[ubuntu/precise-security] libgc 1:7.1-8ubuntu0.12.04.3 (Accepted)
Steve Beattie
sbeattie at ubuntu.com
Wed Feb 15 17:57:56 UTC 2017
libgc (1:7.1-8ubuntu0.12.04.3) precise-security; urgency=medium
* SECURITY UPDATE: multiple integer overflows leading to pointers to
memory zones smaller than requested size.
- d/p/CVE-2016-9427-1.patch: Fix calloc_explicitly_typed in case
of lb*n overflow.
- d/p/CVE-2016-9427-2.patch: Fix malloc routines to prevent size
value wrap-around of lb*n overflow.
- d/p/CVE-2016-9427-3.patch: Fix GC_collect_or_expand to prevent
allocation size value wrap-around
- d/p/CVE-2016-9427-test.patch: add test cases
- CVE-2016-9427
Date: 2017-02-14 06:53:16.073953+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
https://launchpad.net/ubuntu/+source/libgc/1:7.1-8ubuntu0.12.04.3
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list