Skip to content
This repository was archived by the owner on Mar 16, 2022. It is now read-only.

1.181.0

Choose a tag to compare

View all tags
@cf-buildpacks-eng cf-buildpacks-eng released this 17 Jan 15:52
· 110 commits to master since this release
1.181.0
237c4ac

Notably, this release addresses:

USN-3534-1 Ubuntu Security Notice USN-3534-1:

  • CVE-2017-1000408: memory leak
  • CVE-2017-1000409: buffer overflow
  • CVE-2017-15670: The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
  • CVE-2017-15804: The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
  • CVE-2017-16997: elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
  • CVE-2017-17426: The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check.
  • CVE-2018-1000001: [Libc Realpath Buffer Underflow]

USN-3535-1 Ubuntu Security Notice USN-3535-1:

-ii  bind9-host        1:9.9.5.dfsg-3ubuntu0.16 amd64  Version of 'host' bundled with BIND 9.X
+ii  bind9-host        1:9.9.5.dfsg-3ubuntu0.17 amd64  Version of 'host' bundled with BIND 9.X
-ii  dnsutils          1:9.9.5.dfsg-3ubuntu0.16 amd64  Clients provided with BIND
+ii  dnsutils          1:9.9.5.dfsg-3ubuntu0.17 amd64  Clients provided with BIND
-ii  iproute2          3.12.0-2ubuntu1.1        amd64  networking and traffic control tools
+ii  iproute2          3.12.0-2ubuntu1.2        amd64  networking and traffic control tools
-ii  libbind9-90       1:9.9.5.dfsg-3ubuntu0.16 amd64  BIND9 Shared Library used by BIND
+ii  libbind9-90       1:9.9.5.dfsg-3ubuntu0.17 amd64  BIND9 Shared Library used by BIND
-ii  libc-bin          2.19-0ubuntu6.13         amd64  Embedded GNU C Library: Binaries
-ii  libc-dev-bin      2.19-0ubuntu6.13         amd64  Embedded GNU C Library: Development binaries
-ii  libc6:amd64       2.19-0ubuntu6.13         amd64  Embedded GNU C Library: Shared libraries
-ii  libc6-dev:amd64   2.19-0ubuntu6.13         amd64  Embedded GNU C Library: Development Libraries and Header Files
+ii  libc-bin          2.19-0ubuntu6.14         amd64  Embedded GNU C Library: Binaries
+ii  libc-dev-bin      2.19-0ubuntu6.14         amd64  Embedded GNU C Library: Development binaries
+ii  libc6:amd64       2.19-0ubuntu6.14         amd64  Embedded GNU C Library: Shared libraries
+ii  libc6-dev:amd64   2.19-0ubuntu6.14         amd64  Embedded GNU C Library: Development Libraries and Header Files
-ii  libdns100         1:9.9.5.dfsg-3ubuntu0.16 amd64  DNS Shared Library used by BIND
+ii  libdns100         1:9.9.5.dfsg-3ubuntu0.17 amd64  DNS Shared Library used by BIND
-ii  libisc95          1:9.9.5.dfsg-3ubuntu0.16 amd64  ISC Shared Library used by BIND
-ii  libisccc90        1:9.9.5.dfsg-3ubuntu0.16 amd64  Command Channel Library used by BIND
-ii  libisccfg90       1:9.9.5.dfsg-3ubuntu0.16 amd64  Config File Handling Library used by BIND
+ii  libisc95          1:9.9.5.dfsg-3ubuntu0.17 amd64  ISC Shared Library used by BIND
+ii  libisccc90        1:9.9.5.dfsg-3ubuntu0.17 amd64  Command Channel Library used by BIND
+ii  libisccfg90       1:9.9.5.dfsg-3ubuntu0.17 amd64  Config File Handling Library used by BIND
-ii  liblwres90        1:9.9.5.dfsg-3ubuntu0.16 amd64  Lightweight Resolver Library used by BIND
+ii  liblwres90        1:9.9.5.dfsg-3ubuntu0.17 amd64  Lightweight Resolver Library used by BIND
-ii  multiarch-support 2.19-0ubuntu6.13         amd64  Transitional package to ensure multiarch compatibility
+ii  multiarch-support 2.19-0ubuntu6.14         amd64  Transitional package to ensure multiarch compatibility
Assets 3
Loading