Format: 1.8 Date: Thu, 04 Jun 2020 13:25:26 -0400 Source: glibc Binary: libc-bin libc-dev-bin libc-l10n glibc-doc glibc-source locales locales-all nscd multiarch-support libc6 libc6-dev libc6-dbg libc6-pic libc6-udeb libc6.1 libc6.1-dev libc6.1-dbg libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev libc0.3-dbg libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev libc0.1-dbg libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 libc6-sparc libc6-dev-sparc libc6-sparc64 libc6-dev-sparc64 libc6-s390 libc6-dev-s390 libc6-amd64 libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64 libc6-mips32 libc6-dev-mips32 libc6-mipsn32 libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc6-armhf libc6-dev-armhf libc6-armel libc6-dev-armel libc0.1-i386 libc0.1-dev-i386 libc6-x32 libc6-dev-x32 libc6-xen libc0.3-xen libc6.1-alphaev67 Architecture: arm64_translations arm64 Version: 2.27-3ubuntu1.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: glibc-doc - GNU C Library: Documentation glibc-source - GNU C Library: sources libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-l10n - GNU C Library: localization files libc0.1 - GNU C Library: Shared libraries libc0.1-dbg - GNU C Library: detached debugging symbols libc0.1-dev - GNU C Library: Development Libraries and Header Files libc0.1-dev-i386 - GNU C Library: 32bit development libraries for AMD64 libc0.1-i386 - GNU C Library: 32bit shared libraries for AMD64 libc0.1-pic - GNU C Library: PIC archive library libc0.1-udeb - GNU C Library: Shared libraries - udeb (udeb) libc0.3 - GNU C Library: Shared libraries libc0.3-dbg - GNU C Library: detached debugging symbols libc0.3-dev - GNU C Library: Development Libraries and Header Files libc0.3-pic - GNU C Library: PIC archive library libc0.3-udeb - GNU C Library: Shared libraries - udeb (udeb) libc0.3-xen - GNU C Library: Shared libraries [Xen version] libc6 - GNU C Library: Shared libraries libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64 libc6-armel - GNU C Library: ARM softfp shared libraries for armhf libc6-armhf - GNU C Library: ARM hard float shared libraries for armel libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64 libc6-dev-armel - GNU C Library: ARM softfp development libraries for armhf libc6-dev-armhf - GNU C Library: ARM hard float development libraries for armel libc6-dev-i386 - GNU C Library: 32-bit development libraries for AMD64 libc6-dev-mips32 - GNU C Library: o32 Development Libraries for MIPS libc6-dev-mips64 - GNU C Library: 64bit Development Libraries for MIPS64 libc6-dev-mipsn32 - GNU C Library: n32 Development Libraries for MIPS64 libc6-dev-powerpc - GNU C Library: 32bit powerpc development libraries for ppc64 libc6-dev-ppc64 - GNU C Library: 64bit Development Libraries for PowerPC64 libc6-dev-s390 - GNU C Library: 32bit Development Libraries for IBM zSeries libc6-dev-sparc - GNU C Library: 32bit Development Libraries for SPARC libc6-dev-sparc64 - GNU C Library: 64bit Development Libraries for UltraSPARC libc6-dev-x32 - GNU C Library: X32 ABI Development Libraries for AMD64 libc6-i386 - GNU C Library: 32-bit shared libraries for AMD64 libc6-mips32 - GNU C Library: o32 Shared libraries for MIPS libc6-mips64 - GNU C Library: 64bit Shared libraries for MIPS64 libc6-mipsn32 - GNU C Library: n32 Shared libraries for MIPS64 libc6-pic - GNU C Library: PIC archive library libc6-powerpc - GNU C Library: 32bit powerpc shared libraries for ppc64 libc6-ppc64 - GNU C Library: 64bit Shared libraries for PowerPC64 libc6-s390 - GNU C Library: 32bit Shared libraries for IBM zSeries libc6-sparc - GNU C Library: 32bit Shared libraries for SPARC libc6-sparc64 - GNU C Library: 64bit Shared libraries for UltraSPARC libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) libc6-x32 - GNU C Library: X32 ABI Shared libraries for AMD64 libc6-xen - GNU C Library: Shared libraries [Xen version] libc6.1 - GNU C Library: Shared libraries libc6.1-alphaev67 - GNU C Library: Shared libraries (EV67 optimized) libc6.1-dbg - GNU C Library: detached debugging symbols libc6.1-dev - GNU C Library: Development Libraries and Header Files libc6.1-pic - GNU C Library: PIC archive library libc6.1-udeb - GNU C Library: Shared libraries - udeb (udeb) locales - GNU C Library: National Language (locale) data [support] locales-all - GNU C Library: Precompiled locale data multiarch-support - Transitional package to ensure multiarch compatibility nscd - GNU C Library: Name Service Cache Daemon Changes: glibc (2.27-3ubuntu1.2) bionic-security; urgency=medium . * SECURITY UPDATE: integer overflow in realpath - debian/patches/any/CVE-2018-11236.patch: fix path length overflow in realpath in stdlib/Makefile, stdlib/canonicalize.c, stdlib/test-bz22786.c. - CVE-2018-11236 * SECURITY UPDATE: buffer overflow in __mempcpy_avx512_no_vzeroupper - debian/patches/any/CVE-2018-11237-1.patch: don't write beyond destination in string/test-mempcpy.c, sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S. - debian/patches/any/CVE-2018-11237-2.patch: add a test case in string/test-memcpy.c. - CVE-2018-11237 * SECURITY UPDATE: if_nametoindex() does not close descriptor - debian/patches/any/CVE-2018-19591.patch: fix descriptor for overlong name in sysdeps/unix/sysv/linux/if_index.c. - CVE-2018-19591 * SECURITY UPDATE: heap over-read via regular-expression match - debian/patches/any/CVE-2019-9169.patch: fix read overrun in posix/regexec.c. - CVE-2019-9169 * SECURITY UPDATE: ASLR bypass - debian/patches/any/CVE-2019-19126.patch: check __libc_enable_secure before honoring LD_PREFER_MAP_32BIT_EXEC in sysdeps/unix/sysv/linux/x86_64/64/dl-librecon.h. - CVE-2019-19126 * SECURITY UPDATE: out-of-bounds write on PowerPC - debian/patches/any/CVE-2020-1751.patch: fix array overflow in backtrace on PowerPC in debug/tst-backtrace5.c, sysdeps/powerpc/powerpc32/backtrace.c, sysdeps/powerpc/powerpc64/backtrace.c. - CVE-2020-1751 * SECURITY UPDATE: use-after-free via tilde expansion - debian/patches/any/CVE-2020-1752.patch: fix use-after-free in glob when expanding ~user in posix/glob.c. - CVE-2020-1752 * SECURITY UPDATE: stack overflow via 80-bit long double function - debian/patches/any/CVE-2020-10029-1.patch: avoid ldbl-96 stack corruption from range reduction of pseudo-zero in sysdeps/ieee754/ldbl-96/Makefile, sysdeps/ieee754/ldbl-96/e_rem_pio2l.c, sysdeps/ieee754/ldbl-96/test-sinl-pseudo.c. - debian/patches/any/CVE-2020-10029-2.patch: use stack protector only if available in sysdeps/ieee754/ldbl-96/Makefile. - CVE-2020-10029 Checksums-Sha1: 060bd9cc6bdd973ec8db4004047458cb7d63be61 10790 glibc_2.27-3ubuntu1.2_arm64.buildinfo 9c3857946a0a36c4733b5c2ec7e61dedb60fc49b 1984888 glibc_2.27-3ubuntu1.2_arm64_translations.tar.gz 6ce2540208baf31f89a71c30fccd021a3c4c8206 2217148 libc-bin-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 88e942913f96a83f63e7417fc85340fa4101ac2e 474896 libc-bin_2.27-3ubuntu1.2_arm64.deb af89bb25e242118e732b122b1769e38f0adc4cb4 137064 libc-dev-bin-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 3bad4d911802348754e54074a3a2f14977507548 58656 libc-dev-bin_2.27-3ubuntu1.2_arm64.deb 2019deef3c147f3b329662f6081396063d1880c5 4496756 libc6-dbg_2.27-3ubuntu1.2_arm64.deb 49aaae9404bf9ef94e5605f492bfbde224cd0fc0 2049352 libc6-dev_2.27-3ubuntu1.2_arm64.deb be3d0a512ebf80976a750a58b5b888a4e4405d77 1222104 libc6-pic_2.27-3ubuntu1.2_arm64.deb 3e9f98ada6fb43e9d200b2c640417bded6058a1f 956168 libc6-udeb_2.27-3ubuntu1.2_arm64.udeb bf91a10f3dd9f53739fc8f448efc53076bf1a022 2274452 libc6_2.27-3ubuntu1.2_arm64.deb 892853325963676d53d5ce8db647815406f46773 3934868 locales-all_2.27-3ubuntu1.2_arm64.deb 7fa687633f753bc9b90d557107ef972559707cd4 6920 multiarch-support_2.27-3ubuntu1.2_arm64.deb 786be2ef974cd07bab79fc12dc55781714e868e2 287516 nscd-dbgsym_2.27-3ubuntu1.2_arm64.ddeb f1792b3224b3d0d80c6555f62b1fd56e4383d119 63752 nscd_2.27-3ubuntu1.2_arm64.deb Checksums-Sha256: 432465afc6a6c076bdf563c7f35a60657810ec6ca692b3514594624dd319f24c 10790 glibc_2.27-3ubuntu1.2_arm64.buildinfo 63541e4e46e18e03424bfc9639ffa627f0b5719b97ef47e0f7cd2f8a69f7e97f 1984888 glibc_2.27-3ubuntu1.2_arm64_translations.tar.gz 39818c85bf4b68553adeffb10d85d5694d52ec0c7754e7ac2a0f5e2b236fdc63 2217148 libc-bin-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 45d3a1d97eb63d0f37bf1b8b311e0f00d6bcef0bdb9d40b4c0912912664db092 474896 libc-bin_2.27-3ubuntu1.2_arm64.deb 414fcd5851e8671efebe64e06c1032a315418b8b4307f4bde5367032a8cacab1 137064 libc-dev-bin-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 093225fd7c59f74389336429faf43c07866c1e9a75fa164e9056444fbcdc64db 58656 libc-dev-bin_2.27-3ubuntu1.2_arm64.deb a7b623bfff8eeb257c2486a005bebed75f32f63a9363130dd55ce4e250d5b9a6 4496756 libc6-dbg_2.27-3ubuntu1.2_arm64.deb 0eb7edc07c2ef1b89c7c91d7d60688c2e7b0f46bc1e889be374f06b681140e49 2049352 libc6-dev_2.27-3ubuntu1.2_arm64.deb 79c0f40673b92bb2a71775a34274e4ab15013fd7944e37c56beda507d73ab9d9 1222104 libc6-pic_2.27-3ubuntu1.2_arm64.deb a0f6cc10b4ec877a73fd7add4cbfc12245492464f405a94321be078adc44c9c9 956168 libc6-udeb_2.27-3ubuntu1.2_arm64.udeb 651d4647b7c3c36c61b6d7b6b7d780e9417204819b5ea4a8e37575c6b668b7a4 2274452 libc6_2.27-3ubuntu1.2_arm64.deb 3090d685051dc234ba17f1d2b0af5367b0cf2054d4f99bd4af42214f64b997e9 3934868 locales-all_2.27-3ubuntu1.2_arm64.deb 6457e20d0fd38495860b233fb1a1a0311bcf3d92c29131d51c178f2c2d773124 6920 multiarch-support_2.27-3ubuntu1.2_arm64.deb 59a74d5bf6781d3bbe58a9b291f0d97429c7e58b795e6f4404af6019184fd278 287516 nscd-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 35adef5dc0feba23074ff5af5e2d356435b74b5f5b80e90b52bbf4385db2ebdc 63752 nscd_2.27-3ubuntu1.2_arm64.deb Files: 13192297e6422a7906452408019fde61 10790 libs required glibc_2.27-3ubuntu1.2_arm64.buildinfo 5e618e50b98234600f182ec180d259cb 1984888 raw-translations - glibc_2.27-3ubuntu1.2_arm64_translations.tar.gz 5452f305cb2e74efdcb5e50ce1c7a0b4 2217148 debug optional libc-bin-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 30e27fc1a2c4aa76c45de9f24c1e6ddd 474896 libs required libc-bin_2.27-3ubuntu1.2_arm64.deb 24dd41d558ddb9c46c559f19fc2523ab 137064 debug optional libc-dev-bin-dbgsym_2.27-3ubuntu1.2_arm64.ddeb 29ad85a15331a2b8a145d6f97dd93fe6 58656 libdevel optional libc-dev-bin_2.27-3ubuntu1.2_arm64.deb a3bdca9eb7c3c48ac8e6fd787c8892a1 4496756 debug optional libc6-dbg_2.27-3ubuntu1.2_arm64.deb 08bd66de28742d43697ad3f688c4f4c6 2049352 libdevel optional libc6-dev_2.27-3ubuntu1.2_arm64.deb b7c6b27b03ad87098662cde8793ac0e4 1222104 libdevel optional libc6-pic_2.27-3ubuntu1.2_arm64.deb 42cecd0aa3f295ed9146444d649b3917 956168 debian-installer optional libc6-udeb_2.27-3ubuntu1.2_arm64.udeb b953cef79717ffccee2e220b55763dfb 2274452 libs optional libc6_2.27-3ubuntu1.2_arm64.deb 23278e06e5b77fee280d82312ff6ece7 3934868 localization optional locales-all_2.27-3ubuntu1.2_arm64.deb 2c796cf79b1a24405106c8fc955247e9 6920 oldlibs optional multiarch-support_2.27-3ubuntu1.2_arm64.deb e76794ce175401020e40b9bb64217777 287516 debug optional nscd-dbgsym_2.27-3ubuntu1.2_arm64.ddeb b8131974f1b086dcd27eae43ddbc87f0 63752 admin optional nscd_2.27-3ubuntu1.2_arm64.deb Original-Maintainer: GNU Libc Maintainers