Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 27 Oct 2010 01:49:47 +0400
From: "Dmitry V. Levin" <ldv@...linux.org>
To: oss-security@...ts.openwall.com
Subject: Re: glibc $ORIGIN problem - CVE-2010-3847

On Mon, Oct 25, 2010 at 07:26:02AM +0400, Solar Designer wrote:
[...]
> http://git.altlinux.org/people/ldv/packages/?p=glibc.git;a=commitdiff;h=64963eb224c9
> 
> Perhaps further changes were made to some of the patched files in
> Dmitry's repository above (the commit is a bit dated, whereas the
> current tree is based on glibc 2.11.2).  Dmitry, you could want to
> comment on that.

The latest version of the change available as a single patch is indeed the
change for glibc 2.10.1 mentioned above.  It was merged with upstream
glibc.git since then, and now it's based on release/2.11/master branch.


-- 
ldv

Content of type "application/pgp-signature" skipped

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.