r4740 - in glibc-package/trunk/debian: . patches patches/any
Author: aurel32
Date: 2011-06-20 11:08:34 +0000 (Mon, 20 Jun 2011)
New Revision: 4740
Added:
glibc-package/trunk/debian/patches/any/cvs-addmntent.diff
Modified:
glibc-package/trunk/debian/changelog
glibc-package/trunk/debian/patches/series
Log:
* Add patches/any/cvs-addmntent.diff to correctly report errors status in
addmntent(). Closes: #630699 / CVE-2011-1089.
Modified: glibc-package/trunk/debian/changelog
===================================================================
--- glibc-package/trunk/debian/changelog 2011-06-19 13:14:13 UTC (rev 4739)
+++ glibc-package/trunk/debian/changelog 2011-06-20 11:08:34 UTC (rev 4740)
@@ -4,8 +4,12 @@
* Add patches/hurd-i386/submitted-ldsodefs.h.diff to fix loading binaries
with GNU/Hurd-specific extensions.
- -- Samuel Thibault <sthibault@debian.org> Sun, 19 Jun 2011 15:13:13 +0200
+ [ Aurelien Jarno ]
+ * Add patches/any/cvs-addmntent.diff to correctly report errors status in
+ addmntent(). Closes: #630699 / CVE-2011-1089.
+ -- Aurelien Jarno <aurel32@debian.org> Mon, 20 Jun 2011 13:07:17 +0200
+
eglibc (2.13-7) unstable; urgency=low
[ Aurelien Jarno ]
Added: glibc-package/trunk/debian/patches/any/cvs-addmntent.diff
===================================================================
--- glibc-package/trunk/debian/patches/any/cvs-addmntent.diff (rev 0)
+++ glibc-package/trunk/debian/patches/any/cvs-addmntent.diff 2011-06-20 11:08:34 UTC (rev 4740)
@@ -0,0 +1,20 @@
+2011-05-11 Ulrich Drepper <drepper@gmail.com>
+
+ [BZ #12625]
+ * misc/mntent_r.c (addmntent): Flush the stream after the output
+
+diff --git a/misc/mntent_r.c b/misc/mntent_r.c
+index 9598528..6959f0e 100644
+--- a/misc/mntent_r.c
++++ b/misc/mntent_r.c
+@@ -263,8 +263,8 @@ __addmntent (FILE *stream, const struct mntent *mnt)
+ mntcopy.mnt_type,
+ mntcopy.mnt_opts,
+ mntcopy.mnt_freq,
+- mntcopy.mnt_passno)
+- < 0 ? 1 : 0);
++ mntcopy.mnt_passno) < 0
++ || fflush (stream) != 0);
+ }
+ weak_alias (__addmntent, addmntent)
+
Modified: glibc-package/trunk/debian/patches/series
===================================================================
--- glibc-package/trunk/debian/patches/series 2011-06-19 13:14:13 UTC (rev 4739)
+++ glibc-package/trunk/debian/patches/series 2011-06-20 11:08:34 UTC (rev 4740)
@@ -268,3 +268,4 @@
any/cvs-getaddrinfo-single-lookup.diff
any/cvs-unique_sym_table-corruptions.diff
any/submitted-mqueue-throw.diff
+any/cvs-addmntent.diff
Reply to: