]> code.ossystems Code Review - openembedded-core.git/commit
glibc: CVE-2014-9402 endless loop in getaddr_r
authorArmin Kuster <akuster@mvista.com>
Wed, 21 Jan 2015 20:43:11 +0000 (12:43 -0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 28 Jan 2015 21:22:23 +0000 (21:22 +0000)
commitf03bf84c179f69ef4800ed92a4a9d9401d0e5966
tree6882931cdebe19b7d0ed91980953921168a18949
parentccb86249b2b29686303ed04aac74887f0fa490df
glibc: CVE-2014-9402 endless loop in getaddr_r

The getnetbyname function in glibc 2.21 in earlier will enter an infinite loop
if the DNS backend is activated in the system Name Service Switch
configuration, and the DNS resolver receives a positive answer while processing
the network name.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-core/glibc/glibc/CVE-2014-9402_endless-loop-in-getaddr_r.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc_2.20.bb