Bug#969926: glibc: Parsing of /etc/gshadow can return bad pointers causing segfaults in applications

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#969926: glibc: Parsing of /etc/gshadow can return bad pointers causing segfaults in applications
From: Bernd Zeimetz <bzed@debian.org>
Date: Wed, 09 Sep 2020 02:58:30 +0200
Message-id: <[🔎] 159961311079.447707.8355487778276012335.reportbug@think.wals.bzed.at>
Reply-to: Bernd Zeimetz <bzed@debian.org>, 969926@bugs.debian.org

Source: glibc
Version: 2.28-10
Severity: serious
Tags: security upstream patch
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>

Hi,

we are running into the bug
https://sourceware.org/bugzilla/show_bug.cgi?id=20338
causing systemd-sysusers to segfault.

Patch is available in the linked bug report.

As it was flagged security in the upstream bugtracker, I'm doing the
same here.

A fix in buster would be appreciated.

Thanks a lot,

Bernd


-- 
 Bernd Zeimetz                            Debian GNU/Linux Developer
 http://bzed.de                                http://www.debian.org
 GPG Fingerprint: ECA1 E3F2 8E11 2432 D485  DD95 EB36 171A 6FF9 435F

Reply to:

Follow-Ups:
- Bug#969926: glibc: Parsing of /etc/gshadow can return bad pointers causing segfaults in applications
  - From: Aurelien Jarno <aurelien@aurel32.net>
- Processed (with 1 error): Re: Bug#969926: glibc: Parsing of /etc/gshadow can return bad pointers causing segfaults in applications
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: Bug#969645: marked as done (glibc: deferred error : (error "Deferred process exited abnormally:)
Next by Date: Processed: bug 969926 is forwarded to https://sourceware.org/bugzilla/show_bug.cgi?id=20338
Previous by thread: Processed: Bug#969219 marked as pending in glibc
Next by thread: Bug#969926: glibc: Parsing of /etc/gshadow can return bad pointers causing segfaults in applications
Index(es):
- Date
- Thread