glibc: patch CVE-2015-7547

The glibc DNS client side resolver is vulnerable to a stack-based buffer overflow when the getaddrinfo() library function is used. Software using this function may be exploited with attacker-controlled domain names, attacker-controlled DNS servers, or through a man-in-the-middle attack. https://googleonlinesecurity.blogspot.co.uk/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
2016-02-16 16:15:07 +01:00
parent d13adb4f8d
commit b5aa8a4e64
2 changed files with 570 additions and 0 deletions
@@ -61,6 +61,7 @@ stdenv.mkDerivation ({
      ./security-bdf1ff05.patch
      ./cve-2014-8121.patch
      ./cve-2015-1781.patch
+      ./cve-2015-7547.patch

      ./glibc-locale-incompatibility.patch
    ];