From: "Yann E. MORIN" <yann.morin.1998@free.fr>
To: Peter Korsgaard <peter@korsgaard.com>
Cc: Romain Naour <romain.naour@gmail.com>,
Thomas Petazzoni <thomas.petazzoni@bootlin.com>,
buildroot@buildroot.org
Subject: Re: [Buildroot] [PATCH 2/2] package/glibc: security bump to 2.39-74 for post-2.39 security fixes
Date: Sun, 16 Jun 2024 22:42:48 +0200 [thread overview]
Message-ID: <Zm9OSDPCKocvJuvK@landeda> (raw)
In-Reply-To: <20240616124322.692320-2-peter@korsgaard.com>
Peter, All,
On 2024-06-16 14:43 +0200, Peter Korsgaard spake thusly:
> Fixes the following security issues:
>
> GLIBC-SA-2024-0004:
> ISO-2022-CN-EXT: fix out-of-bound writes when writing escape
> sequence (CVE-2024-2961)
>
> GLIBC-SA-2024-0005:
> nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599)
>
> GLIBC-SA-2024-0006:
> nscd: Null pointer crash after notfound response (CVE-2024-33600)
>
> GLIBC-SA-2024-0007:
> nscd: netgroup cache may terminate daemon on memory allocation
> failure (CVE-2024-33601)
>
> GLIBC-SA-2024-0008:
> nscd: netgroup cache assumes NSS callback uses in-buffer strings
> (CVE-2024-33602)
>
> In addition, the following bugs are fixed:
[--SNIP--]
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Applied to master, thanks.
Regards,
Yann E. MORIN.
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2024-06-16 20:42 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-06-16 12:43 [Buildroot] [PATCH 1/2] package/glibc: drop ignores for 2.38 specific CVEs Peter Korsgaard
2024-06-16 12:43 ` [Buildroot] [PATCH 2/2] package/glibc: security bump to 2.39-74 for post-2.39 security fixes Peter Korsgaard
2024-06-16 20:42 ` Yann E. MORIN [this message]
2024-07-05 19:28 ` Peter Korsgaard
2024-06-16 20:42 ` [Buildroot] [PATCH 1/2] package/glibc: drop ignores for 2.38 specific CVEs Yann E. MORIN
2024-07-05 19:28 ` Peter Korsgaard
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Zm9OSDPCKocvJuvK@landeda \
--to=yann.morin.1998@free.fr \
--cc=buildroot@buildroot.org \
--cc=peter@korsgaard.com \
--cc=romain.naour@gmail.com \
--cc=thomas.petazzoni@bootlin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox