]> git.ipfire.org Git - people/mfischer/ipfire-2.x.git/commit
projects / people / mfischer / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2664c94) | patch
glibc: Fix CVE-2021-33574 and follow-up issue
authorMichael Tremer <michael.tremer@ipfire.org>
Thu, 19 Aug 2021 12:07:06 +0000 (12:07 +0000)
committerArne Fitzenreiter <arne_f@ipfire.org>
Fri, 10 Sep 2021 07:36:49 +0000 (07:36 +0000)
commitb9a4368adbd02620bca865707704c6bb75715969
treec047bc9cff6fb1091ff771086d413fa1054f2fcftree | snapshot
parent2664c94463fbfc00939048a527e4a0912f7e3cbfcommit | diff
glibc: Fix CVE-2021-33574 and follow-up issue

The mq_notify function has a potential use-after-free issue when using a
notification type of SIGEV_THREAD and a thread attribute with a non-default
affinity mask.

The fix for this introduced a NULL pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
lfs/glibc diff | blob | blame | history
src/patches/glibc-2.33-librt-fix-null-pointer-dereference-bug-28213.patch [new file with mode: 0644] blob
src/patches/glibc-2.33-use-__pthread_attr_copy-in-mq_notify-bug-27896.patch [new file with mode: 0644] blob
Matthias' tree of IPFire 2.x