Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=f4f7125686bd62fb3264e2d94ba44f1c3305cbed
commit f4f7125686bd62fb3264e2d94ba44f1c3305cbed Author: kikadf <[email protected]> Date: Thu Feb 26 14:48:19 2015 +0100 Add FSA for glibc diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index c6b7f80..9d2a1b0 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -39,6 +39,21 @@ <fsas> <fsa> + <id>972</id> + <date>2015-02-26</date> + <author>kikadf</author> + <package>glibc</package> + <vulnerable>2.19-4</vulnerable> + <unaffected>2.19-5rigel1</unaffected> + <bts></bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406 + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9402 + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1472 + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1473</cve> + <desc>The vfprintf function in stdio-common/vfprintf.c in GNU C Library does not "properly restrict the use of" the alloca function when allocating the SPECS array. The getnetbyname function in glibc 2.21 or earlier will enter an infinite loop if the DNS backend is activated in the system Name Service Switch configuration, and the DNS resolver receives a positive answer while processing the network name. + Under certain conditions wscanf can allocate too little memory for the to-be-scanned arguments and overflow the allocated buffer.</desc> + </fsa> + <fsa> <id>971</id> <date>2015-02-26</date> <author>kikadf</author> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
