Changeset 48d8f5a

Timestamp:

09/13/2023 06:32:19 AM (9 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

12.1, 12.1-rc1, multilib, trunk, xry111/arm64, xry111/clfs-ng, xry111/loongarch, xry111/loongarch-12.1, xry111/mips64el, xry111/update-glibc

Children:

80da60f

Parents:

c858ba4e

git-author:

Xi Ruoyao <xry111@…> (09/13/2023 06:31:39 AM)

git-committer:

Xi Ruoyao <xry111@…> (09/13/2023 06:32:19 AM)

Message:

glibc: Fix CVE-2023-4527

File:

• chapter08/glibc.xml (modified) (1 diff)

chapter08/glibc.xml

@@ -55 +55 @@
 
 <screen><userinput remap="pre">patch -Np1 -i ../&glibc-memalign-patch;</userinput></screen>
+
+    <!-- CVE-2023-4527
+         https://sourceware.org/bugzilla/show_bug.cgi?id=30842
+         https://sourceware.org/ml/libc-alpha/2023-September/151522.html -->
+    <para>Then fix a security vulnerability exploitable when the
+    <option>no-aaaa</option> option is used in
+    <filename>/etc/resolv.conf</filename>:</para>
+
+<screen><userinput remap="pre">sed \
+  -E "/__res_context_search/\
+      {N;N;s/(search \(([^,]*,){6}[^,]*)NULL/\1\&amp;alt_dns_packet_buffer/}" \
+  -i resolv/nss_dns/dns-host.c</userinput></screen>
 
     <para>The Glibc documentation recommends building Glibc