diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2017-06-27 08:42:09 +0200 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2017-06-28 23:28:47 +0200 |
| commit | c87fdfb6059b16c04aea77030816fd120e26d267 (patch) | |
| tree | f43a44ed6815fffc0936bad78246077ed26e37a0 /docs/manual/adding-packages-python.txt | |
| parent | 8398230bc7d81540f2d2e99ad9ab1f83879e4ecd (diff) | |
| download | buildroot-c87fdfb6059b16c04aea77030816fd120e26d267.tar.gz buildroot-c87fdfb6059b16c04aea77030816fd120e26d267.zip | |
glibc: add upstream security patches fixing CVE-2017-1000366 (stack clash)
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH
values to manipulate the heap/stack, causing them to alias, potentially
resulting in arbitrary code execution. Please note that additional
hardening changes have been made to glibc to prevent manipulation of stack
and heap memory but these issues are not directly exploitable, as such they
have not been given a CVE.
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
Patches are identical to upstream, except that the ChangeLog modifications
have been stripped.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'docs/manual/adding-packages-python.txt')
0 files changed, 0 insertions, 0 deletions
