Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#79845 - [glibc] Local Privilege Escalation in the glibc's ld.so CVE-2023-4911

Attached to Project: Arch Linux
Opened by trclst (trclst) - Tuesday, 03 October 2023, 20:38 GMT
Last edited by Antonio Rojas (arojas) - Tuesday, 03 October 2023, 20:45 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Security Advisory:
20231003175031.GA16924@localhost.localdomain/"> https://lwn.net/ml/oss-security/20231003175031.GA16924@localhost.localdomain/

Patches:
20231003170811.64957-1-siddhesh@sourceware.org/"> https://lwn.net/ml/libc-alpha/20231003170811.64957-1-siddhesh@sourceware.org/


On the website of glibc is nothing to read about it and the next version is announced only for the 1st Feburar 2024.
I remember something similar where zlib didn't get a fix for months because we are hoping for a new version. https://bugs.archlinux.org/task/75521
This is also the reason why I created this bug report.
This task depends upon

Closed by  Antonio Rojas (arojas)
Tuesday, 03 October 2023, 20:45 GMT
Reason for closing:  Fixed
Comment by trclst (trclst) - Tuesday, 03 October 2023, 20:42 GMT
Sorry for the weird formatting links but I think the bug tracker can't handle it.
I have no explanation.

I have the links from https://lwn.net/Articles/946381/
Comment by Robin Candau (Antiz) - Tuesday, 03 October 2023, 20:45 GMT
Already fixed and pushed to repo: https://gitlab.archlinux.org/archlinux/packaging/packages/glibc/-/commit/44132f9994aa3dc72cb82204fbee957675b8802e

Loading...