* SECURITY UPDATE: stack buffer overflow in vfprintf handling
(LP: #1031301)
- debian/patches/any/CVE-2012-3406.patch: switch to malloc when
array grows too large to handle via alloca extension
- CVE-2012-3406
* SECURITY UPDATE: stdlib strtod integer/buffer overflows
- debian/patches/any/CVE-2012-3480.patch: rearrange calculations
and modify types to void integer overflows
- CVE-2012-3480
eglibc (2.15-0ubuntu10.1) precise; urgency=low
* Backport fix from 2.16 to fix htons() conversion errors on non-x86
architectures, by correctly casting to uint16_t (LP: #1016349)
* Restore missing AT_EMPTY_PATH definition in fnctl.h (LP: #1010069)
* Backport FMA4/AVX detection from glibc 2.16 (LP: #956051, #979003)
* Backport fixups to AVX-using code to match the detection backport.
* Backport fix from 2.16 for sscanf/realloc deadlock (LP: #1028038)
* Backport for bogus FPE on underflow for exp(double) (LP: #1007457)
-- Adam Conrad <email address hidden> Wed, 03 Oct 2012 15:58:02 -0600
This bug was fixed in the package eglibc - 2.15-0ubuntu10.3
---------------
eglibc (2.15-0ubuntu10.3) precise; urgency=low
* Backport fixes for dbl-64 and ldbl-128 issues (LP: #1000498)
* Backport another FMA support patch from glibc master branch.
eglibc (2.15-0ubuntu10.2) precise-security; urgency=low
* SECURITY UPDATE: stack buffer overflow in vfprintf handling patches/ any/CVE- 2012-3406. patch: switch to malloc when patches/ any/CVE- 2012-3480. patch: rearrange calculations
(LP: #1031301)
- debian/
array grows too large to handle via alloca extension
- CVE-2012-3406
* SECURITY UPDATE: stdlib strtod integer/buffer overflows
- debian/
and modify types to void integer overflows
- CVE-2012-3480
eglibc (2.15-0ubuntu10.1) precise; urgency=low
* Backport fix from 2.16 to fix htons() conversion errors on non-x86
architectures, by correctly casting to uint16_t (LP: #1016349)
* Restore missing AT_EMPTY_PATH definition in fnctl.h (LP: #1010069)
* Backport FMA4/AVX detection from glibc 2.16 (LP: #956051, #979003)
* Backport fixups to AVX-using code to match the detection backport.
* Backport fix from 2.16 for sscanf/realloc deadlock (LP: #1028038)
* Backport for bogus FPE on underflow for exp(double) (LP: #1007457)
-- Adam Conrad <email address hidden> Wed, 03 Oct 2012 15:58:02 -0600