diff options
Diffstat (limited to 'recipes-core/glibc/glibc/CVE-2017-1000366.patch')
-rw-r--r-- | recipes-core/glibc/glibc/CVE-2017-1000366.patch | 53 |
1 files changed, 0 insertions, 53 deletions
diff --git a/recipes-core/glibc/glibc/CVE-2017-1000366.patch b/recipes-core/glibc/glibc/CVE-2017-1000366.patch deleted file mode 100644 index 8ba9c5c..0000000 --- a/recipes-core/glibc/glibc/CVE-2017-1000366.patch +++ /dev/null | |||
@@ -1,53 +0,0 @@ | |||
1 | From f6110a8fee2ca36f8e2d2abecf3cba9fa7b8ea7d Mon Sep 17 00:00:00 2001 | ||
2 | From: Florian Weimer <fweimer@redhat.com> | ||
3 | Date: Mon, 19 Jun 2017 17:09:55 +0200 | ||
4 | Subject: [PATCH] CVE-2017-1000366: Ignore LD_LIBRARY_PATH for AT_SECURE=1 | ||
5 | programs [BZ #21624] | ||
6 | |||
7 | LD_LIBRARY_PATH can only be used to reorder system search paths, which | ||
8 | is not useful functionality. | ||
9 | |||
10 | This makes an exploitable unbounded alloca in _dl_init_paths unreachable | ||
11 | for AT_SECURE=1 programs. | ||
12 | |||
13 | CVE: CVE-2017-1000366 | ||
14 | Upstream-Status: Backport [https://sourceware.org/git/?p=glibc.git;a=commit;h=3c7cd21290cabdadd72984fb69bc51e64ff1002d] | ||
15 | |||
16 | Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> | ||
17 | --- | ||
18 | ChangeLog | 7 +++++++ | ||
19 | elf/rtld.c | 3 ++- | ||
20 | 2 files changed, 9 insertions(+), 1 deletion(-) | ||
21 | |||
22 | diff --git a/ChangeLog b/ChangeLog | ||
23 | index f140ee6..7bfdf45 100644 | ||
24 | --- a/ChangeLog | ||
25 | +++ b/ChangeLog | ||
26 | @@ -1,3 +1,10 @@ | ||
27 | +2017-06-19 Florian Weimer <fweimer@redhat.com> | ||
28 | + | ||
29 | + [BZ #21624] | ||
30 | + CVE-2017-1000366 | ||
31 | + * elf/rtld.c (process_envvars): Ignore LD_LIBRARY_PATH for | ||
32 | + __libc_enable_secure. | ||
33 | + | ||
34 | 2017-02-05 Siddhesh Poyarekar <siddhesh@sourceware.org> | ||
35 | |||
36 | * version.h (RELEASE): Set to "stable" | ||
37 | diff --git a/elf/rtld.c b/elf/rtld.c | ||
38 | index a036ece..2fc33a6 100644 | ||
39 | --- a/elf/rtld.c | ||
40 | +++ b/elf/rtld.c | ||
41 | @@ -2418,7 +2418,8 @@ process_envvars (enum mode *modep) | ||
42 | |||
43 | case 12: | ||
44 | /* The library search path. */ | ||
45 | - if (memcmp (envline, "LIBRARY_PATH", 12) == 0) | ||
46 | + if (!__libc_enable_secure | ||
47 | + && memcmp (envline, "LIBRARY_PATH", 12) == 0) | ||
48 | { | ||
49 | library_path = &envline[13]; | ||
50 | break; | ||
51 | -- | ||
52 | 1.9.1 | ||
53 | |||