gronod/lfs
1
0
Fork 0
mirror of https://git.linuxfromscratch.org/lfs.git synced 2025-01-19 05:27:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

glibc: Fix CVE-2023-4527

Browse Source
This commit is contained in:
Xi Ruoyao 2023-09-13 14:31:39 +08:00
parent c858ba4e17
commit 48d8f5a51d
No known key found for this signature in database
GPG Key ID: ACAAD20E19E710E3
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
chapter08/glibc.xml
View File

@ -55,6 +55,18 @@
<screen><userinput remap="pre">patch -Np1 -i ../&glibc-memalign-patch;</userinput></screen>
<!-- CVE-2023-4527
https://sourceware.org/bugzilla/show_bug.cgi?id=30842
https://sourceware.org/ml/libc-alpha/2023-September/151522.html -->
<para>Then fix a security vulnerability exploitable when the
<option>no-aaaa</option> option is used in
<filename>/etc/resolv.conf</filename>:</para>
<screen><userinput remap="pre">sed \
-E "/__res_context_search/\
{N;N;s/(search \(([^,]*,){6}[^,]*)NULL/\1\&amp;alt_dns_packet_buffer/}" \
-i resolv/nss_dns/dns-host.c</userinput></screen>
<para>The Glibc documentation recommends building Glibc
in a dedicated build directory:</para>