From 9e06efd3c87a2a37eefbfb42d176172064e51e71 Mon Sep 17 00:00:00 2001 From: TredwellGit Date: Tue, 9 Mar 2021 02:48:09 +0000 Subject: [PATCH] glibc: 2.32-37 -> 2.32-39 https://sourceware.org/bugzilla/show_bug.cgi?id=27462 https://nvd.nist.gov/vuln/detail/CVE-2021-27645 --- .../libraries/glibc/2.32-master.patch.gz | Bin 54979 -> 56968 bytes pkgs/development/libraries/glibc/common.nix | 4 ++-- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/glibc/2.32-master.patch.gz b/pkgs/development/libraries/glibc/2.32-master.patch.gz index 36aaf51cce9c8623821af1148262bb4b3121bc9e..bd99c36d741225496eaef384c4e7d2f339206569 100644 GIT binary patch delta 3320 zcmX@Smbqgu^M=hA>$8h*AN#oZleWQ2_D(U+hmK7Po>)x$x?$#tCGAUYE%9ZyVsP)| z^DJNp+9b7m|K9Dp%iGmcO+C}C=4KsJmfT@|=k43K@7{jiKmWuZwzdLKjroDU{tNW} zZ$5GAf99wECcfv=&-W+EhX}fMMd|lkF8LI)W1@b2#;S*_r?dTV()K!1e^w*2eSO(V z?Pr-jA-@jqdOAf!Y-zdIdI>AX{@rE$&PGiJ9J^)HB6ol3dTMwotNT+mkKzl{+~XD^ z`(+}P(sr}VeRcC|MUCN{Uz5AF|KEN2guOA{_VH8i!;bpSs~C#+9d+4%J$-T*`;3^t z(-UXPo{)c^Q(`+us^;K9cTe^s%=+~%lWn7y6i$om%W+P+?XZ+T&w3?~x=PwbmB`6k znAZuOG1mxxIxBkdgPv!|c5lbyrPf)j5rSn}k_*I?#j6WH- zrag|{mpe;V{?jJrlrP27@}B0OtBg-5zO`IoKCN-WjRp^Gra;pkjb!y{HHy{~eWEOG z>xo$Gnli=H;)>37HA_unLB6*W z^i{8ja4p=P;8MM^CUWAL%=2}!xrHC|6#V|(KKS&?{JuX2133EaUt8^W@QPYrBX7UC zZNI_gjs-XVzgcL`x$7R|66ss_-=>Q;ZCL$zUEY&N8<*E{^=BSA{qe=zdOL~uIlk#XG?#XEX<&vuzCN*2hY8)WZ5b8ANwBB&a<6Cac=LD^BcYL zJ0&_Ftf?tgf54JyTUqwn-_m356KmONbG}b`Jul^KyBm8<`hgcax}}Bw?muav zbwRdJPdUK#w^vgi&I@S^+z1IlD^L?oL+vR(G%QN2&3e zgQZ@v9TSbF`EB--iIe@h`r?bfPj7~l9BO9ye>QHP+}!^z@@wTBOEzD&mT8ioy+hsU z>Pw*qUT^)h8rC*MIaRqdu*lZd|6RK15@$MN`;>x}X*Xo=tt~ftS+>>r?j`>3NA}1_ z_ly0w(fQu&)arYS%NusgeKjetwQZ|r)_R{Q-if>{>N~@?eRD`nKi|uoE&Al~0j7&* zTC;mYXLj`Yu4#6E$6}N2UQ!nKMf$p3k;fOFx3RJN^;zGXNX*skQf@f(ql~pP*Sr4I z_bpy=z3Sh^Vy3I7FTLy9e!7nTbw+jOqlh-$Fj^;l9s=e};;L;A?H~ELJTxU9T z|A;!vga3MY=IT33MUQWoZ`l?qv3MSrq5|XQH|a8Je^$4wk6zuie$tI;1!dn4v?+BY zWCRs0o0K>~PRU!ODCgNkP4jaa1{Z$%`1*X%sMkNf_*K}v{M$FLhV5<(tNb6wTDG%% z_kt4{^gQs(?9R@o1*!l=}~tT1IMCGu{rY&*1ANW+O{kC!};p- zF8i1sdYC7qx`=N)Q>(qXY5gPiJ!eCHSS=`s%jwtbnWhr|A@|YOCXN6PMWfEo>>{61 zj{jLElXN(xeuBhDIl9_sDA@w#y9X*)&bpw`z%r-TrMG ziI(o#cDwX<)AM5UFKKD#Uw=OE=Brih?&mWE*j}*tg=K&KQ~h{OGqvd;O)QhMa zP5KkrrJ0wv_Y0IPzbtstz-yb)BZCx8*W?Q#8yD}=T6=Koth@*&>H3AYe_ZeWY5QL) z`FqNrv;*b}4Nqd;SL`|%@@;kf+Kg`;<>74ceo9|{w+53mSj$z!gPdCdm_xL*TtrLiBTI}@Rc$&_mD-v(#AD_T?vO@Av z^Py*TCkri8Vzq~jwJj0NSsm9Z}_A*<;yL5Cr`dYyQ{Arym5|>T)dAj#=qp^ z{J($p{Os4SUv~ZR!Y}8A?dRJ`ZhhOf_~p|VRTc9>zr1Ae+kd0Z{|Sa#iG93| zyEQM%2X@(9c(gjDviu|S&!&S7ADNQB9zEatK3F`y_Kd$--gCF-zbCUk=J7hHe0qY) z(O12TbOUPtP3-y?II;T6_ZE$bA2{~-xYi4-I}*FJlzXN{aVdLzutVdVs_l34pPio4 z@T0&qOln)suU&OpR=xO~xVxo(ivO-7d*1}k*%5MOlEUFs4i?jcj+@dnC!s+n_b>6d9T(c&$Vy&1F!1%IUbXPysoWrPMPoP4ptoCdcooK&*3gp^SJy??AkM+|b&JrHq%{9MPvv!PCLiE^e%tLI!^4$_U%9X|X%_B#<K32VoGmz|#B<)AwAJ;K)cCm!Wmtw(H^4jYvSQra9P9#4zjdsWtKgx6c0jF%!+}<*_>0Ju?A1%8=*_YMl z%$W9=b$X~UROj8s3&k?aubVH9j4!{V_UN<~_oqx$5ktMQ0}3)wPza@!uA_UGQ4zjMS=oK6l(= zX5Vx?Uv%gf!>Q%RwcCR2?usS9v=;bUt5J8eOz-?eABPV1`{EV9Ux%v(yKv~$f7A(J zlS(l4P1^tC|H0onj~80(`F*=!KGVz1TO8Sgvb7o3R+;T;Ljmv7s zGM*a~_5`#BrRSW;KGnRKx%_4q6Vv3kRm^#BnS!*u`IR@9OkAimJMa7+UDw>8eKRsEHz*l;PG4rQ zk6qF)?|_@y<#Vm+OSZcDC~#g2XL2=GT5DJ7khv@Dv+2_te=patd8XW(_wOf@O3TU# zeD{7oUU@svEbF3>@x|C)ceW?Ho27j^yUnM#{*uf+I@K@Id*0=!4^y1x`OLiN+b;9^ Vx$(9Js~i8BBn^#?Cps}R008YpW5@si delta 1316 zcmeC!%Y1k(^M=hA>tp?;-9P;NcXV&-VT(uS`0}1|tTbJ)i+9H%H?Ju!>c49^`*_-G z$~bag=D)9b^X_f>28D^MR_$RZ-(76Id9(3m_#(*S;(Gf#(;wXRWv*Lj8-MUz#@9U-^*lSZ#Y&F` z{krVCJK0iaP5Gtu5hZDRKPkMP8qu?0hN%9o%O<=(MRO&#-9A+3@6J(G9jTsoaDCqn zrL^K!yQ>F}{`~pzri#4${!{+-Qvca%u64)n>#?4adcypGOzw&c?~f+jdADei@m?9< z8;zeovMui3>=~oyeI_u7{ZXKJ(22VGU29e^+azt zb7b?;UC*TVFK6N2;#J+o`ouv*G}!0Xp1nFp|GGStwf>bpLz#Q`&C16~0^e3YXt!lz z{aw>CCH3r7Gk^ElXA-_GuxHHurf;&sUMN?tr*l{1wgcB)gxg$M7TmKs*Q5U|_T`F$ zFFw>~y|F(Py3~Y)O<~9G5K*?euaCGB)tMX~9nhM;S?iRjqv-Y8?n%4$^BrIRee;&d z%PY6-zkhb4o^_C$?fDlIJ&eD%J4V?&e{pZetj42lPElMO<_1d5b4#9bAMbRzc!+=Y z(;(R!j+4_J^O*TgCJ3;l%X=SL{o;1+%09`%_g)(Fa@XITDl;W=YDM}^u9KXzJ1aF3 z;<;9NiY>}HXnB6=nN(H7(BA%(C_w z+y6yg$_g9*zY8?uTzXG&sqobI-~8kpIZF9TAB*&R{FCUHe01{X3ln>(dGh>fhc8AZ zZSDTIW%stDFZX`kTyLef{OesgA-RmtIcrbE$4w0X+*e|Y{&P+ z-j~L8Sp^Fs9#8wU>sC$6)yUBBOR707y)&)U1SBtiZ7un&_Wd5a#C>xo{`JK#ovbt` zuQGbQ=Hb(zdQ+*tbw)EB)T2CpuThLgUv%&vJ^m5%pk#B$T zCCUbId-czl@M7`ze62ZtCR{N~&Un|$ZD@RR%{#E<_S*-}dqofKu#(i(J+ra-y_(rI z!Trw1-tN+v%-#EL*@wKDJEk4t<(hLfT{3(A$yaZrWR8d)IquiB>?UJgc2K&)tDHss za<{l{q`8HZ#+{N5w=7cmk~B5;?R@cOYm;?fH(3a-SYa2JoEUxjXWZ^brvF~uNqY6E zBBB1Qo@&g$8;h$=4BpJ%n<3_&^5Koz(yhNT1M3yFlVYFFUUY71;|DQ2#+G{i-Lv<# zP3Kg;E##JU;DfiKl1fq7wxdal_UqK$U81+2D>3_HjzobDs}kF+C37`%B__2m5jxnH zYh-lv$k8^Y*qRB<%(7pbmo2WD@j7?+!fjfnSFZk@Snq88HnzhnYO+CV()Rkaul@2b z^4Eq)&#j)Xnf!w3bL)Htg%GpTU&U^*-zwUAmEpth4DV;gEbe=cX(%u4Fnt;AEAnU8 zuBCT-7GIy(TDp1fqvS0)Ka=u;Uz)oFI5nMQdCjkyVsEg|vornh5kD>kk}m>M=6_0HQRNFaQ7m diff --git a/pkgs/development/libraries/glibc/common.nix b/pkgs/development/libraries/glibc/common.nix index 8bf78300739..b3862cc5c0b 100644 --- a/pkgs/development/libraries/glibc/common.nix +++ b/pkgs/development/libraries/glibc/common.nix @@ -42,7 +42,7 @@ let version = "2.32"; - patchSuffix = "-37"; + patchSuffix = "-39"; sha256 = "0di848ibffrnwq7g2dvgqrnn4xqhj3h96csn69q4da51ymafl9qn"; in @@ -63,7 +63,7 @@ stdenv.mkDerivation ({ and using git or something would complicate bootstrapping. Fortunately it's not too big. $ git checkout origin/release/2.32/master; git describe - glibc-2.32-37-g760e1d2878 + glibc-2.32-39-g44b3959329 $ git show --reverse glibc-2.32.. | gzip -n -9 --rsyncable - > 2.32-master.patch.gz */ ./2.32-master.patch.gz