From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 95942 invoked by alias); 27 Jun 2019 14:30:25 -0000 Mailing-List: contact glibc-cvs-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: glibc-cvs-owner@sourceware.org List-Subscribe: Received: (qmail 95853 invoked by uid 9981); 27 Jun 2019 14:30:22 -0000 Date: Thu, 27 Jun 2019 14:30:00 -0000 Message-ID: <20190627143022.95852.qmail@sourceware.org> Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Tulio Magno Quites Machado Filho To: glibc-cvs@sourceware.org Subject: [glibc/ibm/2.28/master] Record CVE-2019-9169 in NEWS and ChangeLog [BZ #24114] X-Act-Checkin: glibc X-Git-Author: Aurelien Jarno X-Git-Refname: refs/heads/ibm/2.28/master X-Git-Oldrev: 2aee101ff6075dd97a99982a1ba29e21ec25c52f X-Git-Newrev: 54e725e39d0190227b9bf975a7c3f80e8a81365a X-SW-Source: 2019-q2/txt/msg00630.txt.bz2 https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=54e725e39d0190227b9bf975a7c3f80e8a81365a commit 54e725e39d0190227b9bf975a7c3f80e8a81365a Author: Aurelien Jarno Date: Sat Mar 16 22:59:56 2019 +0100 Record CVE-2019-9169 in NEWS and ChangeLog [BZ #24114] (cherry picked from commit b626c5aa5d0673a9caa48fb79fba8bda237e6fa8) Diff: --- ChangeLog | 1 + NEWS | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/ChangeLog b/ChangeLog index 0ef60fa..5667d92 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,6 @@ 2019-01-31 Paul Eggert + CVE-2019-9169 regex: fix read overrun [BZ #24114] Problem found by AddressSanitizer, reported by Hongxu Chen in: https://debbugs.gnu.org/34140 diff --git a/NEWS b/NEWS index 11d9af7..f4981a1 100644 --- a/NEWS +++ b/NEWS @@ -76,6 +76,10 @@ Security related changes: CVE-2016-10739: The getaddrinfo function could successfully parse IPv4 addresses with arbitrary trailing characters, potentially leading to data or command injection issues in applications. + + CVE-2019-9169: Attempted case-insensitive regular-expression match + via proceed_next_node in posix/regexec.c leads to heap-based buffer + over-read. Reported by Hongxu Chen. Version 2.28