AuroraMiddleware/glibc
1
0
Fork 0
mirror of https://sourceware.org/git/glibc.git synced 2024-11-21 12:30:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Record CVE-2018-6485 in ChangeLog and NEWS [BZ #22343]

Browse Source
This commit is contained in:
Florian Weimer 2018-02-01 15:00:44 +01:00
parent 673e230560
commit 4590634fd6
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@ -702,6 +702,7 @@
2018-01-18 Arjun Shankar <arjun@redhat.com>
[BZ #22343]
CVE-2018-6485
* malloc/malloc.c (checked_request2size): call REQUEST_OUT_OF_RANGE
after padding.
(_int_memalign): check for integer overflow before calling

4
NEWS
View File

@ -258,6 +258,10 @@ Security related changes:
succeeds without returning an absolute path due to unexpected behaviour
of the Linux kernel getcwd syscall. Reported by halfdog.
CVE-2018-6485: The posix_memalign and memalign functions, when called with
an object size near the value of SIZE_MAX, would return a pointer to a
buffer which is too small, instead of NULL. Reported by Jakub Wilk.
The following bugs are resolved with this release:
[The release manager will add the list generated by