Bugzilla Bug 17846

From the CERT advisory:

Overview:
There is an integer overflow in the xdrmem_getbytes() function distributed as
part of the Sun
Microsystems XDR library. This overflow can cause remotely exploitable buffer
overflows in multiple
applications, leading to the execution of arbitrary code. Although the library
was originally distributed by 
Sun Microsystems, multiple vendors have included the vulnerable code in their
own implementations. 

GNU glibc:
Version 2.3.1 of the GNU C Library is vulnerable. Earlier versions are also
vulnerable. The following
patches have been installed into the CVS sources, and should appear in the next
version of the GNU 
C Library. These patches are also available from the following URLs:

http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sunrpc/rpc/xdr.h.diff?r1=1.26&r2=1.27&cvsroot=glibc
http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sunrpc/xdr_mem.c.diff?r1=1.13&r2=1.15&cvsroot=glibc
http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sunrpc/xdr_rec.c.diff?r1=1.26&r2=1.27&cvsroot=glibc
http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sunrpc/xdr_sizeof.c.diff?r1=1.5&r2=1.6&cvsroot=glibc
http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sunrpc/xdr_stdio.c.diff?r1=1.15&r2=1.16&cvsroot=glibc

Martin, I've added glibc-2.3.1-r4 (copied from 2.3.1-r3) with the patches to
the tree 
but I want your approval before I unmask it. Could you take a look and tell me
what 
you think? 

glsa sent