Ubuntu
klibc package

klibc 2.0.13-4ubuntu0.1 source package in Ubuntu

Changelog

klibc (2.0.13-4ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: improper pointer arithmetic
    - debian/patches/CVE-2016-9840.patch: remove offset pointer optimization
      in usr/klibc/zlib/inftrees.c.
    - CVE-2016-9840
  * SECURITY UPDATE: improper pointer arithmetic
    - debian/patches/CVE-2016-9841.patch: remove offset pointer optimization
      in usr/klibc/zlib/inffast.c.
    - CVE-2016-9841
  * SECURITY UPDATE: memory corruption during compression
    - debian/patches/CVE-2018-25032.patch: addresses a bug that can crash
      deflate on rare inputs when using Z_FIXED.
    - CVE-2018-25032
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2022-37434-1.patch: adds an extra condition to check
      if state->head->extra_max is greater than len before copying, and moves
      the len assignment to be placed before the check in
      usr/klibc/zlib/inflate.c.
    - debian/patches/CVE-2022-37434-2.patch: in the previous patch, the
      placement of the len assignment was causing issues so it was moved
      within the conditional check.
    - CVE-2022-37434

 -- Ian Constantin <email address hidden>  Tue, 21 May 2024 11:39:42 +0300

Upload details

Uploaded by:
Ian Constantin
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
linux-any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Noble updates main libs
Noble security main libs

Downloads

File Size SHA-256 Checksum
klibc_2.0.13.orig.tar.xz 461.6 KiB d673a294f742d59368222ff5c38462d81098c55063799de6fb8a7ba3d4af0436
klibc_2.0.13-4ubuntu0.1.debian.tar.xz 26.6 KiB 317e77d340a52dd8c96e954488c2fc8d32abddb508acb0d898bb5448716f76e2
klibc_2.0.13-4ubuntu0.1.dsc 2.1 KiB a95553e491b61706e94a21367125fbbe7f8cba10351869c37a9a3dc52d474082

View changes file

Binary packages built by this source

klibc-utils: small utilities built with klibc for early boot

 This package contains a collection of programs that are linked
 against klibc. These duplicate some of the functionality of a
 regular Linux toolset, but are typically much smaller than their
 full-function counterparts. They are intended for inclusion in
 initramfs images and embedded systems.

klibc-utils-dbgsym: debug symbols for klibc-utils
libklibc: minimal libc subset for use with initramfs

 klibc is intended to be a minimalistic libc subset for use with
 initramfs. It is deliberately written for small size, minimal
 entanglement, and portability, not speed. It is definitely a work in
 progress, and a lot of things are still missing.

libklibc-dbgsym: debug symbols for libklibc
libklibc-dev: kernel headers used during the build of klibc

 This package contains the set of kernel headers that were required to
 build klibc and the utilities that ship with it. This may or may
 not be a complete enough set to build other programs that link against
 klibc. If in doubt, use real kernel headers instead.