Format: 1.8 Date: Thu, 24 Feb 2022 14:45:39 -0500 Source: glibc Binary: libc-bin libc-dev-bin libc-devtools libc6 libc6-dbg libc6-dev libc6-prof locales-all nscd Built-For-Profiles: noudeb Architecture: arm64_translations arm64 Version: 2.34-0ubuntu3.2 Distribution: impish Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-prof - GNU C Library: Shared Libraries locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Changes: glibc (2.34-0ubuntu3.2) impish-security; urgency=medium . * SECURITY UPDATE: Unexpected return value from realpath() - debian/patches/any/CVE-2021-3998-pre1.patch: add helpers to create paths longer than PATH_MAX in support/temp_file.c, support/temp_file.h. - debian/patches/any/CVE-2021-3998-1.patch: set errno to ENAMETOOLONG for result larger than PATH_MAX in stdlib/Makefile, stdlib/canonicalize.c, stdlib/tst-realpath-toolong.c. - debian/patches/any/CVE-2021-3998-2.patch: avoid overwriting preexisting error in stdlib/canonicalize.c. - CVE-2021-3998 * SECURITY UPDATE: Off-by-one buffer overflow/underflow in getcwd() - debian/patches/any/CVE-2021-3999-1.patch: set errno to ERANGE for size == 1 in sysdeps/posix/getcwd.c, sysdeps/unix/sysv/linux/Makefile, sysdeps/unix/sysv/linux/tst-getcwd-smallbuff.c. - debian/patches/any/CVE-2021-3999-2.patch: detect user namespace support in sysdeps/unix/sysv/linux/tst-getcwd-smallbuff.c. - CVE-2021-3999 * SECURITY UPDATE: DoS via long svcunix_create path argument - debian/patches/any/CVE-2022-23218-pre1.patch: add the __sockaddr_un_set function in include/sys/un.h, socket/Makefile, socket/sockaddr_un_set.c, socket/tst-sockaddr_un_set.c. - debian/patches/any/CVE-2022-23218.patch: fix buffer overflow in sunrpc/Makefile, sunrpc/svc_unix.c, sunrpc/tst-bug28768.c. - CVE-2022-23218 * SECURITY UPDATE: DoS via long clnt_create hostname argument - debian/patches/any/CVE-2022-23219.patch: fix buffer overflow in sunrpc/clnt_gen.c. - CVE-2022-23219 * debian/rules.d/build.mk: build with --with-default-link=no. Checksums-Sha1: 70a25812d576af97de998b07438129279986288c 12523 glibc_2.34-0ubuntu3.2_arm64.buildinfo 31a72bec2794719dd76299a58ab2954238ea1a16 1846469 glibc_2.34-0ubuntu3.2_arm64_translations.tar.gz dca930c3f0052f051e3fcf95855186af01a9d925 2215576 libc-bin-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 97b2ea1fe28f1215458277c355ed1f97c5bdc34a 902932 libc-bin_2.34-0ubuntu3.2_arm64.deb 5fce82bb897238d83ff0392c0e056561c805c6f3 29094 libc-dev-bin-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 411bb1f0ad6822bf4ccac2701b9259d0a6aef7eb 19636 libc-dev-bin_2.34-0ubuntu3.2_arm64.deb 0c926e8a6c7e40bc31ac1160091f3d7661b6855f 41488 libc-devtools-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 25a89ce72ad962dcab302cd2c5cf0a45082828f4 27704 libc-devtools_2.34-0ubuntu3.2_arm64.deb c0514be1366753f33774b97e95ab0d4455e3459c 11550024 libc6-dbg_2.34-0ubuntu3.2_arm64.deb a1f533b3bbbb07f002b19c52dbd5096b351ab6cc 1525456 libc6-dev_2.34-0ubuntu3.2_arm64.deb ecd87152297f6ef5ab84d929537f51c48bbec9a8 1132260 libc6-prof_2.34-0ubuntu3.2_arm64.deb 8910fe6f8a1c1d364464df59b8f732f53aaf2e6e 2684760 libc6_2.34-0ubuntu3.2_arm64.deb a011e9d72c383fc1db3b6a4b411d828f335e4468 10682376 locales-all_2.34-0ubuntu3.2_arm64.deb 2660c3bcbefad570821d5edc68f954282cc58f25 262236 nscd-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 0e37375f4ffedb3dd271e8d261260b6baa356e69 77456 nscd_2.34-0ubuntu3.2_arm64.deb Checksums-Sha256: 0a1cc08f4fc3f02fe637c13fd84d23aa73009e147760331d24931c9eec94e060 12523 glibc_2.34-0ubuntu3.2_arm64.buildinfo 8baf47c62af0cbe45bd5a27fe1a28772f14d7c718f56c5fee7445c36ff4e51ac 1846469 glibc_2.34-0ubuntu3.2_arm64_translations.tar.gz 0e567772654bebe0fad28ef8c72a2ae661319be40a0385ad186a7c95e48cc5d0 2215576 libc-bin-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 153dae53740680aa521f6799a26f07824b473f08d2f360033b6e4c47ea041f3e 902932 libc-bin_2.34-0ubuntu3.2_arm64.deb d1988a96117a88c058f2fb4a54238f5ea5b275de04a98628d21bea7360f075c6 29094 libc-dev-bin-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 8f34f15af2ed2b59b4068db8a3e29f47e70ee0eadb93ab764bee94d61d459743 19636 libc-dev-bin_2.34-0ubuntu3.2_arm64.deb 06b18f9cd79a9edda770364a101840a8c7d4f6aee83105b7efd5c4ae60137abc 41488 libc-devtools-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 36e300d61e80ffe8ac2cef99b4bc9a50f4d77522986a1b68571cf94aa9bb05e5 27704 libc-devtools_2.34-0ubuntu3.2_arm64.deb 3da0e2f5a02c4da1dd822b65be3d7e8d1673a885608e5842f15a56518cd5bedc 11550024 libc6-dbg_2.34-0ubuntu3.2_arm64.deb 45ece6ec2e1e4a2718a254a6686f013d109b2d7b2d389253401ced6e59c9430f 1525456 libc6-dev_2.34-0ubuntu3.2_arm64.deb 79131ac2da11e71988ad8424b3fc70cfad008c1451ba830e0bde81d28edb6f45 1132260 libc6-prof_2.34-0ubuntu3.2_arm64.deb 0cdbd7b5d06f0b1e9358ba946db2ee512e9f94d5fd6a9b0ad05ee3d6d196cee4 2684760 libc6_2.34-0ubuntu3.2_arm64.deb 893b9a8909107d5303409f67059655d207e76956d47d15cbc7597ca7469ea647 10682376 locales-all_2.34-0ubuntu3.2_arm64.deb cc77e41ddfb66437666f8db75cc6bd82da1b353b175065dc9188b602925fc605 262236 nscd-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 49694ceed6201fe25ce48d75d83bd646ddb8044681590b218f0e753031c97480 77456 nscd_2.34-0ubuntu3.2_arm64.deb Files: 055506085d2df2b9b764ef8a382c04cf 12523 libs required glibc_2.34-0ubuntu3.2_arm64.buildinfo 47f16589a1f14335df90db55269bf762 1846469 raw-translations - glibc_2.34-0ubuntu3.2_arm64_translations.tar.gz 6f0920b01aad2800b7d20a5d5d1eb4b2 2215576 debug optional libc-bin-dbgsym_2.34-0ubuntu3.2_arm64.ddeb a39b7dc372e0106e44a73702211ac37e 902932 libs required libc-bin_2.34-0ubuntu3.2_arm64.deb d9dc2e0905b9a53f682690be184d4e53 29094 debug optional libc-dev-bin-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 84b0cd452c036d72184f2f715280a659 19636 libdevel optional libc-dev-bin_2.34-0ubuntu3.2_arm64.deb 971a5c5a4e0386c393f9720de1d219ec 41488 debug optional libc-devtools-dbgsym_2.34-0ubuntu3.2_arm64.ddeb a307ab2db5589f675e3010f5400b4ec1 27704 devel optional libc-devtools_2.34-0ubuntu3.2_arm64.deb 32d91dbd75e3d97cd788fb690f058a46 11550024 debug optional libc6-dbg_2.34-0ubuntu3.2_arm64.deb 57e16644ec5686e884ea52ede112e9a8 1525456 libdevel optional libc6-dev_2.34-0ubuntu3.2_arm64.deb 8db57e207206924e10377039a73453a0 1132260 libs optional libc6-prof_2.34-0ubuntu3.2_arm64.deb 32c277732947c7eade44b0311f9e0614 2684760 libs optional libc6_2.34-0ubuntu3.2_arm64.deb 4801e8a391d218273c99f1bfe9c714e9 10682376 localization optional locales-all_2.34-0ubuntu3.2_arm64.deb bfef3054014095693ba67bd3fd9c014a 262236 debug optional nscd-dbgsym_2.34-0ubuntu3.2_arm64.ddeb 77a19e2ba461aaffa23e2f6e723313be 77456 admin optional nscd_2.34-0ubuntu3.2_arm64.deb Original-Maintainer: GNU Libc Maintainers Original-Vcs-Browser: https://salsa.debian.org/glibc-team/glibc Original-Vcs-Git: https://salsa.debian.org/glibc-team/glibc.git