CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow [BZ#18287]

[thirdparty/glibc.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 411ef3dcc3d642a374625e7d15b72427fbab6a7e..26dcfc715c48928d88388d0fcd8929da6a272489 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,54 @@
+2015-04-21  Arjun Shankar  <arjun.is@lostca.se>
+
+       [BZ #18287]
+       * resolv/nss_dns/dns-host.c (getanswer_r): Adjust buffer length
+       based on padding.  (CVE-2015-1781)
+
+2015-04-20  Adhemerval Zanella  <adhemerval.zanella@linaro.org>
+
+       * nptl/pthread_cond_timedwait.c: Change include bits/libc-vdso.h to just
+       libc-vdso.h.
+       * sysdeps/powerpc/powerpc32/backtrace.c: Likewise.
+       * sysdeps/powerpc/powerpc64/backtrace.c: Likewise.
+       * sysdeps/unix/sysv/linux/aarch64/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/clock_getres.c: Likewise.
+       * sysdeps/unix/sysv/linux/clock_gettime.c: Likewise.
+       * sysdeps/unix/sysv/linux/gettimeofday.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/get_clockfreq.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/gettimeofday.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/sched_getcpu.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/time.c: Likewise.
+       * sysdeps/unix/sysv/linux/s390/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/tile/gettimeofday.c: Likewise.
+       * sysdeps/unix/sysv/linux/tile/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/timespec_get.c: Likewise.
+       * sysdeps/unix/sysv/linux/aarch64/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/aarch64/libc-vdso.h: ... here.
+       * sysdeps/unix/sysv/linux/powerpc/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/powerpc/libc-vdso.h: ... here.
+       * sysdeps/unix/sysv/linux/s390/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/s390/libc-vdso.h: ... here.
+       * sysdeps/unix/sysv/linux/tile/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/tile/libc-vdso.h: ... here.
+
+2015-04-19  Paul Eggert  <eggert@cs.ucla.edu>
+
+       * stdlib/setenv.c (__add_to_environ):
+       Dump core quickly if setenv (..., NULL, ...) is called.
+       This time, do it the right way, and pacify GCC with a pragma.
+
+2015-04-17  Roland McGrath  <roland@hack.frob.com>
+
+       * elf/dl-close.c (_dl_close_worker) [DL_NNS == 1]: Just assert that
+       IMAP->l_prev cannot be null, and #if out the code for the contrary
+       case, avoiding 'assert (nsid != LM_ID_BASE)' making the compiler
+       believe that NS (&_dl_ns[NSID]) could point outside the array.
+
+       * elf/dl-open.c (_dl_open): Use __glibc_unlikely in invalid namespace
+       check.  Reject NSID < 0 and NSID >= dl_nns, and check for DL_NNS==1,
+       before using NSID as an index.
+
 2015-04-17  Il'ya Malakhov <ilmalakhov@yandex.ru>
 
        [BZ #17825]