Re: [LFS Trac] #5895: fix glibc CVE-2026-4437 and 4438

#5895: fix glibc CVE-2026-4437 and 4438
-------------------------+-----------------------
 Reporter:  Xi Ruoyao    |       Owner:  lfs-book
     Type:  enhancement  |      Status:  new
 Priority:  high         |   Milestone:  13.1
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Comment (by Bruce Dubbs):

 The link above is interesting.  It changes 4 files:
 {{{
  resolv/Makefile                 |   7 +
  resolv/nss_dns/dns-host.c       |   4 +-
  resolv/tst-resolv-dns-section.c | 161 ++++++++++++++++++++
  resolv/tst-resolv-invalid-ptr.c | 258 ++++++++++++++++++++++++++++++++
 }}}

 Three of those are for tests.  The only real change is to two lines in one
 file:
 resolv/nss_dns/dns-host.c

 {{{
 -  while (ancount > 0)
 +  for (; ancount > 0; --ancount)
 ...
 -             || !__res_binary_hnok (expected_name)
 +             || !__res_binary_hnok (name_buffer)
 }}}

 This is the essential fix:

 {{{
 sed -e '/while..ancount/c\  for (; ancount > 0; --ancount)'  \
     -e '/binary_hnok..expected/s/expected_name/name_buffer/' \
     -i resolv/nss_dns/dns-host.c
 }}}

 I did not rebuild glibc, but I did check that the sed above does the same
 as the patch to the affected file.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5895#comment:1>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page