[PATCH] CVE-2014-0172 Check for overflow before calling malloc to uncompress data.

Mark Wielaard mjw at redhat.com
Wed Apr 9 21:26:20 UTC 2014


On Wed, 2014-04-09 at 21:47 +0200, Kurt Roeckx wrote:
> Is there a plan to make a new release?

I wasn't planning one for just this fix. The patch is small enough for
people to apply if they want it right now. But it is about time to push
for 0.159. I was planning to do the dwz/alt-debug changes that have been
talked about recently on the list first. That will take a bit of time
since it will add a new interface. So maybe in 2 weeks. Lets aim for the
weekend of 26/27 of April? 

Cheers,

Mark



More information about the elfutils-devel mailing list