Peter Korsgaard c35b052d97
package/{glibc, localedef}: security bump to 2.37-43 ...
Fixes the following security issues:
CVE-2023-25139: When the printf family of functions is called with a
format specifier that uses an <apostrophe> (enable grouping) and a
minimum width specifier, the resulting output could be larger than
reasonably expected by a caller that computed a tight bound on the
buffer size. The resulting larger than expected output could result
in a buffer overflow in the printf family of functions.
CVE-2023-4527: If the system is configured in no-aaaa mode via
/etc/resolv.conf, getaddrinfo is called for the AF_UNSPEC address
family, and a DNS response is received over TCP that is larger than
2048 bytes, getaddrinfo may potentially disclose stack contents via
the returned address data, or crash.
CVE-2023-4806: When an NSS plugin only implements the
_gethostbyname2_r and _getcanonname_r callbacks, getaddrinfo could use
memory that was freed during buffer resizing, potentially causing a
crash or read or write to arbitrary memory.
CVE-2023-5156: The fix for CVE-2023-4806 introduced a memory leak when
an application calls getaddrinfo for AF_INET6 with AI_CANONNAME,
AI_ALL and AI_V4MAPPED flags set.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
Reviewed-by: Romain Naour <romain.naour@smile.fr >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2023-09-30 16:15:19 +02:00
2023-09-25 13:36:53 +02:00
2023-09-24 23:31:16 +02:00
2023-08-08 18:49:03 +02:00
2023-08-09 20:16:25 +02:00
2023-09-30 12:25:21 +02:00
2023-09-25 13:43:01 +02:00
2023-08-09 00:12:34 +02:00
2023-08-06 14:22:43 +02:00
2023-08-25 09:04:07 +02:00
2023-08-08 18:49:10 +02:00
2023-08-29 10:34:38 +02:00
2023-09-26 07:48:10 +02:00
2023-07-31 00:12:26 +02:00
2023-08-09 19:21:24 +02:00
2023-09-24 23:14:49 +02:00
2023-08-20 11:05:36 +02:00
2023-09-25 08:39:02 +02:00
2023-08-21 15:27:47 +02:00
2023-08-09 19:21:22 +02:00
2023-08-09 19:21:21 +02:00
2023-09-14 20:20:19 +02:00
2023-09-14 20:20:12 +02:00
2023-08-09 00:12:35 +02:00
2023-09-06 21:20:13 +02:00
2023-09-25 08:39:20 +02:00
2023-08-07 22:24:05 +02:00
2023-09-14 21:02:55 +02:00
2023-09-25 15:48:23 +02:00
2023-09-25 15:59:23 +02:00
2023-08-29 12:42:03 +02:00
2023-09-25 13:53:41 +02:00
2023-08-01 23:11:55 +02:00
2023-09-26 00:36:59 +02:00
2023-08-09 19:21:26 +02:00
2023-09-24 21:19:52 +02:00
2023-08-21 14:47:32 +02:00
2023-09-24 23:28:56 +02:00
2023-09-17 08:29:52 +02:00
2023-09-25 07:32:33 +02:00
2023-09-25 07:39:06 +02:00
2023-09-30 16:15:19 +02:00
2023-08-24 20:53:24 +02:00
2023-09-14 20:21:23 +02:00
2023-08-08 19:28:05 +02:00
2023-09-24 23:34:43 +02:00
2023-08-30 22:12:02 +02:00
2023-09-24 20:45:26 +02:00
2023-09-25 13:57:51 +02:00
2023-08-09 12:20:56 +02:00
2023-09-24 20:38:50 +02:00
2023-08-09 23:43:12 +02:00
2023-08-06 17:12:12 +02:00
2023-09-26 08:09:22 +02:00
2023-09-24 23:32:15 +02:00
2023-09-17 08:38:16 +02:00
2023-09-02 19:09:25 +02:00
2023-08-12 12:37:15 +02:00
2023-07-31 16:48:57 +02:00
2023-07-31 15:24:16 +02:00
2023-08-07 23:49:16 +02:00
2023-09-02 09:35:42 +02:00
2023-09-17 08:36:53 +02:00
2023-08-01 23:11:56 +02:00
2023-09-14 21:05:17 +02:00
2023-09-24 21:04:29 +02:00
2023-08-21 14:47:11 +02:00
2023-08-08 09:40:32 +02:00
2023-08-06 14:09:50 +02:00
2023-08-24 20:55:47 +02:00
2023-07-31 16:49:00 +02:00
2023-09-26 13:51:12 +02:00
2023-09-26 10:01:28 +02:00
2023-09-24 21:14:08 +02:00
2023-09-24 23:33:03 +02:00
2023-08-10 21:58:00 +02:00
2023-09-26 08:07:52 +02:00
2023-09-05 15:24:38 +02:00
2023-09-26 07:48:10 +02:00
2023-09-02 09:40:18 +02:00
2023-09-30 12:29:30 +02:00
2023-09-30 12:21:50 +02:00
2023-09-02 17:50:47 +02:00
2023-09-24 20:00:59 +02:00
2023-08-14 13:06:50 +02:00
2023-09-30 16:15:19 +02:00
2023-08-30 22:02:45 +02:00
2023-08-15 17:12:01 +02:00
2023-07-30 23:54:02 +02:00
2023-09-26 07:48:10 +02:00
2023-09-26 07:48:10 +02:00
2023-09-24 21:20:32 +02:00
2023-09-02 19:12:16 +02:00
2023-08-19 16:34:08 +02:00
2023-08-01 22:47:12 +02:00
2023-09-26 07:48:10 +02:00
2023-08-25 23:03:38 +02:00
2023-08-06 22:14:13 +02:00
2023-08-22 23:39:08 +02:00
2023-08-09 23:03:53 +02:00
2023-07-31 20:53:54 +02:00
2023-09-24 23:17:19 +02:00
2023-09-25 15:49:26 +02:00
2023-09-25 09:39:42 +02:00
2023-09-26 07:48:10 +02:00
2023-08-24 20:58:18 +02:00
2023-08-20 11:38:45 +02:00
2023-09-30 12:34:32 +02:00
2023-08-08 20:04:35 +02:00
2023-09-26 10:01:19 +02:00
2023-08-01 22:49:40 +02:00
2023-09-24 20:32:09 +02:00
2023-08-30 21:36:43 +02:00
2023-08-30 21:36:43 +02:00
2023-09-25 09:33:45 +02:00
2023-08-07 22:25:07 +02:00
2023-09-25 14:00:51 +02:00
2023-08-15 11:22:21 +02:00
2023-08-30 21:40:46 +02:00
2023-08-14 12:51:29 +02:00
2023-09-25 07:27:42 +02:00
2023-09-14 20:57:57 +02:00
2023-09-03 21:42:15 +02:00
2023-09-03 21:31:02 +02:00
2023-08-21 15:51:39 +02:00
2023-09-26 07:45:20 +02:00
2023-09-27 13:45:01 +02:00
2023-09-25 13:58:37 +02:00
2023-07-31 23:39:00 +02:00
2023-08-07 22:21:30 +02:00
2023-09-03 21:32:03 +02:00
2023-08-07 22:15:29 +02:00
2023-09-03 21:34:07 +02:00
2023-07-30 23:44:28 +02:00
2023-09-03 21:32:56 +02:00
2023-08-06 12:29:44 +02:00
2023-09-24 22:19:37 +02:00
2023-09-03 21:33:37 +02:00
2023-09-26 07:48:10 +02:00
2023-07-31 16:48:58 +02:00
2023-09-17 08:40:59 +02:00
2023-08-22 22:08:55 +02:00
2023-08-07 19:24:56 +02:00
2023-08-24 23:41:29 +02:00
2023-09-24 19:56:36 +02:00
2023-08-28 08:17:46 +02:00
2023-08-28 08:17:46 +02:00
2023-08-21 16:06:33 +02:00
2023-08-24 22:34:41 +02:00
2023-08-12 12:47:53 +02:00
2023-08-06 16:26:37 +02:00
2023-09-24 20:41:40 +02:00
2023-08-06 13:46:48 +02:00
2023-09-24 21:35:54 +02:00
2023-09-24 23:35:11 +02:00
2023-07-31 23:15:23 +02:00
2023-07-30 23:45:02 +02:00
2023-07-31 22:10:52 +02:00
2023-09-25 15:50:49 +02:00
2023-08-03 21:10:01 +02:00
2023-09-25 13:59:51 +02:00
2023-09-25 15:53:24 +02:00
2023-09-14 21:08:47 +02:00
2023-08-15 17:16:50 +02:00
2023-09-26 07:48:10 +02:00
2023-08-06 13:48:50 +02:00
2023-08-12 16:26:01 +02:00
2023-09-25 13:44:45 +02:00
2023-09-24 23:19:03 +02:00
2023-09-26 07:48:10 +02:00
2023-09-26 08:04:07 +02:00
2023-09-24 21:17:34 +02:00
2023-09-25 07:30:46 +02:00
2023-09-24 23:07:12 +02:00
2023-08-01 00:08:30 +02:00
2023-08-12 21:39:28 +02:00
2023-09-26 07:48:10 +02:00
2023-09-25 08:41:43 +02:00
2023-08-09 00:12:42 +02:00
2023-09-24 20:00:08 +02:00
2023-09-06 21:18:10 +02:00
2023-08-22 21:21:39 +02:00
2023-09-25 13:52:02 +02:00
2023-09-15 19:38:58 +02:00
2023-09-02 19:09:25 +02:00
2023-08-01 23:04:05 +02:00
c35b052d97