Ubuntu
klibc package

klibc 2.0.7-1ubuntu5.2 source package in Ubuntu

Changelog

klibc (2.0.7-1ubuntu5.2) focal-security; urgency=medium

  * SECURITY UPDATE: improper pointer arithmetic
    - debian/patches/CVE-2016-9840.patch: remove offset pointer optimization
      in usr/klibc/zlib/inftrees.c.
    - CVE-2016-9840
  * SECURITY UPDATE: improper pointer arithmetic
    - debian/patches/CVE-2016-9841.patch: remove offset pointer optimization
      in usr/klibc/zlib/inffast.c.
    - CVE-2016-9841
  * SECURITY UPDATE: memory corruption during compression
    - debian/patches/CVE-2018-25032.patch: addresses a bug that can crash
      deflate on rare inputs when using Z_FIXED.
    - CVE-2018-25032
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2022-37434-1.patch: adds an extra condition to check
      if state->head->extra_max is greater than len before copying, and moves
      the len assignment to be placed before the check in
      usr/klibc/zlib/inflate.c.
    - debian/patches/CVE-2022-37434-2.patch: in the previous patch, the
      placement of the len assignment was causing issues so it was moved
      within the conditional check.
    - CVE-2022-37434

 -- Ian Constantin <email address hidden>  Sat, 13 Apr 2024 12:35:16 +0300

Upload details

Uploaded by:
Ian Constantin
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
linux-any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main libs
Focal security main libs

Downloads

File Size SHA-256 Checksum
klibc_2.0.7.orig.tar.gz 615.8 KiB d953f91ef54b2875bba05f9b615dea049987ac935c165c9d08279a61f2eee1e5
klibc_2.0.7-1ubuntu5.2.debian.tar.xz 29.7 KiB db7b53ad6cf72877350c7dfd0037fd63074373ee26bbfd2c619f321ef2e0a295
klibc_2.0.7-1ubuntu5.2.dsc 2.0 KiB d7120c83962fdb7fb366914979b284fb0cea47d9036594476ef631f176f6078c

View changes file

Binary packages built by this source

klibc-utils: small utilities built with klibc for early boot

 This package contains a collection of programs that are linked
 against klibc. These duplicate some of the functionality of a
 regular Linux toolset, but are typically much smaller than their
 full-function counterparts. They are intended for inclusion in
 initramfs images and embedded systems.

klibc-utils-dbgsym: debug symbols for klibc-utils
libklibc: minimal libc subset for use with initramfs

 klibc is intended to be a minimalistic libc subset for use with
 initramfs. It is deliberately written for small size, minimal
 entanglement, and portability, not speed. It is definitely a work in
 progress, and a lot of things are still missing.

libklibc-dbgsym: debug symbols for libklibc
libklibc-dev: kernel headers used during the build of klibc

 This package contains the set of kernel headers that were required to
 build klibc and the utilities that ship with it. This may or may
 not be a complete enough set to build other programs that link against
 klibc. If in doubt, use real kernel headers instead.