]> code.ossystems Code Review - openembedded-core.git/commit
glibc: Fix CVE-2017-1000366
authorGeorge McCollister <george.mccollister@gmail.com>
Tue, 21 Nov 2017 20:01:21 +0000 (14:01 -0600)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 8 Dec 2017 16:35:58 +0000 (16:35 +0000)
commit07e041138f0b037e7ddc75a33c7960668acdb8bb
treecfb18754e4ac3fc7d11da9f07393e552505709ca
parente8a6e3894c8aebac4aa6b0ceea021b95e94e6691
glibc: Fix CVE-2017-1000366

Add backported patches from the upstream release/2.24/master branch to
fix CVE-2017-1000366. Also add a backported patch that resolves SSE
related build problems introduced by these patches.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-core/glibc/glibc/0001-CVE-2017-1000366-Ignore-LD_LIBRARY_PATH-for-AT_SECUR.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc/0002-ld.so-Reject-overly-long-LD_PRELOAD-path-elements.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc/0003-ld.so-Reject-overly-long-LD_AUDIT-path-elements.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc/0004-i686-Add-missing-IS_IN-libc-guards-to-vectorized-str.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc_2.24.bb