PSA: We are winding operations down to focus on GamingOnLinux. This site was a fun idea, but time is short and GamingOnLinux is more important.
Upgrading LFS -
sr_ls_boy commented on 18 April 2017 at 6:40 pm UTC

I currently use Linux from Scratch. My build is currently 7.10. Believe me, it was a lot of
work. Especially when you try to get your Xserver going. I'm happy skipping the new
release. But my glibc is at version version 2.24. That is not the latest.

What are the major security bugs that 2.25 fixes?

kazriko commented on 18 April 2017 at 8:27 pm UTC

It's somewhat hard to pick the security bugs out of the complete changelog, but here's the changelog if you want to try.
https://abi-laboratory.pro/tracker/changelog/glibc/2.25/log.html

Linux from Scratch, it's been about 15 years since I messed with that distro.

Actually, there was a changelog entry for security.

* On ARM EABI (32-bit), generating a backtrace for execution contexts which
have been created with makecontext could fail to terminate due to a
missing .cantunwind annotation. This has been observed to lead to a hang
(denial of service) in some Go applications compiled with gccgo. Reported
by Andreas Schwab. (CVE-2016-6323)

* The DNS stub resolver functions would crash due to a NULL pointer
dereference when processing a query with a valid DNS question type which
was used internally in the implementation. The stub resolver now uses a
question type which is outside the range of valid question type values.
(CVE-2015-5180)

Due to spam you need to Register and Login to comment.


Or login with...

Popular this week
View by Category
Contact
Latest Forum Posts