Author: renodr
Date: Tue Aug 11 17:55:49 2020
New Revision: 1603
Log:
Errata: add errata for LFS glibc vulnerabilities
Modified:
html/trunk/lfs/errata/9.1-systemd/index.html
html/trunk/lfs/errata/9.1/index.html
Modified: html/trunk/lfs/errata/9.1-systemd/index.html
==============================================================================
--- html/trunk/lfs/errata/9.1-systemd/index.html Sat Aug 8 21:19:05
2020 (r1602)
+++ html/trunk/lfs/errata/9.1-systemd/index.html Tue Aug 11 17:55:49
2020 (r1603)
@@ -75,6 +75,25 @@
the 9.1 book with the version of
<a href="../../view/systemd/chapter08/python.html">Python</a>
from the development book.</li>
+ <li>CVE-2016-10228: infinite loop in the iconv program when invoked
+ with the -c option with invalid multi-byte input sequences.
+ To fix this, upgrade to glibc-2.32 using the instructions from
+ the 9.1 book with the version of
+ <a href="../../view/systemd/chapter08/glibc.html">Glibc</a>
+ from the development book.</li>
+ <li>CVE-2020-10029: stack corruption when using trigonometric
+ functions with a pseudo-zero argument on x86. To fix this,
+ upgrade to glibc-2.32 using the instructions from the 9.1
+ book with the version of
+ <a href="../../view/systemd/chapter08/glibc.html">Glibc</a>
+ from the development book.</li>
+ <li>CVE-2020-1752: use-after-free vulnerability in the glob
+ function when expanding ~user. To fix this, upgrade to
+ glibc-2.32 using the instructions from the 9.1 book
+ with the version of
+ <a href="../../view/systemd/chapter08/glibc.html">Glibc</a>
+ from the development book.</li>
+
</ul>
Modified: html/trunk/lfs/errata/9.1/index.html
==============================================================================
--- html/trunk/lfs/errata/9.1/index.html Sat Aug 8 21:19:05 2020
(r1602)
+++ html/trunk/lfs/errata/9.1/index.html Tue Aug 11 17:55:49 2020
(r1603)
@@ -68,6 +68,24 @@
the 9.1 book with the version of
<a
href="../../view/development/chapter08/python.html">Python</a>
from the development book.</li>
+ <li>CVE-2016-10228: infinite loop in the iconv program when invoked
+ with the -c option with invalid multi-byte input sequences.
+ To fix this, upgrade to glibc-2.32 using the instructions from
+ the 9.1 book with the version of
+ <a href="../../view/development/chapter08/glibc.html">Glibc</a>
+ from the development book.</li>
+ <li>CVE-2020-10029: stack corruption when using trigonometric
+ functions with a pseudo-zero argument on x86. To fix this,
+ upgrade to glibc-2.32 using the instructions from the 9.1
+ book with the version of
+ <a href="../../view/development/chapter08/glibc.html">Glibc</a>
+ from the development book.</li>
+ <li>CVE-2020-1752: use-after-free vulnerability in the glob
+ function when expanding ~user. To fix this, upgrade to
+ glibc-2.32 using the instructions from the 9.1 book
+ with the version of
+ <a href="../../view/development/chapter08/glibc.html">Glibc</a>
+ from the development book.</li>
</ul>
<!--
--
http://lists.linuxfromscratch.org/listinfo/website
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
