Bug 923352 (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780, GLIBC-SA-2024-0001, GLIBC-SA-2024-0002, GLIBC-SA-2024-0003) – <sys-libs/glibc-2.38-r10: Multiple vulnerabilities

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Sam James 2024-01-30 18:07:53 UTC]

Patches for 2.38 (given I suspect some may try apply them immediately, linking these rather than the master ones):
* https://sourceware.org/git?p=glibc.git;a=commit;h=6bd0e4efcc78f3c0115e5ea9739a1642807450da
* https://sourceware.org/git?p=glibc.git;a=commit;h=7e5a0c286da33159d47d0122007aac016f3e02cd
* https://sourceware.org/git?p=glibc.git;a=commit;h=ddf542da94caf97ff43cc2875c88749880b7259b

[Comment 1 Sam James 2024-01-30 18:39:06 UTC]

https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt

[Comment 2 Sam James 2024-01-30 19:19:41 UTC]

commit 3e7a0255894955fd1cb38809c95e33b3e70f1d43 (HEAD -> master, origin/master, origin/HEAD)
Author: Andreas K. Hüttel <[e-mail]>
Date:   Tue Jan 30 20:15:24 2024 +0100

    sys-libs/glibc: Add 2.38 patchlevel 10 (no keywords)

    Signed-off-by: Andreas K. Hüttel <[e-mail]>

[Comment 3 Sam James 2024-01-31 09:17:41 UTC]

commit e4d5c61772ca806cff2ec2f90a6a48fad376810b
Author: Andreas K. Hüttel <[e-mail]>
Date:   Wed Jan 31 02:35:33 2024 +0100

    sys-libs/glibc: keyword 2.38-r10

    Signed-off-by: Andreas K. Hüttel <[e-mail]>

[Comment 4 Larry the Git Cow 2024-02-02 03:03:27 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=1b3d5c5b8102daf085b27905a139c5e8c4c7d591

commit 1b3d5c5b8102daf085b27905a139c5e8c4c7d591
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2024-02-02 03:02:44 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-02-02 03:03:23 +0000

    [ GLSA 202402-01 ] glibc: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/918412
    Bug: https://bugs.gentoo.org/923352
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Sam James <[e-mail]>

 glsa-202402-01.xml | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)

[Comment 5 Larry the Git Cow 2024-04-20 07:35:32 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8ce687dbcbca2d023df95d78ceefabe3d592145a

commit 8ce687dbcbca2d023df95d78ceefabe3d592145a
Author:     Sam James <[e-mail]>
AuthorDate: 2024-04-20 07:35:01 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-04-20 07:35:01 +0000

    profiles: mask <sys-libs/glibc-2.38-r10
    
    Bug: https://bugs.gentoo.org/923352
    Signed-off-by: Sam James <[e-mail]>

 profiles/package.mask | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)