From fc82b0a2dfe7dbd35671c10510a8da1043d746a5 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Sat, 31 Dec 2016 20:22:09 +0100 Subject: CVE-2015-5180: resolv: Fix crash with internal QTYPE [BZ #18784] Also rename T_UNSPEC because an upcoming public header file update will use that name. --- ChangeLog | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 01ee23b..3beacb0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,19 @@ 2016-12-31 Florian Weimer + [BZ #18784] + CVE-2015-5180 + * include/arpa/nameser_compat.h (T_QUERY_A_AND_AAAA): Rename from + T_UNSPEC. Adjust value. + * resolv/nss_dns/dns-host.c (_nss_dns_gethostbyname4_r): Use it. + * resolv/res_query.c (__libc_res_nquery): Likewise. + * resolv/res_mkquery.c (res_nmkquery): Check for out-of-range + QTYPEs. + * resolv/tst-resolv-qtypes.c: New file. + * resolv/Makefile (xtests): Add tst-resolv-qtypes. + (tst-resolv-qtypes): Link against libresolv and libpthread. + +2016-12-31 Florian Weimer + * elf/dl-tunables.h (__tunables_init): Fix unused attribute. 2016-12-31 Siddhesh Poyarekar -- cgit v1.1