From 9e06efd3c87a2a37eefbfb42d176172064e51e71 Mon Sep 17 00:00:00 2001 From: TredwellGit Date: Tue, 9 Mar 2021 02:48:09 +0000 Subject: [PATCH] glibc: 2.32-37 -> 2.32-39 https://sourceware.org/bugzilla/show_bug.cgi?id=27462 https://nvd.nist.gov/vuln/detail/CVE-2021-27645 --- .../libraries/glibc/2.32-master.patch.gz | Bin 54979 -> 56968 bytes pkgs/development/libraries/glibc/common.nix | 4 ++-- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/glibc/2.32-master.patch.gz b/pkgs/development/libraries/glibc/2.32-master.patch.gz index 36aaf51cce9c8623821af1148262bb4b3121bc9e..bd99c36d741225496eaef384c4e7d2f339206569 100644 GIT binary patch delta 3320 zcmVI-P39BN@0m-0kh{?(OrxpUC_MhHyzJpHce%5RLzX z$jbj|^8YkV&S%e$VjolyMT%N4jMH@TRJf5Ze`u=VtCt4&LMuwdf6XXqhp%?2E9PlT zRQkiZ<&+c_rFTlN7&<|ZyLOL5GJ-G&yB%g(yY!0XG0JL-@_P&+=rwJ}I26AeSt4e; z1fA;H^>}%s|!$B`YssMAo#YDf?XOmV3m|RiIk(nLHAMb2* zJ)9bR!NEsK2gCy}e?*f#TcmN8S&nQ&V%tEa4{kfD3@0RJ(Ii=uv;(dY%r_}j{AM_o z;3};E637Ws6f$tye7NJXJ`sN;MSlQ3vf?%yWhw?Kze;>);!xtA4R z(xCs2Ws`m(Tl#NYHch6u^un^`dW*{x(?S4X@BEr+z2JA1e_xuI9hAoY2Tx+nA;17Z z-4&}StS_B^#MMaykPKL*IIEB+II1l7EmP`#KbZVz+Lq&6zHOQvAM&yTWb|_zA4xa! zdNar&?K!A7mVuDifJiF>Q8kPxV<(n;Av=*wS~%M-7CK-DM4maS4ag(|Mi|(AND;5C zZx39D8H>Bqe?3kM)RknENjTIj*CshBGZ7B$kS`_F6bhlYU_^VVd|8pqY0rKgZE^8# zAWr_lq@#vj@J{Vt|O$Vc4qttHi*K*gEe~jMS?5752>0=WBFJQC3(ctGx z)M`E=kH+^{hYYs>A)Sq+&#_8xi5Q9CtbBDR-~?$sd3NhhIY^!4I~|ss_mu0NWX*?0 z2V7^s=(vg+jZ()Pkc*GWI4aN`aV{fJMe(kt+lzw(9bfUHA?25bU?aO0_Ue`4o>YcW zv(LmFe>H03q;9smMlV54b@*JjYH**ahXxsnbJ)UH@%C1n&NyBwm2kmqOwcI~qHMZ# zCf$=F_I}=h_;oX^!F5Vqh>ol3ADg%*Le=RK;7aXIDuAtkT0(k6fCL?VfBmJR(g|k)hm>%sX4oCxt#>l%cC|y@ z(hv8k7WmkS?>5S--lKPbxSi^fQH6%JDQd4wluKa^1Sh#yw)Q|}XU~lTYZc_< zzyi_Cg=>vfnTU=}tb<4H1UzR)bar0!8`nN^Nc0TtU0uH~1?W6vy5v7Pt>~F)=*8;-d z#3uyc|1NGfC%JVM$FQF{hE*7&o(dr#0kiC9947p$gs)qxim#H`mT-3Wz=k4-U}#cu zrjlWh9wJK=a%|?2DL2k2Fwpr-O-%48e=oQ^@0dcNFg$b^9L02WXJrb9Ad*{e~=j9 z@!ccfGMKI@MvJNq#Oo3U(*Vx~DK)Q!Di#*o`!aFd+kN?*ItRT@UJyi>fzkT@{e3#n+ue>b;Dyj_PZ6kwFTy&c!i`SuQ0+F`5Hb=^)7_4*zc zbC0@a$MIaV+lK-IP#@Cj^=ARI#2rf9yjtj5*n%&S2O9&YhmR0+r_&M1FiN&E;xJ?> zMPtwuv7@>wt--aLZdd{vf1%s>*Ngc*{~BZWWc+5pHz0uIT<>_g!BqCEf30Zt2zOTo zUrr+QyC{}m0B-{UrSV$<1xsv)*X!*_b2OPp(H&3kjQ8;)OZYD=F`EYO+pT? z5LtqwLhmz{EaKD{?Vrbx4#{{K;)BBGe#vn;WL>xGd2Z0<9&Cu~LLi|TLJn=-4QDgg zbKRa(cAWz}I4bNp>bmM4e=9YY7rOn(;{CAQc07x*o^A12QO#A`oitpvuaLh}eL(sp z9fr1{TUn#N z4qQ)k(VzYNy!nqWf2P;tq4duaKc7Aswe5zZ>E-Bpc%D`C=>$%{+js1~Ycad;+1-eB zSY+B=%kD6@=bB#Ei~6Ca(_!R6Yxk5X;Qe+2%RkH`Rh7`_cbyD8Hj zQHng!;;UqNcku)Hg290C0%P^X&yDX>7hiqMPd0AnM(6vJ1>+1#!6VC%B*p5DqAgH; z{*j9QQIUJ}_k<{s@Cdw2MSl>k#9gIz3z;}`bq8NlK!Kckx7}~%%anlla5YvMwru*k zezdCS^I^M$f0R$U#J%iMoVZlfk|4un2n033L9%8kUVF)xTE(b0jR&+A-2{u|Mtwld zLrk;{Y&7SC{SYTn+AL3;UBrt-bw%xWQ2t*5j)e@q*B6NH;&Q2~*l#PGSMs@bWF zXlENNZ?i=0r0*t%9}2#^;7WU6oJf;WO4h7EChcy@lmj|Wp>8E=Pe|%W*-{0{sF0T& z&cEdedUc`zy#>j&G!{dDOAU3)YMZSj?CMO82^S;}uF|E52#{Qds7Li*U%VL%59-gS zE=Xatf3INEHxxi~TnS{reIN;&vM+$gqy$b)kOZVW!0A~{{O9|V!JFafm47)teRnY# z{Pm*JWigkb7iQDdSdYz?E&B7fQwu2TwHfiv`>-T z-9SA)5G46Q;|8c1;&H?=mrD&2%pf`#30|B?e;Sf-4DdwGD~)9kSd0x3=jOWpYbf*5 zC#Z)^!Fa$5=m<*wGS$pzeZsM#6k(K(?fN z{s7^r!|Fr_0x5C6>P(5NGN`n07;Qa@skD`GvzXr?1-MDWn+BGCqs}Rt5tMXEp4?`u zf0G_?^^pWqchv8s(QbnlAqN&@S@i~fB2c~~)n3m%OtlRS(#?2@Ud;LC(I;O=e?y=Bw9H-Yeqgh{f+$Q47It$8t z)26kcJM4NJ9Hrs%2$}y8y?{1HVp8{Pe-WkhrVWp10!NT0<=>javl6iW-VCf=aiK6> z9ywiRhkeWI1Yuy!#Koi658N>1K|cu0D6)11Nvh4#qRf##euZ?bPqtIH5!Q8>WqRIB z+(ulR*+I{8!ukNpr^hRXQ$F1mW9d5(^?fLQ*>*0^kxW2{2j3TX`|DRFQ$z?ZfAK6( z1{z>BO=7?J|H1n#YXw zOoMDZO?2rXPxLWL9hAFS<#&>te_J{0W$QYCH}~h0k<8mK<1vQfAgENIsdW0M+)QHJ z(u{QodTv;m!W)R1G=B?HreqPMB#0AK^)jV};Vf`XxTGvp6Noqxo^41=gc?n49m9bA zXm&g$*L!B{BVXRn(`lrzdLk52p`8P85G_S*QofjJd9WfeNtdQDz6TjjZooz+)6Ruw zq_ss%APLr20!1?-tv-1`X}VVPHRag-(|iU=WZs_s`2r+_sgMrd`{SwGQ8sGP5;M_V zjYkILyMr4{iHkRsMfw?S#g$H3OP5?Fy#vFo1F*Bve_c--NAUUn#l3~YIO5I@ZsiE6HK4i;xWYzCltd@{db?w-$?rJB;&u4SovQj z|EFcLUOj(a<>-nqC92;T=i%s5IMJ^^+?U|pO#^v9Wchav|bY{KsAnTP_jG&kmFS^q-4fz#q7`EHOeosdTdV5(XZo#jPxFTkAg+A56 z#rgU1*(4tyzsgU48vh1-){9@hj60NN$Tz?oZK%-i#bDg-qLMSc98K7P^YI3wi?c~w zE=$Z&QU~Hu7gET6f4Z!zrm`HzhG5#zrH^SlwKz`5%3_agP4*5P#Iwb^<{Q7K1PioE zdxiz%Kok{IOxnD?EXDmq5^WxgiMoNdz}G|*hD8LR-a5{VFXmn8sKMy)e`@SM%2lN_1O_0uyHphh ze)ZxDVJ8AW;=n4Ovnt9JK^511i;}v(4#%(ev$T_^dA7gb&9N>!Qbs+`=#fY>_lH4R zJm=`%xSD~*hC*5j2sbbygPnBc3&)8>(ZUa#d@{<1XJ9Am%{e>yIw_1zv49%%Dyt;k#X7BQhzlX{eCi-Kqp#A_;2&_=h4v{{;0bIDa}sJaDjPjuusHW zr!B%+?fMR39a0NQkC>3?qxWwroK7?fT%^oPe;%-b?AA+BbldIVL%kKjxH=gvEzGfl z?>3=z6~xC*il*5CZfjC!AnI(Q zj~?0z*k(plbzaIFS2=Pd^kS7=?VlHeJ2bBKvN#c_s6Jj}VOz`jUc2Ho{_5Of>hgGC zf6Xo>T>jXjdo(cYo4sfjM`ZBqCZ)CdX;FV6D`H*co1)H@f$$bS0fc`KyPLj-mkA@= z5=Lsk@Jk^gByv`^#bTnrEPmajF24$4Yw>Ita4ZEP2AZUuDQy^%holn0j%_kB#l*#i z0$qHN0|OoPgQlZ=nCor3p|&bD)Ybiwe?vR%U5H9rlQ4y1w|{2!k00o7tyCMGd!H#| z=mPVFp8z0KHp}%E+6UTlwbcOd`)Et%GXzJy#wa7Dh&Ab3O%(jPx~1KWqt}szb+f(V zW3+7fVs2CEH$+fEg2@Ey4<%$jFuqBNXT!uHG34XRJLF{yUGo_&zHOkou{f9k8f;Bc aZtkTjT`U$oEF7co;{OL>*Wf_eE&~9fG?g#_ diff --git a/pkgs/development/libraries/glibc/common.nix b/pkgs/development/libraries/glibc/common.nix index 8bf78300739e..b3862cc5c0bc 100644 --- a/pkgs/development/libraries/glibc/common.nix +++ b/pkgs/development/libraries/glibc/common.nix @@ -42,7 +42,7 @@ let version = "2.32"; - patchSuffix = "-37"; + patchSuffix = "-39"; sha256 = "0di848ibffrnwq7g2dvgqrnn4xqhj3h96csn69q4da51ymafl9qn"; in @@ -63,7 +63,7 @@ stdenv.mkDerivation ({ and using git or something would complicate bootstrapping. Fortunately it's not too big. $ git checkout origin/release/2.32/master; git describe - glibc-2.32-37-g760e1d2878 + glibc-2.32-39-g44b3959329 $ git show --reverse glibc-2.32.. | gzip -n -9 --rsyncable - > 2.32-master.patch.gz */ ./2.32-master.patch.gz