Re: [LFS Trac] #5983: glibc-2.44

This is a multi-part message in MIME format...

------------=_1785010969-3622227-5952
Content-Type: multipart/related;
 boundary="===============7279837351290458399=="

--===============7279837351290458399==
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

#5983: glibc-2.44
-------------------------+-----------------------
 Reporter:  Xi Ruoyao    |       Owner:  lfs-book
     Type:  enhancement  |      Status:  new
 Priority:  high         |   Milestone:  13.1
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Comment (by Xi Ruoyao):

 Replying to [comment:9 Joe Locash]:
 > From https://www.openwall.com/lists/oss-security/2026/07/25/1
 >
 > {{{
 > Security related changes:
 >
 > The following CVEs were fixed in this release, details of which can be
 > found in the advisories directory of the release tarball:
 >
 >    GLIBC-SA-2026-0005:
 >      gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS
 >      response (CVE-2026-4437)
 >
 >    GLIBC-SA-2026-0006:
 >      gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames
 >      (CVE-2026-4438)
 >
 >    GLIBC-SA-2026-0007:
 >      iconv crash due to assertion failure with untrusted input
 >      (CVE-2026-4046)
 > }}}

 The list is incomplete and these three are already fixed by
 glibc-2.43-upstream_fixes-1.patch in the book.  See the list in
 description for security issues fixed in 2.44 but not covered by the
 patch.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5983#comment:10>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

--===============7279837351290458399==--

------------=_1785010969-3622227-5952
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page

------------=_1785010969-3622227-5952--