Ubuntu
libgc package

libgc 1:7.2d-5ubuntu2.1 source package in Ubuntu

Changelog

libgc (1:7.2d-5ubuntu2.1) trusty-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows leading to pointers to
    memory zones smaller than requested size.
    - d/p/CVE-2016-9427-1.patch: Fix calloc_explicitly_typed in case
      of lb*n overflow.
    - d/p/CVE-2016-9427-2.patch: Fix malloc routines to prevent size
      value wrap-around of lb*n overflow.
    - d/p/CVE-2016-9427-3.patch: Fix GC_collect_or_expand to prevent
      allocation size value wrap-around
    - d/p/CVE-2016-9427-prereq.patch: add/use ROUNDUP_PAGESIZE_IF_MMAP
      macro needed for actual fixes.
    - d/p/CVE-2016-9427-test.patch: add test cases
    - CVE-2016-9427

 -- Steve Beattie <email address hidden>  Mon, 13 Feb 2017 16:50:59 -0800

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates main devel
Trusty security main devel

Downloads

File Size SHA-256 Checksum
libgc_7.2d.orig.tar.gz 1.2 MiB d9fe0ae8650d43746a48bfb394cab01a319f3809cee19f8ebd16aa985b511c5e
libgc_7.2d-5ubuntu2.1.debian.tar.gz 30.0 KiB dbfebb3749ec0df77c0af3d3627529070f8f8e0db09936c2a662bc29e4af6849
libgc_7.2d-5ubuntu2.1.dsc 2.0 KiB 5f49ff6118dc3f8c9d0a4875e90cba08dae627a5335c3e2a3aea4c61bfdbac6a

View changes file

Binary packages built by this source

libgc-dev: conservative garbage collector for C (development)

 Boehm-Demers-Weiser's GC is a garbage collecting storage allocator that is
 intended to be used as a plug-in replacement for C's malloc or C++'s new().
 .
 It allows you to allocate memory basically as you normally would without
 explicitly deallocating memory that is no longer useful. The collector
 automatically recycles memory when it determines that it can no longer be
 used.
 .
 This version of the collector is thread safe, has C++ support and uses the
 defaults for everything else. However, it does not work as a drop-in malloc(3)
 replacement.
 .
 This package is required to compile and link programs that use libgc1c2.

libgc1c2: conservative garbage collector for C and C++

 Boehm-Demers-Weiser's GC is a garbage collecting storage allocator that is
 intended to be used as a plug-in replacement for C's malloc or C++'s new().
 .
 It allows you to allocate memory basically as you normally would without
 explicitly deallocating memory that is no longer useful. The collector
 automatically recycles memory when it determines that it can no longer be
 used.
 .
 This version of the collector is thread safe, has C++ support and uses the
 defaults for everything else. However, it does not work as a drop-in malloc(3)
 replacement.

libgc1c2-dbgsym: debug symbols for package libgc1c2

 Boehm-Demers-Weiser's GC is a garbage collecting storage allocator that is
 intended to be used as a plug-in replacement for C's malloc or C++'s new().
 .
 It allows you to allocate memory basically as you normally would without
 explicitly deallocating memory that is no longer useful. The collector
 automatically recycles memory when it determines that it can no longer be
 used.
 .
 This version of the collector is thread safe, has C++ support and uses the
 defaults for everything else. However, it does not work as a drop-in malloc(3)
 replacement.