diff options
| author | Florian Weimer <fweimer@redhat.com> | 2016-12-31 20:22:09 +0100 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2016-12-31 20:27:44 +0100 |
| commit | fc82b0a2dfe7dbd35671c10510a8da1043d746a5 (patch) | |
| tree | 86b8ef6421ca34fa1907121e078e008c580029ea /ChangeLog | |
| parent | 3c589b1a8a4401e258ba23a03fcbcc79b82393ab (diff) | |
| download | glibc-fc82b0a2dfe7dbd35671c10510a8da1043d746a5.zip glibc-fc82b0a2dfe7dbd35671c10510a8da1043d746a5.tar.gz glibc-fc82b0a2dfe7dbd35671c10510a8da1043d746a5.tar.bz2 | |
CVE-2015-5180: resolv: Fix crash with internal QTYPE [BZ #18784]
Also rename T_UNSPEC because an upcoming public header file
update will use that name.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 14 |
1 files changed, 14 insertions, 0 deletions
@@ -1,5 +1,19 @@ 2016-12-31 Florian Weimer <fweimer@redhat.com> + [BZ #18784] + CVE-2015-5180 + * include/arpa/nameser_compat.h (T_QUERY_A_AND_AAAA): Rename from + T_UNSPEC. Adjust value. + * resolv/nss_dns/dns-host.c (_nss_dns_gethostbyname4_r): Use it. + * resolv/res_query.c (__libc_res_nquery): Likewise. + * resolv/res_mkquery.c (res_nmkquery): Check for out-of-range + QTYPEs. + * resolv/tst-resolv-qtypes.c: New file. + * resolv/Makefile (xtests): Add tst-resolv-qtypes. + (tst-resolv-qtypes): Link against libresolv and libpthread. + +2016-12-31 Florian Weimer <fweimer@redhat.com> + * elf/dl-tunables.h (__tunables_init): Fix unused attribute. 2016-12-31 Siddhesh Poyarekar <siddhesh@sourceware.org> |