[ubuntu/jaunty-security] glibc_2.9-4ubuntu6.2_ia64_translations.tar.gz, glibc_2.9-4ubuntu6.2_lpia_translations.tar.gz, glibc, glibc_2.9-4ubuntu6.2_amd64_translations.tar.gz, glibc_2.9-4ubuntu6.2_powerpc_translations.tar.gz, glibc_2.9-4ubuntu6.2_sparc_translations.tar.gz (delayed), glibc_2.9-4ubuntu6.2_hppa_translations.tar.gz, glibc_2.9-4ubuntu6.2_i386_translations.tar.gz 2.9-4ubuntu6.2 (Accepted)

Tue May 25 21:04:51 BST 2010

glibc (2.9-4ubuntu6.2) jaunty-security; urgency=low

  * SECURITY UPDATE: integer overflow in strfmon() might lead to arbitrary
    code execution.
    - debian/patches/any/git-strfmon-overflow.diff: backport from upstream.
    - CVE-2008-1391
  * SECURITY UPDATE: newlines not escaped in /etc/mtab.
    - debian/patches/any/git-mntent-newline-escape.diff: upstream fixes.
    - CVE-2010-0296
  * SECURITY UPDATE: arbitrary code execution from ELF headers (LP: #542197).
    - debian/patches/any/git-fix-dtag-cast.diff: upstream fixes.
    - CVE-2010-0830
  * debian/patches/any/git-readdir-padding.diff: fix readdir padding when
    processing getdents64() in a 32-bit execution environment (LP: #392501).

Date: Wed, 19 May 2010 16:58:40 -0700
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/jaunty/+source/glibc/2.9-4ubuntu6.2
-------------- next part --------------
Format: 1.8
Date: Wed, 19 May 2010 16:58:40 -0700
Source: glibc
Binary: glibc-doc glibc-source locales locales-all nscd libc6 libc6-dev libc6-dbg libc6-prof libc6-pic libc6-udeb libc6.1 libc6.1-dev libc6.1-dbg libc6.1-prof libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev libc0.3-dbg libc0.3-prof libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev libc0.1-dbg libc0.1-prof libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 libc6-sparc64 libc6-dev-sparc64 libc6-s390x libc6-dev-s390x libc6-amd64 libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64 libc6-mipsn32 libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc0.1-i386 libc0.1-dev-i386 libc6-sparcv9b libc6-sparcv9v libc6-sparcv9v2 libc6-sparc64b libc6-sparc64v libc6-sparc64v2 libc6-i686 libc6-xen libc0.1-i686 libc6-vfp libc6.1-alphaev67 libnss-dns-udeb libnss-files-udeb
Architecture: source
Version: 2.9-4ubuntu6.2
Distribution: jaunty-security
Urgency: low
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 glibc-doc  - GNU C Library: Documentation
 glibc-source - GNU C Library: sources
 libc0.1    - GNU C Library: Shared libraries
 libc0.1-dbg - GNU C Library: detached debugging symbols
 libc0.1-dev - GNU C Library: Development Libraries and Header Files
 libc0.1-dev-i386 - GNU C Library: 32bit development libraries for AMD64
 libc0.1-i386 - GNU C Library: 32bit shared libraries for AMD64
 libc0.1-i686 - GNU C Library: Shared libraries [i686 optimized]
 libc0.1-pic - GNU C Library: PIC archive library
 libc0.1-prof - GNU C Library: Profiling Libraries
 libc0.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libc0.3    - GNU C Library: Shared libraries
 libc0.3-dbg - GNU C Library: detached debugging symbols
 libc0.3-dev - GNU C Library: Development Libraries and Header Files
 libc0.3-pic - GNU C Library: PIC archive library
 libc0.3-prof - GNU C Library: Profiling Libraries
 libc0.3-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libc6      - GNU C Library: Shared libraries
 libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64
 libc6-dbg  - GNU C Library: detached debugging symbols
 libc6-dev  - GNU C Library: Development Libraries and Header Files
 libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64
 libc6-dev-i386 - GNU C Library: 32bit development libraries for AMD64
 libc6-dev-mips64 - GNU C Library: 64bit Development Libraries for MIPS64
 libc6-dev-mipsn32 - GNU C Library: n32 Development Libraries for MIPS64
 libc6-dev-powerpc - GNU C Library: 32bit powerpc development libraries for ppc64
 libc6-dev-ppc64 - GNU C Library: 64bit Development Libraries for PowerPC64
 libc6-dev-s390x - GNU C Library: 64bit Development Libraries for IBM zSeries
 libc6-dev-sparc64 - GNU C Library: 64bit Development Libraries for UltraSPARC
 libc6-i386 - GNU C Library: 32bit shared libraries for AMD64
 libc6-i686 - GNU C Library: Shared libraries [i686 optimized]
 libc6-mips64 - GNU C Library: 64bit Shared libraries for MIPS64
 libc6-mipsn32 - GNU C Library: n32 Shared libraries for MIPS64
 libc6-pic  - GNU C Library: PIC archive library
 libc6-powerpc - GNU C Library: 32bit powerpc shared libraries for ppc64
 libc6-ppc64 - GNU C Library: 64bit Shared libraries for PowerPC64
 libc6-prof - GNU C Library: Profiling Libraries
 libc6-s390x - GNU C Library: 64bit Shared libraries for IBM zSeries
 libc6-sparc64 - GNU C Library: 64bit Shared libraries for UltraSPARC
 libc6-sparc64b - GNU C Library: 64bit Shared libraries for UltraSPARC [v9b optimiz
 libc6-sparc64v - GNU C Library: 64bit Shared libraries for UltraSPARC [v9v optimiz
 libc6-sparc64v2 - GNU C Library: 64bit Shared libraries for UltraSPARC [v9v2 optimi
 libc6-sparcv9b - GNU C Library: Shared libraries [v9b optimized]
 libc6-sparcv9v - GNU C Library: Shared libraries [v9v optimized]
 libc6-sparcv9v2 - GNU C Library: Shared libraries [v9v2 optimized]
 libc6-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libc6-vfp  - GNU C Library: Shared libraries [VFP version]
 libc6-xen  - GNU C Library: Shared libraries [Xen version]
 libc6.1    - GNU C Library: Shared libraries
 libc6.1-alphaev67 - GNU C Library: Shared libraries (EV67 optimized)
 libc6.1-dbg - GNU C Library: detached debugging symbols
 libc6.1-dev - GNU C Library: Development Libraries and Header Files
 libc6.1-pic - GNU C Library: PIC archive library
 libc6.1-prof - GNU C Library: Profiling Libraries
 libc6.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libnss-dns-udeb - GNU C Library: NSS helper for DNS - udeb (udeb)
 libnss-files-udeb - GNU C Library: NSS helper for files - udeb (udeb)
 locales    - GNU C Library: National Language (locale) data [support]
 locales-all - GNU C Library: Precompiled locale data
 nscd       - GNU C Library: Name Service Cache Daemon
Launchpad-Bugs-Fixed: 392501 542197
Changes: 
 glibc (2.9-4ubuntu6.2) jaunty-security; urgency=low
 .
   * SECURITY UPDATE: integer overflow in strfmon() might lead to arbitrary
     code execution.
     - debian/patches/any/git-strfmon-overflow.diff: backport from upstream.
     - CVE-2008-1391
   * SECURITY UPDATE: newlines not escaped in /etc/mtab.
     - debian/patches/any/git-mntent-newline-escape.diff: upstream fixes.
     - CVE-2010-0296
   * SECURITY UPDATE: arbitrary code execution from ELF headers (LP: #542197).
     - debian/patches/any/git-fix-dtag-cast.diff: upstream fixes.
     - CVE-2010-0830
   * debian/patches/any/git-readdir-padding.diff: fix readdir padding when
     processing getdents64() in a 32-bit execution environment (LP: #392501).
Checksums-Sha1: 
 634cf9ccd65e795719604301755426dd8ed73656 3067 glibc_2.9-4ubuntu6.2.dsc
 6c4f44d1c2b184ec78cc0a96fbb8cc40c58d0aa2 2682431 glibc_2.9-4ubuntu6.2.diff.gz
Checksums-Sha256: 
 ce56e65ee29f272724bfc798768e7ca1d9c946aa0739a9eb113a39bd3af10d97 3067 glibc_2.9-4ubuntu6.2.dsc
 1796cbf8e3403fffc0ceb0a21d589a86b4466b7bbc2410879a1ad3c9251e5348 2682431 glibc_2.9-4ubuntu6.2.diff.gz
Files: 
 3f5e8da051f27a1b73073eeb27e0fcaa 3067 libs required glibc_2.9-4ubuntu6.2.dsc
 bbdb7b9b03bf2317af25b34e227a15f9 2682431 libs required glibc_2.9-4ubuntu6.2.diff.gz
Original-Maintainer: GNU Libc Maintainers <debian-glibc at lists.debian.org>