
Version: 2.24-1
Distribution: unstable
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aure...@debian.org>
Description:
glibc-doc - GNU C Library: Documentation
glibc-source - GNU C Library: sources
libc-bin - GNU C Library: Binaries
libc-dev-bin - GNU C Library: Development binaries
libc-l10n - GNU C Library: localization files
libc0.1 - GNU C Library: Shared libraries
libc0.1-dbg - GNU C Library: detached debugging symbols
libc0.1-dev - GNU C Library: Development Libraries and Header Files
libc0.1-dev-i386 - GNU C Library: 32bit development libraries for AMD64
libc0.1-i386 - GNU C Library: 32bit shared libraries for AMD64
libc0.1-i686 - transitional dummy package
libc0.1-pic - GNU C Library: PIC archive library
libc0.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
libc0.3 - GNU C Library: Shared libraries
libc0.3-dbg - GNU C Library: detached debugging symbols
libc0.3-dev - GNU C Library: Development Libraries and Header Files
libc0.3-i686 - transitional dummy package
libc0.3-pic - GNU C Library: PIC archive library
libc0.3-udeb - GNU C Library: Shared libraries - udeb (udeb)
libc0.3-xen - GNU C Library: Shared libraries [Xen version]
libc6 - GNU C Library: Shared libraries
libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64
libc6-dbg - GNU C Library: detached debugging symbols
libc6-dev - GNU C Library: Development Libraries and Header Files
libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64
libc6-dev-i386 - GNU C Library: 32-bit development libraries for AMD64
libc6-dev-mips32 - GNU C Library: o32 Development Libraries for MIPS
libc6-dev-mips64 - GNU C Library: 64bit Development Libraries for MIPS64
libc6-dev-mipsn32 - GNU C Library: n32 Development Libraries for MIPS64
libc6-dev-powerpc - GNU C Library: 32bit powerpc development libraries for
ppc64
libc6-dev-ppc64 - GNU C Library: 64bit Development Libraries for PowerPC64
libc6-dev-s390 - GNU C Library: 32bit Development Libraries for IBM zSeries
libc6-dev-sparc - GNU C Library: 32bit Development Libraries for SPARC
libc6-dev-sparc64 - GNU C Library: 64bit Development Libraries for UltraSPARC
libc6-dev-x32 - GNU C Library: X32 ABI Development Libraries for AMD64
libc6-i386 - GNU C Library: 32-bit shared libraries for AMD64
libc6-i686 - transitional dummy package
libc6-mips32 - GNU C Library: o32 Shared libraries for MIPS
libc6-mips64 - GNU C Library: 64bit Shared libraries for MIPS64
libc6-mipsn32 - GNU C Library: n32 Shared libraries for MIPS64
libc6-pic - GNU C Library: PIC archive library
libc6-powerpc - GNU C Library: 32bit powerpc shared libraries for ppc64
libc6-ppc64 - GNU C Library: 64bit Shared libraries for PowerPC64
libc6-s390 - GNU C Library: 32bit Shared libraries for IBM zSeries
libc6-sparc - GNU C Library: 32bit Shared libraries for SPARC
libc6-sparc64 - GNU C Library: 64bit Shared libraries for UltraSPARC
libc6-udeb - GNU C Library: Shared libraries - udeb (udeb)
libc6-x32 - GNU C Library: X32 ABI Shared libraries for AMD64
libc6-xen - GNU C Library: Shared libraries [Xen version]
libc6.1 - GNU C Library: Shared libraries
libc6.1-alphaev67 - GNU C Library: Shared libraries (EV67 optimized)
libc6.1-dbg - GNU C Library: detached debugging symbols
libc6.1-dev - GNU C Library: Development Libraries and Header Files
libc6.1-pic - GNU C Library: PIC archive library
libc6.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
locales - GNU C Library: National Language (locale) data [support]
locales-all - GNU C Library: Precompiled locale data
multiarch-support - Transitional package to ensure multiarch compatibility
nscd - GNU C Library: Name Service Cache Daemon
Closes: 834706 834752 835414
Changes:
glibc (2.24-1) unstable; urgency=medium
.
[ Adam Conrad ]
* debian/rules.d/control.mk: Manually add binutils, linux-libc-dev, and the
current GCC to the rebuild test deps, so they land in Testsuite-Triggers.
.
[ Aurelien Jarno ]
* debian/patches/git-updates.diff: update from upstream stable branch:
- debian/patches/any/submitted-argp-attribute.diff: upstreamed.
- Fix backtrace hang on armel/armhf, possibly causing a minor
denial-of-service vulnerability (CVE-2016-6323). Closes: #834752.
* debian/control.in/libc: drop ${locale-compat:Depends} as it was not used
anymore.
* debian/control.in/libc, debian/rules.d/debhelper.mk: compute the
linux-libc-dev dependency from the one installed at build time. Closes:
#834706.
* debian/patches/series: apply hppa/submitted-setcontext.diff. Closes:
#835414.
.
[ Samuel Thibault ]
* patches/hurd-i386/cvs-adjtime-NULL.diff: New patch to fix crash on
adjtime(..., NULL).
Checksums-Sha1:
56e2cfa8a1c4229a89860548478cfd96085fdf03 8296 glibc_2.24-1.dsc
4557e0cc8a2f41034ae923460645b2cdbd370ed9 917300 glibc_2.24-1.debian.tar.xz
Checksums-Sha256:
0b9e5c627e3cb9ed022745c5d28ea1913c6e2ba0bf4a0d7360004d0c561465ee 8296
glibc_2.24-1.dsc
cb2cf29ac2afa7a7ac2b50bcf4357db3f14571b6e578dc22f81d7884bc8efaaf 917300
glibc_2.24-1.debian.tar.xz
Files:
292aaa1a6cb7e43d43a9bf17e47cd75b 8296 libs required glibc_2.24-1.dsc
fc62a34e213853ca9fdd2fae193c5af2 917300 libs required
glibc_2.24-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIcBAEBCgAGBQJXxv0+AAoJELqceAYd3YybVnAP/2+xE7ufHlqTZNzagfPr3U/K
cjfd/o/I8XrhfQ+n2Dh1ek0LoJbaFNiIkBWhGrDJNVnm8YHfE9qQD8aVRA8cKciY
JQRm7CjTaGDw13U78ZqFjqJPe2FqeIIYUczDcznL8AqkgU45Ua5yxQF8kCncOvZV
fMJvfOJFUi/ULRpbPEBcLx3aYf6kBZ1/I/Ai3XZ9zdWR9AqdmAqaI+FkNacKQIj3
1zUzrBPP5mglkKjxdqAePqeELZtjqppMyY7z2lmwg1qpqUQMOtIL0I9tdDZPTdxF
2daHtbG5xOwElqPGYwXHQgBVweTyuLmzxigVCID3/dIA+9ciUODyQFRu9ZWlxNsO
Sq9K0knANQ4/GgvSFbkjDohcSalfyvHOjbB7U1xcE3oR0f1Jr266e451d6sxJw2Z
hyy0ThE4Ya4Z8WS5Euj5o0h+1/mBjJyQTpFXxef/bjd6NHzlEykRaq13skH3EtF/
jQ6gbhXPF4Y0W9le3+Y4iLflL+QKe2Jv6PD0X8vsCRpIwRz/oYU4yqrbOjaMphKw
ARNmBwFuz0vSJNz/8ssuQcQzzjPvuglsq/trA00xMTNjU2VGaW/BZcYxQhcrG0mb
pl7Uo51as1XQQsBdSPDJg2Jzl5XXt4Rra+hOUFwugb/5//pSqysLbwj5LDDC39j9
XiikIl6oDPnwGHLnpnG2
=0fdG
-----END PGP SIGNATURE-----
--- End Message ---