CVE-2017-1000408

Qualys Security Advisory Buffer overflow in glibc's ldso ======================================================================== Contents ======================================================================== Summary Memory Leak Buffer Overflow Exploitation Acknowledgments ================================================================== ...

Qualys has discovered a memory leak and a buffer overflow in the dynamic loader (ldso) of the GNU C Library (glibc) ...

On Thu, Jun 27, 2019 at 04:03:21PM +0200, Solar Designer wrote: I'm not a member of security@ko, but that list isn't what we're looking for We've talked about this with Greg before sending this application, and he has pointed out that security@ko is not a disclosure list, but rather just a way to pull in kernel folks to fix issues Some (most? ...

On Thu, Jun 27, 2019 at 01:05:08PM -0400, Sasha Levin wrote: "Some (most?) of the kernel [security] bugs that get fixed don't go through" linux-distros as well I'm not entirely happy with the wording used there, which currently is: --- Fixes for sensitive bugs, such as those that might lead to privilege escalations, may need to be coordinate ...

On Fri, Jun 28, 2019 at 02:57:43PM +0200, Solar Designer wrote: True, but we care about more than just the kernel side of things Can I suggest that we fork the discussion around security-bugsrst to LKML? I can suggest an initial patch to address your comments here but I think that this is better handled on LKML My concern with Monday is ...