Re: glibc: CVE-2021-33574: mq_notify does not handle separately allocated thread attributes

To: George Soalheiro <gsoalheiro@gmail.com>
Cc: debian-glibc@lists.debian.org
Subject: Re: glibc: CVE-2021-33574: mq_notify does not handle separately allocated thread attributes
From: Aurelien Jarno <aurelien@aurel32.net>
Date: Wed, 12 Jan 2022 11:46:04 +0100
Message-id: <[🔎] Yd6xbGQCOEr1gLgc@aurel32.net>
Mail-followup-to: George Soalheiro <gsoalheiro@gmail.com>, debian-glibc@lists.debian.org
In-reply-to: <[🔎] CA+OGSgnZvtudCHApQv2UUK+EinH-aQsi7wbCf=in-ZacVVK4fw@mail.gmail.com>
References: <[🔎] CA+OGSgnZvtudCHApQv2UUK+EinH-aQsi7wbCf=in-ZacVVK4fw@mail.gmail.com>

Hi,

On 2022-01-11 13:28, George Soalheiro wrote:
> Hi
> 
> The last update available with regards to this was on Wed, 8 Sep 2021 -
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989147
> <https://urldefense.com/v3/__https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989147__;!!OSkwEA!znRGc8MLMLEIeyzVamybYpIUBNKghLUKQCR-DmPkQmu7WBHaC9M7WjOWGcvsKfBw1vo$>.
> Do you by any chance have a later update with regards to the backport?
> 

I have worked on it over the Xmas break, and I am close to a patch. I
guess it could be fixed in the next stable point release.

Regards,
Aurelien

-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
aurelien@aurel32.net                 http://www.aurel32.net

Reply to:

References:
- glibc: CVE-2021-33574: mq_notify does not handle separately allocated thread attributes
  - From: George Soalheiro <gsoalheiro@gmail.com>

Prev by Date: Bug#1003574: segfault in libc-2.33.so during i386 boot ofde QEMU VM
Next by Date: Bug#1003574: segfault in libc-2.33.so during i386 boot ofde QEMU VM
Previous by thread: glibc: CVE-2021-33574: mq_notify does not handle separately allocated thread attributes
Next by thread: Bug#1003574: segfault in libc-2.33.so during i386 boot ofde QEMU VM
Index(es):
- Date
- Thread