Publishing details

Changelog

libgc (1:7.2d-5ubuntu2.1) trusty-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows leading to pointers to
    memory zones smaller than requested size.
    - d/p/CVE-2016-9427-1.patch: Fix calloc_explicitly_typed in case
      of lb*n overflow.
    - d/p/CVE-2016-9427-2.patch: Fix malloc routines to prevent size
      value wrap-around of lb*n overflow.
    - d/p/CVE-2016-9427-3.patch: Fix GC_collect_or_expand to prevent
      allocation size value wrap-around
    - d/p/CVE-2016-9427-prereq.patch: add/use ROUNDUP_PAGESIZE_IF_MMAP
      macro needed for actual fixes.
    - d/p/CVE-2016-9427-test.patch: add test cases
    - CVE-2016-9427

 -- Steve Beattie <email address hidden>  Mon, 13 Feb 2017 16:50:59 -0800

Available diffs

Builds

Built packages

Package files