Ubuntu
libgc package

libgc 1:7.4.2-7.3ubuntu0.1 source package in Ubuntu

Changelog

libgc (1:7.4.2-7.3ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows leading to pointers to
    memory zones smaller than requested size.
    - d/p/CVE-2016-9427-1.patch: Fix calloc_explicitly_typed in case
      of lb*n overflow.
    - d/p/CVE-2016-9427-2.patch: Fix malloc routines to prevent size
      value wrap-around of lb*n overflow.
    - d/p/CVE-2016-9427-3.patch: Fix GC_collect_or_expand to prevent
      allocation size value wrap-around
    - d/p/CVE-2016-9427-test.patch: add test cases
    - CVE-2016-9427

 -- Steve Beattie <email address hidden>  Mon, 13 Feb 2017 11:50:36 -0800

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates main devel
Xenial security main devel

Downloads

File Size SHA-256 Checksum
libgc_7.4.2.orig.tar.gz 713.3 KiB 09f21d38dd42bced14d6875f55804cb1b5e6bc486da7980187ecd2e768739c62
libgc_7.4.2-7.3ubuntu0.1.debian.tar.xz 23.5 KiB 71a25ca6f9fde7a429baf1b784052451c273e5d6b9024b58d97d34bce2d32a5f
libgc_7.4.2-7.3ubuntu0.1.dsc 2.1 KiB f5947c70e995bf8287f2fa4137f377346d11dfab82381f1f0338501a684e47d3

View changes file

Binary packages built by this source

libgc-dev: conservative garbage collector for C (development)

 Boehm-Demers-Weiser's GC is a garbage collecting storage allocator that is
 intended to be used as a plug-in replacement for C's malloc or C++'s new().
 .
 It allows you to allocate memory basically as you normally would without
 explicitly deallocating memory that is no longer useful. The collector
 automatically recycles memory when it determines that it can no longer be
 used.
 .
 This version of the collector is thread safe, has C++ support and uses the
 defaults for everything else. However, it does not work as a drop-in malloc(3)
 replacement.
 .
 This package is required to compile and link programs that use libgc1c2.

libgc1c2: conservative garbage collector for C and C++

 Boehm-Demers-Weiser's GC is a garbage collecting storage allocator that is
 intended to be used as a plug-in replacement for C's malloc or C++'s new().
 .
 It allows you to allocate memory basically as you normally would without
 explicitly deallocating memory that is no longer useful. The collector
 automatically recycles memory when it determines that it can no longer be
 used.
 .
 This version of the collector is thread safe, has C++ support and uses the
 defaults for everything else. However, it does not work as a drop-in malloc(3)
 replacement.

libgc1c2-dbgsym: debug symbols for package libgc1c2

 Boehm-Demers-Weiser's GC is a garbage collecting storage allocator that is
 intended to be used as a plug-in replacement for C's malloc or C++'s new().
 .
 It allows you to allocate memory basically as you normally would without
 explicitly deallocating memory that is no longer useful. The collector
 automatically recycles memory when it determines that it can no longer be
 used.
 .
 This version of the collector is thread safe, has C++ support and uses the
 defaults for everything else. However, it does not work as a drop-in malloc(3)
 replacement.