[ubuntu/precise-security] eglibc 2.15-0ubuntu10.2 (Accepted)

Steve Beattie sbeattie at ubuntu.com
Tue Oct 2 04:15:26 UTC 2012


eglibc (2.15-0ubuntu10.2) precise-security; urgency=low

  * SECURITY UPDATE: stack buffer overflow in vfprintf handling
    (LP: #1031301)
    - debian/patches/any/CVE-2012-3406.patch: switch to malloc when
      array grows too large to handle via alloca extension
    - CVE-2012-3406
  * SECURITY UPDATE: stdlib strtod integer/buffer overflows
    - debian/patches/any/CVE-2012-3480.patch: rearrange calculations
      and modify types to void integer overflows
    - CVE-2012-3480

Date: 2012-09-29 08:45:13.650544+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/eglibc/2.15-0ubuntu10.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Precise-changes mailing list