2019-11-28 09:00:31 |
bugproxy |
bug |
|
|
added bug |
2019-11-28 09:00:34 |
bugproxy |
tags |
|
architecture-s39064 bugnameltc-182602 severity-high targetmilestone-inin1910 |
|
2019-11-28 09:00:35 |
bugproxy |
ubuntu: assignee |
|
Skipper Bug Screeners (skipper-screen-team) |
|
2019-11-28 09:00:40 |
bugproxy |
affects |
ubuntu |
glibc (Ubuntu) |
|
2019-11-28 09:03:21 |
Frank Heimes |
bug task added |
|
ubuntu-z-systems |
|
2019-11-28 09:03:37 |
Frank Heimes |
ubuntu-z-systems: status |
New |
Triaged |
|
2019-11-28 09:03:43 |
Frank Heimes |
ubuntu-z-systems: importance |
Undecided |
High |
|
2019-11-28 09:04:06 |
Frank Heimes |
ubuntu-z-systems: assignee |
|
Skipper Bug Screeners (skipper-screen-team) |
|
2019-11-28 09:04:21 |
Frank Heimes |
glibc (Ubuntu): importance |
Undecided |
High |
|
2019-11-28 09:04:57 |
Frank Heimes |
glibc (Ubuntu): assignee |
Skipper Bug Screeners (skipper-screen-team) |
Canonical Foundations Team (canonical-foundations) |
|
2019-11-28 09:06:20 |
Frank Heimes |
nominated for series |
|
Ubuntu Eoan |
|
2019-11-28 09:06:20 |
Frank Heimes |
bug task added |
|
glibc (Ubuntu Eoan) |
|
2019-12-16 05:44:43 |
Launchpad Janitor |
glibc (Ubuntu): status |
New |
Fix Released |
|
2019-12-16 06:47:52 |
Frank Heimes |
ubuntu-z-systems: status |
Triaged |
In Progress |
|
2020-01-20 09:42:14 |
Dimitri John Ledkov |
description |
glibc: strstr(): Invalid result if needle crosses page on s390-z15 ifunc variant.
If the specified needle crosses a page-boundary, the s390-z15 ifunc variant of
strstr truncates the needle which results in invalid results.
Example:
needle = "Hello" <page-boundary> "World"
really used needle = "Hello"
haystack = "abc HelloBug def"
result = "HelloBug def"
This only happens if the needle before page-boundary contains 9 or less characters.
See upstream-glibc bugzilla "Bug 25226 - strstr: Invalid result if needle crosses page on s390-z15 ifunc variant."
(https://sourceware.org/bugzilla/show_bug.cgi?id=25226)
Fixed with upstream-glibc commit "S390: Fix handling of needles crossing a page in strstr z15 ifunc-variant. [BZ #25226]"
(https://sourceware.org/git/?p=glibc.git;a=commit;h=bfdb731438206b0f70fe7afa890681155c30b419)
Please backport this commit to Ubuntu 19.10, which includes glibc 2.30
Already backported to upstream-glibc-release-branch-2.30:
https://sourceware.org/git/?p=glibc.git;a=commit;h=f4419b0d0181da28f18cba40068f2e75300f5020
glibc 2.31 (tentativ GA 2020-02-01) will have this fix integrated.
If this version will not be picked finally, than this fix is also needed for 20.04 |
[Impact]
glibc: strstr(): Invalid result if needle crosses page on s390-z15 ifunc variant.
If the specified needle crosses a page-boundary, the s390-z15 ifunc variant of
strstr truncates the needle which results in invalid results.
Example:
needle = "Hello" <page-boundary> "World"
really used needle = "Hello"
haystack = "abc HelloBug def"
result = "HelloBug def"
This only happens if the needle before page-boundary contains 9 or less characters.
See upstream-glibc bugzilla "Bug 25226 - strstr: Invalid result if needle crosses page on s390-z15 ifunc variant."
(https://sourceware.org/bugzilla/show_bug.cgi?id=25226)
Fixed with upstream-glibc commit "S390: Fix handling of needles crossing a page in strstr z15 ifunc-variant. [BZ #25226]"
(https://sourceware.org/git/?p=glibc.git;a=commit;h=bfdb731438206b0f70fe7afa890681155c30b419)
Please backport this commit to Ubuntu 19.10, which includes glibc 2.30
Already backported to upstream-glibc-release-branch-2.30:
https://sourceware.org/git/?p=glibc.git;a=commit;h=f4419b0d0181da28f18cba40068f2e75300f5020
glibc 2.31 (tentativ GA 2020-02-01) will have this fix integrated.
If this version will not be picked finally, then this fix is also needed for 20.04
[Test Case]
* glibc builds and passes testsuite, as the commit to backport includes comprehensive testsuite for the problem in question in the glibc api.
[Regression Potential]
* Fix released in focal, and available from stable upstream branches.
* all autopkgtests will be triggered, implying that comprehensive test coverage will execute on all architectues. |
|
2020-02-07 17:26:50 |
Timo Aaltonen |
glibc (Ubuntu Eoan): status |
New |
Fix Committed |
|
2020-02-07 17:26:53 |
Timo Aaltonen |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2020-02-07 17:26:55 |
Timo Aaltonen |
bug |
|
|
added subscriber SRU Verification |
2020-02-07 17:27:02 |
Timo Aaltonen |
tags |
architecture-s39064 bugnameltc-182602 severity-high targetmilestone-inin1910 |
architecture-s39064 bugnameltc-182602 severity-high targetmilestone-inin1910 verification-needed verification-needed-eoan |
|
2020-02-10 07:23:38 |
Frank Heimes |
ubuntu-z-systems: status |
In Progress |
Fix Committed |
|
2020-02-10 17:02:08 |
Frank Heimes |
tags |
architecture-s39064 bugnameltc-182602 severity-high targetmilestone-inin1910 verification-needed verification-needed-eoan |
architecture-s39064 bugnameltc-182602 severity-high targetmilestone-inin1910 verification-done verification-done-eoan |
|
2020-02-25 04:46:16 |
Mathew Hodson |
glibc (Ubuntu Eoan): importance |
Undecided |
High |
|
2020-02-27 22:48:29 |
Launchpad Janitor |
glibc (Ubuntu Eoan): status |
Fix Committed |
Fix Released |
|
2020-02-27 22:48:40 |
Steve Langasek |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
2020-02-28 08:22:18 |
Andrew Cloke |
ubuntu-z-systems: status |
Fix Committed |
Fix Released |
|