glibc (2.9-4ubuntu6.3) jaunty-security; urgency=low
* SECURITY UPDATE: root escalation via LD_AUDIT DST expansion.
- debian/patches/any/dst-expansion-fix.diff: upstream fixes.
- CVE-2010-3847
- debian/patches/any/disable-ld_audit.diff: turn off LD_AUDIT
for setuid binaries.
Date: Thu, 21 Oct 2010 14:31:36 -0700
Changed-By: Kees Cook <k...@ubuntu.com>
Maintainer: Ubuntu Core developers <ubuntu-devel-disc...@lists.ubuntu.com>
https://launchpad.net/ubuntu/jaunty/+source/glibc/2.9-4ubuntu6.3
Format: 1.8
Date: Thu, 21 Oct 2010 14:31:36 -0700
Source: glibc
Binary: glibc-doc glibc-source locales locales-all nscd libc6 libc6-dev
libc6-dbg libc6-prof libc6-pic libc6-udeb libc6.1 libc6.1-dev libc6.1-dbg
libc6.1-prof libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev libc0.3-dbg
libc0.3-prof libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev libc0.1-dbg
libc0.1-prof libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 libc6-sparc64
libc6-dev-sparc64 libc6-s390x libc6-dev-s390x libc6-amd64 libc6-dev-amd64
libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64 libc6-mipsn32
libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc0.1-i386 libc0.1-dev-i386
libc6-sparcv9b libc6-sparcv9v libc6-sparcv9v2 libc6-sparc64b libc6-sparc64v
libc6-sparc64v2 libc6-i686 libc6-xen libc0.1-i686 libc6-vfp libc6.1-alphaev67
libnss-dns-udeb libnss-files-udeb
Architecture: source
Version: 2.9-4ubuntu6.3
Distribution: jaunty-security
Urgency: low
Maintainer: Ubuntu Core developers <ubuntu-devel-disc...@lists.ubuntu.com>
Changed-By: Kees Cook <k...@ubuntu.com>
Description:
glibc-doc - GNU C Library: Documentation
glibc-source - GNU C Library: sources
libc0.1 - GNU C Library: Shared libraries
libc0.1-dbg - GNU C Library: detached debugging symbols
libc0.1-dev - GNU C Library: Development Libraries and Header Files
libc0.1-dev-i386 - GNU C Library: 32bit development libraries for AMD64
libc0.1-i386 - GNU C Library: 32bit shared libraries for AMD64
libc0.1-i686 - GNU C Library: Shared libraries [i686 optimized]
libc0.1-pic - GNU C Library: PIC archive library
libc0.1-prof - GNU C Library: Profiling Libraries
libc0.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
libc0.3 - GNU C Library: Shared libraries
libc0.3-dbg - GNU C Library: detached debugging symbols
libc0.3-dev - GNU C Library: Development Libraries and Header Files
libc0.3-pic - GNU C Library: PIC archive library
libc0.3-prof - GNU C Library: Profiling Libraries
libc0.3-udeb - GNU C Library: Shared libraries - udeb (udeb)
libc6 - GNU C Library: Shared libraries
libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64
libc6-dbg - GNU C Library: detached debugging symbols
libc6-dev - GNU C Library: Development Libraries and Header Files
libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64
libc6-dev-i386 - GNU C Library: 32bit development libraries for AMD64
libc6-dev-mips64 - GNU C Library: 64bit Development Libraries for MIPS64
libc6-dev-mipsn32 - GNU C Library: n32 Development Libraries for MIPS64
libc6-dev-powerpc - GNU C Library: 32bit powerpc development libraries for
ppc64
libc6-dev-ppc64 - GNU C Library: 64bit Development Libraries for PowerPC64
libc6-dev-s390x - GNU C Library: 64bit Development Libraries for IBM zSeries
libc6-dev-sparc64 - GNU C Library: 64bit Development Libraries for UltraSPARC
libc6-i386 - GNU C Library: 32bit shared libraries for AMD64
libc6-i686 - GNU C Library: Shared libraries [i686 optimized]
libc6-mips64 - GNU C Library: 64bit Shared libraries for MIPS64
libc6-mipsn32 - GNU C Library: n32 Shared libraries for MIPS64
libc6-pic - GNU C Library: PIC archive library
libc6-powerpc - GNU C Library: 32bit powerpc shared libraries for ppc64
libc6-ppc64 - GNU C Library: 64bit Shared libraries for PowerPC64
libc6-prof - GNU C Library: Profiling Libraries
libc6-s390x - GNU C Library: 64bit Shared libraries for IBM zSeries
libc6-sparc64 - GNU C Library: 64bit Shared libraries for UltraSPARC
libc6-sparc64b - GNU C Library: 64bit Shared libraries for UltraSPARC [v9b
optimiz
libc6-sparc64v - GNU C Library: 64bit Shared libraries for UltraSPARC [v9v
optimiz
libc6-sparc64v2 - GNU C Library: 64bit Shared libraries for UltraSPARC [v9v2
optimi
libc6-sparcv9b - GNU C Library: Shared libraries [v9b optimized]
libc6-sparcv9v - GNU C Library: Shared libraries [v9v optimized]
libc6-sparcv9v2 - GNU C Library: Shared libraries [v9v2 optimized]
libc6-udeb - GNU C Library: Shared libraries - udeb (udeb)
libc6-vfp - GNU C Library: Shared libraries [VFP version]
libc6-xen - GNU C Library: Shared libraries [Xen version]
libc6.1 - GNU C Library: Shared libraries
libc6.1-alphaev67 - GNU C Library: Shared libraries (EV67 optimized)
libc6.1-dbg - GNU C Library: detached debugging symbols
libc6.1-dev - GNU C Library: Development Libraries and Header Files
libc6.1-pic - GNU C Library: PIC archive library
libc6.1-prof - GNU C Library: Profiling Libraries
libc6.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
libnss-dns-udeb - GNU C Library: NSS helper for DNS - udeb (udeb)
libnss-files-udeb - GNU C Library: NSS helper for files - udeb (udeb)
locales - GNU C Library: National Language (locale) data [support]
locales-all - GNU C Library: Precompiled locale data
nscd - GNU C Library: Name Service Cache Daemon
Changes:
glibc (2.9-4ubuntu6.3) jaunty-security; urgency=low
.
* SECURITY UPDATE: root escalation via LD_AUDIT DST expansion.
- debian/patches/any/dst-expansion-fix.diff: upstream fixes.
- CVE-2010-3847
- debian/patches/any/disable-ld_audit.diff: turn off LD_AUDIT
for setuid binaries.
Checksums-Sha1:
a13a950250508ccbd84d97f342541be6eaf1c686 3067 glibc_2.9-4ubuntu6.3.dsc
1d75e3f3ffa9ea4c99a198b50f5b4ac776505023 2684077 glibc_2.9-4ubuntu6.3.diff.gz
Checksums-Sha256:
b03b0a6164f6266e15db3173dea6bb567fa811439475617120f53d0b215056c3 3067
glibc_2.9-4ubuntu6.3.dsc
ad560dc626a892c6cb9f7d778030e81029d853f2da16c0649ee2ce19ce97d16f 2684077
glibc_2.9-4ubuntu6.3.diff.gz
Files:
04d49f21dd60c0e2490df5df2ef54153 3067 libs required glibc_2.9-4ubuntu6.3.dsc
3579c672c77eed5dbd0f43fca80ffa1b 2684077 libs required
glibc_2.9-4ubuntu6.3.diff.gz
Original-Maintainer: GNU Libc Maintainers <debian-gl...@lists.debian.org>
--
Jaunty-changes mailing list
Jaunty-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/jaunty-changes
