Bug#777197: glibc: CVE-2015-1472

[Moritz Muehlenhoff <jmm@inutil.org>]

retitle: glibc: CVE-2015-1472 CVE-2015-1473
thanks

On Fri, Feb 06, 2015 at 08:43:37AM +0100, Moritz Muehlenhoff wrote:

> please see https://sourceware.org/bugzilla/show_bug.cgi?id=16618
> The patch is here: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06
> 
> This was introduced by https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=3f8cc204fdd0
> (2.15). Since the patch was backported into wheezy, it is also
> affected (while squeeze is not).

This covers also CVE-2015-1473, see
http://www.openwall.com/lists/oss-security/2015/02/04/1

Cheers,
        Moritz