[Bug 1546309] Re: dns vulneravility

Marc Deslauriers marc.deslauriers at canonical.com
Tue Feb 16 22:30:59 UTC 2016


Updated have now been released:

http://www.ubuntu.com/usn/usn-2900-1/

** Changed in: glibc (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to glibc in Ubuntu.
https://bugs.launchpad.net/bugs/1546309

Title:
  dns vulneravility

Status in glibc package in Ubuntu:
  Fix Released

Bug description:
  Has someone seen this? https://sourceware.org/ml/libc-
  alpha/2016-02/msg00416.html

  An attacker could create a specially crafted DNS response which could
  cause libresolv to crash or, potentially, execute code with the
  permissions of the user running the library.

  Best,

  Dario

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/1546309/+subscriptions



More information about the foundations-bugs mailing list