Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c091b6e0 by Salvatore Bonaccorso at 2019-01-06T13:12:25Z
Add fixed version for CVE-2015-8985/glibc
First version in Debian including the fix was the 2.28-0experimental0
to experimental, which landed with 2.28-1 in unstable.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -168688,7 +168688,7 @@ CVE-2015-2081 (Datto ALTO and SIRIS devices allow
Remote Code Execution via ...)
CVE-2014-9685 (Multiple cross-site scripting (XSS) vulnerabilities in Vanilla
Forums ...)
NOT-FOR-US: Vanilla Forums
CVE-2015-8985 (The pop_fail_stack function in the GNU C Library (aka glibc or
libc6) ...)
- - glibc <unfixed> (unimportant; bug #779392)
+ - glibc 2.28-1 (unimportant; bug #779392)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21163
NOTE:
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=eb04c21373e2a2885f3d52ff192b0499afe3c672
(2.28)
NOTE: DoS via crafted regexps are not considered security issues by
glibc upstream
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c091b6e06c798063601c82f35b1be797858ab5d4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c091b6e06c798063601c82f35b1be797858ab5d4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
