ifuncd-up

Hacker News에 대한 답변으로... 주황색 웹사이트hn의 장난꾼들이 나를 괴롭히고 있는 것 같군요. 아래에 몇 가지 엄선된 답변을 준비했지만, 먼저 도전장을 내겠습니다: ifunc 없이 이 공격 을 시연할 수 있는 첫 번째 사람에게 제 돈 500달러 를 보내겠습니다. 진심으로 흥미롭고, 깨달음을 얻기 위해 기꺼이 지불할 의향이 있습니다. 이 저장소를 포크하고 작동하는 PoC와 함께 PR을 제출하세요. 승리하면 개인적으로 우편 주소를 요청하겠습니다. 이제 답변입니다: 이건 잘못된 나무를 짖는 격이다. 이보게, 나는 잘못된...

CVE-2024-3094

CVE-2024-3094 — XZ 유틸리티 백도어 교육 및 승인된 보안 연구 목적으로만 사용하십시오. 취약점 설명 CVE-2024-3094는 XZ 유틸리티liblzma 5.6.0 및 5.6.1 버전에 삽입된 백도어로, 2024년 3월 29일 보안 연구원 Andres Freund에 의해 발견되었습니다. CVSS 점수는 10.0치명적으로 평가되었습니다. 이는 "Jia Tan"JiaT75으로 알려진 위협 행위자가 2년 이상에 걸쳐 수행한 공급망 공격 으로, 프로젝트 내에서 신뢰를 쌓아 공동 관리자 지위를 얻은 뒤 배포 tarball...

glibc security, bug fix, and enhancement update

An update is available for glibc. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librari...

AlmaLinux 10 : glibc (ALSA-2026:33092)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33092 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Bug Fixes and Enhancements: Backport Zen5 IFUNC changes to...

ALSA-2026:33092 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

glibc security update

2.28-251.0.2.2 - Forward port of Oracle patches over 2.28-251.2 Reviewed-by: Jose E. Marchesi Oracle history: May-23-2024 Cupertino Miranda - 2.28-251.0.2.1 - Forward port of Oracle patches over 2.28-251.1 Reviewed-by: Jose E. Marchesi May-22-2024 Cupertino Miranda - 2.28-251.0.2 - Forward port o...

glibc security update

2.28-164.0.1 - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for...

glibc security, bug fix, and enhancement update

2.28-164.0.1 - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for...

SUSE SLES12 Security Update : glibc (SUSE-SU-2021:1165-1)

This update for glibc fixes the following issues : CVE-2020-27618: Accept redundant shift sequences in IBM1364 bsc1178386 CVE-2020-29562: Fix incorrect UCS4 inner loop bounds bsc1179694 CVE-2020-29573: Harden printf against non-normal long double values bsc1179721 Check vector support in memmove...

glibc security, bug fix, and enhancement update

2.28-127.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

glibc security, bug fix, and enhancement update

2.17-222 - Restore internal GLIBCPRIVATE symbols for use during upgrades 1523119 2.17-221 - CVE-2018-1000001: Fix realpath buffer underflow 1534635 - i386: Fix unwinding for 32-bit C++ application 1529982 - Reduce thread and dynamic loader stack usage 1527904 - x86-64: Use XSAVE/XSAVEC more often...

glibc security, bug fix, and enhancement update

2.12-1.149 - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475, 2.12-1.148 - Switch gettimeofday from INTUSE to libchiddenproto 1099025. 2.12-1.147 - Fix stack overflow due to large AFINET6 requests...