Bug#879955: glibc: CVE-2017-15804
Tags: patch security upstream fixed-upstream
the following vulnerability was published for glibc.
| The glob function in glob.c in the GNU C Library (aka glibc or libc6)
| before 2.27 contains a buffer overflow during unescaping of user names
| with the ~ operator.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed. Unless I
wrongly triaged the problematic code is in versions all back to 2.19.
But please double-check and correct me if I'm wrong.