projects / people / pmueller / ipfire-2.x.git / blame
| Commit | Line | Data |
|---|---|---|
| b9215da1 MT |
1 | From f6445dc94da185b3d1ee283f0ca0a34c4e1986cc Mon Sep 17 00:00:00 2001 |
| 2 | From: Siddhesh Poyarekar <siddhesh@sourceware.org> | |
| 3 | Date: Tue, 26 Sep 2023 07:38:07 -0400 | |
| 38c1be25 | 4 | Subject: [PATCH 25/44] Document CVE-2023-4806 and CVE-2023-5156 in NEWS |
| b9215da1 MT |
5 | |
| 6 | These are tracked in BZ #30884 and BZ #30843. | |
| 7 | ||
| 8 | Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org> | |
| 9 | (cherry picked from commit fd134feba35fa839018965733b34d28a09a075dd) | |
| 10 | --- | |
| 11 | NEWS | 9 +++++++++ | |
| 12 | 1 file changed, 9 insertions(+) | |
| 13 | ||
| 14 | diff --git a/NEWS b/NEWS | |
| 15 | index dfee278a9c..f1b1b0a3b4 100644 | |
| 16 | --- a/NEWS | |
| 17 | +++ b/NEWS | |
| 18 | @@ -15,6 +15,15 @@ Security related changes: | |
| 19 | 2048 bytes, getaddrinfo may potentially disclose stack contents via | |
| 20 | the returned address data, or crash. | |
| 21 | ||
| 22 | + CVE-2023-4806: When an NSS plugin only implements the | |
| 23 | + _gethostbyname2_r and _getcanonname_r callbacks, getaddrinfo could use | |
| 24 | + memory that was freed during buffer resizing, potentially causing a | |
| 25 | + crash or read or write to arbitrary memory. | |
| 26 | + | |
| 27 | + CVE-2023-5156: The fix for CVE-2023-4806 introduced a memory leak when | |
| 28 | + an application calls getaddrinfo for AF_INET6 with AI_CANONNAME, | |
| 29 | + AI_ALL and AI_V4MAPPED flags set. | |
| 30 | + | |
| 31 | The following bugs are resolved with this release: | |
| 32 | ||
| 33 | [30723] posix_memalign repeatedly scans long bin lists | |
| 34 | -- | |
| 35 | 2.39.2 | |
| 36 |