Ubuntu
eglibc package

timezone file integer overflow

Bug #906961 reported by Kees Cook
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
eglibc (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

This is CVE-2009-5029. Given the uncommon situations where TZ files are processed by privileged applications, this is not urgent, though there are now examples of this being used in the wild:
http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html

Fixed in: http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=97ac2654b2d831acaa18a2b018b0736245903fd2

Kees Cook (kees)
visibility: private → public
Tyler Hicks (tyhicks)
Changed in eglibc (Ubuntu):
status: New → Triaged
importance: Undecided → Medium
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package eglibc - 2.13-24ubuntu1

---------------
eglibc (2.13-24ubuntu1) precise; urgency=low

  * Merge with Debian (r5108), bringing in an ARM header patch, and a fix
    for CVE-2009-5029, an integer overflow in timezone code (LP: #906961)

eglibc (2.13-24) unstable; urgency=low

  * patches/m68k/cvs-byteswap.diff: fix m68k optimized version of
    <bits/byteswap.h>. Closes: #652356.
  * Add m68k expected tests results.
  * Update Russian debconf translation, by Yuri Kozlov. Closes: #652428.
  * Update German debconf translation, by Helge Kreutzman. Closes: #652556.
  * patches/any/cvs-tzfile.diff: fix integer overflow in timezone code.
    Closes: #650790.
  * Don't provide debugging symbols for libc-bin, libc-dev-bin and nscd
    packages to avoid conflicts with multiarch.
  * sysdeps/armel.mk, sysdeps/armhf.mk: fix cross compiling.
  * Update Dutch debconf translation, by Jeroen Schot. Closes: #652632.
  * patches/hurd/tg-struct_stat.diff: fix #ifdef typos.
  * kfreebsd/local-sysdeps.diff: update to revision 3952 (from glibc-bsd).
  * patches/m68k/local-pthread_lock.diff: remove, obsolete.
  * patches/arm/cvs-ucontext.diff: fix namespace pollution from
    <sys/ucontext.h> on arm. Closes: #652844.
  * Update French debconf translation, by Christian Perrier. Closes:
    #652860.
 -- Adam Conrad <email address hidden> Tue, 03 Jan 2012 12:04:05 -0700

Changed in eglibc (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.