[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20101026214947.GC30679@altlinux.org>
Date: Wed, 27 Oct 2010 01:49:47 +0400
From: "Dmitry V. Levin" <ldv@...linux.org>
To: oss-security@...ts.openwall.com
Subject: Re: glibc $ORIGIN problem - CVE-2010-3847
On Mon, Oct 25, 2010 at 07:26:02AM +0400, Solar Designer wrote:
[...]
> http://git.altlinux.org/people/ldv/packages/?p=glibc.git;a=commitdiff;h=64963eb224c9
>
> Perhaps further changes were made to some of the patched files in
> Dmitry's repository above (the commit is a bit dated, whereas the
> current tree is based on glibc 2.11.2). Dmitry, you could want to
> comment on that.
The latest version of the change available as a single patch is indeed the
change for glibc 2.10.1 mentioned above. It was merged with upstream
glibc.git since then, and now it's based on release/2.11/master branch.
--
ldv
Content of type "application/pgp-signature" skipped
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
