glibc: CVE-2016-5417: per-thread memory leak in __res_vinit with IPv6 nameservers

Debian Bug report logs - #833302
glibc: CVE-2016-5417: per-thread memory leak in __res_vinit with IPv6 nameservers

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: glibc: CVE-2016-5417: per-thread memory leak in __res_vinit with IPv6 nameservers

Date: Tue, 02 Aug 2016 19:54:55 +0200

Source: glibc
Version: 2.23-4
Severity: important
Tags: security upstream fixed-upstream
Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=19257

Hi,

the following vulnerability was published for glibc.

CVE-2016-5417[0]:
per-thread memory leak in __res_vinit with IPv6 nameservers

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-5417
[1] https://sourceware.org/bugzilla/show_bug.cgi?id=19257

Regards,
Salvatore

Message #10 received at 833302@bugs.debian.org (full text, mbox, reply):

From: Aurelien Jarno <aurelien@aurel32.net>

To: Salvatore Bonaccorso <carnil@debian.org>, 833302@bugs.debian.org

Subject: Re: Bug#833302: glibc: CVE-2016-5417: per-thread memory leak in __res_vinit with IPv6 nameservers

Date: Wed, 3 Aug 2016 00:14:26 +0200

control: reassign -1 libc6
control: severity 818178 important
control: forcemerge 818178 -1

On 2016-08-02 19:54, Salvatore Bonaccorso wrote:
> Source: glibc
> Version: 2.23-4
> Severity: important
> Tags: security upstream fixed-upstream
> Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=19257
> 
> Hi,
> 
> the following vulnerability was published for glibc.
> 
> CVE-2016-5417[0]:
> per-thread memory leak in __res_vinit with IPv6 nameservers

Before being identified as a security issue, it has been reported as bug
#818178. Merging the bugs.

> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

I have just added the CVE to the changelog in our git (2.24 branch) so
that it can be found later.

Aurelien
 
-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
aurelien@aurel32.net                 http://www.aurel32.net

Message #31 received at 833302@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Aurelien Jarno <aurelien@aurel32.net>

Cc: 833302@bugs.debian.org

Subject: Re: Bug#833302: glibc: CVE-2016-5417: per-thread memory leak in __res_vinit with IPv6 nameservers

Date: Wed, 3 Aug 2016 06:29:31 +0200

Hi Aurelien,

On Wed, Aug 03, 2016 at 12:14:26AM +0200, Aurelien Jarno wrote:
> control: reassign -1 libc6
> control: severity 818178 important
> control: forcemerge 818178 -1
> 
> On 2016-08-02 19:54, Salvatore Bonaccorso wrote:
> > Source: glibc
> > Version: 2.23-4
> > Severity: important
> > Tags: security upstream fixed-upstream
> > Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=19257
> > 
> > Hi,
> > 
> > the following vulnerability was published for glibc.
> > 
> > CVE-2016-5417[0]:
> > per-thread memory leak in __res_vinit with IPv6 nameservers
> 
> Before being identified as a security issue, it has been reported as bug
> #818178. Merging the bugs.

Thanks, and apologies, have missed that.

Regards,
Salvatore

Send a report that this bug log contains spam.