Commit Graph

3 Commits

Author SHA1 Message Date
Bernd Kuhls
f63ec06a13 package/glibc: Add security patches to fix CVE-2016-3075
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-04-24 23:28:30 +02:00
Thomas Petazzoni
f261114522 glibc: backport patch to fix Microblaze build issue
This commit backports a glibc patch that fixes the build of glibc 2.22
on the Microblaze architecture.

Fixes:

  http://autobuild.buildroot.org/results/673/67348953fac469affd1965e04d61485ebb41e252/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-03-04 17:06:53 +01:00
Gustavo Zacarias
7b10101b6f glibc: add security patches
Fix for 2.21 and 2.22:
CVE-2015-7547 - glibc getaddrinfo stack-based buffer overflow.

For 2.21:
CVE-2014-8121 - Unexpected closing of nss_files databases after lookups
causes denial of service.
CVE-2015-1781 - buffer overflow in gethostbyname_r() and related
functions with misaligned buffer.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-02-17 10:45:25 +01:00