UbuntuUpdates.org

Package "libgc-dev"

Name: libgc-dev

Description:

conservative garbage collector for C (development)
Latest version: 1:7.4.2-7.3ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: main
Head package: libgc
Homepage: http://www.hboehm.info/gc/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgc-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libgc-dev" in Xenial

Repository Area Version
base main 1:7.4.2-7.3
updates main 1:7.4.2-7.3ubuntu0.1

Changelog

Version: 1:7.4.2-7.3ubuntu0.1 2017-02-15 19:06:57 UTC

  libgc (1:7.4.2-7.3ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflows leading to pointers to
    memory zones smaller than requested size.
    - d/p/CVE-2016-9427-1.patch: Fix calloc_explicitly_typed in case
      of lb*n overflow.
    - d/p/CVE-2016-9427-2.patch: Fix malloc routines to prevent size
      value wrap-around of lb*n overflow.
    - d/p/CVE-2016-9427-3.patch: Fix GC_collect_or_expand to prevent
      allocation size value wrap-around
    - d/p/CVE-2016-9427-test.patch: add test cases
    - CVE-2016-9427

 -- Steve Beattie <email address hidden> Mon, 13 Feb 2017 11:50:36 -0800
CVE-2016-9427 Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) an


About   -   Send Feedback to @ubuntu_updates