aboutsummaryrefslogtreecommitdiff
path: root/ChangeLog
AgeCommit message (Expand)AuthorFilesLines
2016-07-11Merge branch 'release/2.19/master' into ibm/2.19/masteribm/2.19/masterTulio Magno Quites Machado Filho1-0/+199
2016-07-11Harden tls_dtor_list with pointer mangling [BZ #19018]Florian Weimer1-0/+7
2016-07-11Always enable pointer guard [BZ #18928]Florian Weimer1-0/+10
2016-07-11Fix memory handling in strxfrm_l [BZ #16009]Leonhard Holz1-0/+16
2016-05-31CVE-2016-4429: sunrpc: Do not use alloca in clntudp_call [BZ #20112]Florian Weimer1-0/+7
2016-05-23resolv: Always set *resplen2 out parameter in send_dg [BZ #19791]Florian Weimer1-0/+9
2016-05-17CVE-2015-7547: getaddrinfo() stack-based buffer overflow (Bug 18665).Carlos O'Donell1-0/+15
2016-05-12CVE-2016-3706: getaddrinfo: stack overflow in hostent conversion [BZ #20010]Florian Weimer1-0/+10
2016-05-12CVE-2016-1234: glob: Do not copy d_name field of struct dirent [BZ #19779]Florian Weimer1-0/+21
2016-05-12glob: Simplify the interface for the GLOB_ALTDIRFUNC callback gl_readdirFlorian Weimer1-0/+15
2016-04-28S390: Fix "backtrace() returns infinitely deep stack frames with makecontext(...Stefan Liebler1-0/+15
2016-04-28S/390: Fix setcontext/swapcontext which are not restoring sigmask. [BZ #18080]Stefan Liebler1-0/+16
2016-04-27CVE-2016-3075: Stack overflow in _nss_dns_getnetbyname_r [BZ #19879]Florian Weimer1-0/+7
2016-02-16hsearch_r: Apply VM size limit in test caseFlorian Weimer1-0/+4
2016-01-29Improve check against integer wraparound in hcreate_r [BZ #18240]Florian Weimer1-0/+12
2016-01-29Handle overflow in __hcreate_rOndřej Bílka1-0/+5
2016-01-27Fix BZ #18985 -- out of range data to strftime() causes a segfaultPaul Pluzhnikov1-0/+8
2016-01-27Fix BZ #17905Paul Pluzhnikov1-0/+8
2015-12-20Avoid overlapping addresses to stpcpy calls in nscd (BZ #16760)Siddhesh Poyarekar1-0/+4
2015-12-20Return NULL for wildcard values in getnetgrent from nscd (BZ #16759)Siddhesh Poyarekar1-0/+4
2015-12-20Fix nscd lookup for innetgr when netgroup has wildcards (BZ #16758)Siddhesh Poyarekar1-0/+6
2015-11-26Merge branch 'release/2.19/master' into ibm/2.19/masterTulio Magno Quites Machado Filho1-0/+71
2015-11-24Don't read past end of pattern in fnmatch (BZ #17062)Andreas Schwab1-0/+8
2015-10-19CVE-2014-8121: Do not close NSS files database during iteration [BZ #18007]Florian Weimer1-0/+8
2015-10-19Fix BZ #17269 -- _IO_wstr_overflow integer overflowPaul Pluzhnikov1-0/+6
2015-10-19Fix read past end of pattern in fnmatch (bug 18032)Andreas Schwab1-0/+6
2015-10-18Don't ignore too long lines in nss_files (BZ #17079)Andreas Schwab1-0/+6
2015-10-02Fix parsing of getai result from nscd for IPv6-only requestAndreas Schwab1-0/+5
2015-09-11Correct DT_PPC64_NUMAlan Modra1-0/+6
2015-09-10Fix use of half-initialized result in getaddrinfo when using nscd (bug 16743)Andreas Schwab1-0/+6
2015-08-28CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow [BZ#18287]Arjun Shankar1-0/+6
2015-08-28Properly handle forced elision in pthread_mutex_trylock (bug 16657)Andreas Schwab1-0/+8
2015-08-24PowerPC: Fix gprof entry point for LEAdhemerval Zanella1-0/+6
2015-05-25Separate internal state between getXXent and getXXbyYY NSS calls (bug 18007)Andreas Schwab1-0/+38
2015-05-25CVE-2014-8121: Do not close NSS files database during iteration [BZ #18007]Florian Weimer1-0/+8
2015-04-23CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow [BZ#18287]Arjun Shankar1-0/+6
2015-03-13Merge branch 'release/2.19/master' into ibm/2.19/masterTulio Magno Quites Machado Filho1-0/+312
2015-03-10powerpc: Fix incorrect results for pow when using FMAAdhemerval Zanella1-0/+5
2015-02-23CVE-2015-1472: wscanf allocates too little memoryPaul Pluzhnikov1-0/+8
2015-01-16CVE-2014-7817: wordexp fails to honour WRDE_NOCMD.Carlos O'Donell1-0/+22
2015-01-16Avoid infinite loop in nss_dns getnetbyname [BZ #17630]Florian Weimer1-0/+6
2015-01-16CVE-2012-3406: Stack overflow in vfprintf [BZ #16617]Jeff Law1-0/+9
2015-01-16Mention CVE-2014-4043 in NEWSAllan McRae1-0/+4
2015-01-16posix_spawn_file_actions_addopen needs to copy the path argument (BZ 17048)Florian Weimer1-0/+13
2015-01-16_nl_find_locale: Improve handling of crafted locale names [BZ #17137]Florian Weimer1-0/+9
2015-01-16__gconv_translit_find: Disable function [BZ #17187]Florian Weimer1-0/+7
2015-01-16CVE-2014-6040: Crashes on invalid input in IBM gconv modules [BZ #17325]Florian Weimer1-0/+17
2014-11-11[AArch64] End frame record chain correctly.Renlin Li1-0/+6
2014-09-05CVE-2014-6040: Crashes on invalid input in IBM gconv modules [BZ #17325]Florian Weimer1-0/+17
2014-09-05__gconv_translit_find: Disable function [BZ #17187]Florian Weimer1-0/+7