Bug#772705: libc6: buffer overflow in tzset

Hi This should be addressed with the followign commit: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=42261ad731 See: http://www.openwall.com/lists/oss-security/2015/04/24/3 Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsub

Bug#772705: libc6: buffer overflow in tzset

* Jakub Wilk , 2014-12-10, 12:30: $ TZ=$PWD/crashtz date *** Error in `date': free(): invalid next size (fast): 0x0916b160 *** Aborted In case you wonder why would anyone want to use a malformed timezone file, see bugs #772706 and #772707. -- Jakub Wilk -- To UNSUBSCRIBE, email to debian-b

Bug#772705: libc6: buffer overflow in tzset

Package: libc6 Version: 2.19-13 The attached crafted timezone file makes tzset(3) crash: $ TZ=$PWD/crashtz date *** Error in `date': free(): invalid next size (fast): 0x0916b160 *** Aborted Valgrind says: ==7754== Invalid write of size 1 ==7754==at 0x40F7D7D: __tzfile_read (tzfile.c:379)