Bug#704623: eglibc: CVE-2013-1914: getaddrinfo() stack overflow

To: 704623@bugs.debian.org
Subject: Bug#704623: eglibc: CVE-2013-1914: getaddrinfo() stack overflow
From: Raphael Geissert <geissert@debian.org>
Date: Thu, 4 Jul 2013 16:14:12 +0200
Message-id: <[🔎] CAA7hUgGqUJKiahr7UHN6co-0FrRKN0QSRw4WvufJayNYkZ5sHg@mail.gmail.com>
Reply-to: Raphael Geissert <geissert@debian.org>, 704623@bugs.debian.org
In-reply-to: <[🔎] CAA7hUgHKvq-7c2Jieve0oAbUxszo3CTzECAYBwFxCwAUFnWA0A@mail.gmail.com>
References: <[🔎] CAA7hUgHKvq-7c2Jieve0oAbUxszo3CTzECAYBwFxCwAUFnWA0A@mail.gmail.com>

Another update:

http://www.openwall.com/lists/oss-security/2013/07/04/8

And attaching the patches mentioned in that email.

Cheers,
--
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Attachment: glibc-rh797096-1.patch
Description: Binary data

Attachment: glibc-rh947882.patch
Description: Binary data

Reply to:

References:
- Bug#704623: eglibc: CVE-2013-1914: getaddrinfo() stack overflow
  - From: Raphael Geissert <geissert@debian.org>

Prev by Date: Bug#714219: libc6: crypt(3) returns NULL with EINVAL instead of falling back to DES, breaking GNU software
Next by Date: [bts-link] source package eglibc
Previous by thread: Processed: Re: Bug#704623: eglibc: CVE-2013-1914: getaddrinfo() stack overflow
Next by thread: Bug#714219: libc6: crypt(3) returns NULL with EINVAL instead of falling back to DES, breaking GNU software
Index(es):
- Date
- Thread