[PATCH] CVE-2014-0172 Check for overflow before calling malloc to uncompress data.
Mark Wielaard
mjw at redhat.com
Wed Apr 9 21:26:20 UTC 2014
On Wed, 2014-04-09 at 21:47 +0200, Kurt Roeckx wrote:
> Is there a plan to make a new release?
I wasn't planning one for just this fix. The patch is small enough for
people to apply if they want it right now. But it is about time to push
for 0.159. I was planning to do the dwz/alt-debug changes that have been
talked about recently on the list first. That will take a bit of time
since it will add a new interface. So maybe in 2 weeks. Lets aim for the
weekend of 26/27 of April?
Cheers,
Mark
More information about the elfutils-devel
mailing list