[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#798316: libc6: Pointer guarding bypass in dynamic Setuid binaries



Package: libc6
Severity: important
Tags: security

Hi,

 Just FYI.
 security vulnerablity was found in glibc.
 http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html

 Probably no CVE is not assigned yet.
 http://seclists.org/oss-sec/2015/q3/504


 One of my friend confirmed it works with stretch, so testing/unstable
 is affected (probably experimental, too).

-- 
Hideki Yamane


Reply to: