Glibc - CVE-2015-8985 help

Hello, I'm working on fixing some GLIBC vulnerabilities and I have an issue regarding CVE-2015-8985 - Assertion failure in pop_fail_stack when executing a malformed regexp Although it seems to be fixed in glibc 2.28, I've encountered the following issue testing on a Ubuntu 19.10 virtual machine

[Git][glibc-team/glibc] Pushed new tag debian/2.30-7

Aurelien Jarno pushed new tag debian/2.30-7 at GNU Libc Maintainers / glibc -- View it on GitLab: https://salsa.debian.org/glibc-team/glibc/-/tree/debian/2.30-7 You're receiving this email because of your account on salsa.debian.org.

[Git][glibc-team/glibc][sid] releasing package glibc version 2.30-7

Aurelien Jarno pushed to branch sid at GNU Libc Maintainers / glibc Commits: e2eacd50 by Aurelien Jarno at 2020-05-05T20:12:44+02:00 releasing package glibc version 2.30-7 - - - - - 1 changed file: - debian/changelog View it on GitLab:

glibc_2.30-7_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2020 20:12:38 +0200 Source: glibc Architecture: source Version: 2.30-7 Distribution: unstable Urgency: medium Maintainer: GNU Libc Maintainers Changed-By: Aurelien Jarno Changes: glibc (2.30-7)

[Git][glibc-team/glibc][sid] debian/debhelper.in/libc.postinst: re-add /etc/ld.so.nohwcapc code.

Aurelien Jarno pushed to branch sid at GNU Libc Maintainers / glibc Commits: e1b7911a by Aurelien Jarno at 2020-05-05T20:08:52+02:00 debian/debhelper.in/libc.postinst: re-add /etc/ld.so.nohwcapc code. - - - - - 2 changed files: - debian/changelog - debian/debhelper.in/libc.postinst View

Processing of glibc_2.30-7_source.changes

glibc_2.30-7_source.changes uploaded successfully to localhost along with the files: glibc_2.30-7.dsc glibc_2.30-7.debian.tar.xz glibc_2.30-7_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

Re: Glibc - CVE-2015-8985 help

Hi, On 2020-05-05 12:14, Raluca-Petronela Florea wrote: > Hello, > > I'm working on fixing some GLIBC vulnerabilities and I have an issue > regarding > CVE-2015-8985 - Assertion failure in pop_fail_stack when executing a > malformed regexp > > Although it seems to be fixed in glibc 2.28, I've

[Git][glibc-team/glibc][sid] 3 commits: debian/sysdeps/s390x.mk: do not set libc_rtlddir, it is set to the default.

Aurelien Jarno pushed to branch sid at GNU Libc Maintainers / glibc Commits: 3c9173eb by Aurelien Jarno at 2020-05-05T12:24:12+02:00 debian/sysdeps/s390x.mk: do not set libc_rtlddir, it is set to the default. - - - - - 404911fe by Aurelien Jarno at 2020-05-05T12:32:39+02:00

[Git][glibc-team/glibc] Pushed new tag debian/2.30-6

Aurelien Jarno pushed new tag debian/2.30-6 at GNU Libc Maintainers / glibc -- View it on GitLab: https://salsa.debian.org/glibc-team/glibc/-/tree/debian/2.30-6 You're receiving this email because of your account on salsa.debian.org.

Re: Glibc - CVE-2015-8985 help

Thanks a lot, I appreciate your help! I read your answer and I understood! On Tue, 5 May 2020, 13:46 Raluca-Petronela Florea, < florea.raluca.petron...@gmail.com> wrote: > Ok, thanks for clarification. > > So, do you have any idea how the regexp should look like in order to > reproduce the issue

Re: Glibc - CVE-2015-8985 help

Ok, thanks for clarification. So, do you have any idea how the regexp should look like in order to reproduce the issue from bug? Thank you very much! On Tue, 5 May 2020, 13:24 Aurelien Jarno, wrote: > Hi, > > On 2020-05-05 12:14, Raluca-Petronela Florea wrote: > > Hello, > > > > I'm working

glibc_2.30-6_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2020 12:32:42 +0200 Source: glibc Architecture: source Version: 2.30-6 Distribution: unstable Urgency: medium Maintainer: GNU Libc Maintainers Changed-By: Aurelien Jarno Changes: glibc (2.30-6)

Processing of glibc_2.30-6_source.changes

glibc_2.30-6_source.changes uploaded successfully to localhost along with the files: glibc_2.30-6.dsc glibc_2.30-6.debian.tar.xz glibc_2.30-6_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)