[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#70581: PHP, glibc, and CVE-2024-2961
From: |
McSinyx |
Subject: |
bug#70581: PHP, glibc, and CVE-2024-2961 |
Date: |
Fri, 26 Apr 2024 15:44:50 +0900 |
Hello Guix,
Last week, an overflow bug in glibc's iconv(3) was discovered:
https://www.openwall.com/lists/oss-security/2024/04/17/9
It may enable remove code execution through PHP. Due to
the immutable nature of Guix, is it possible to hotpatch
this using graft, or do we need to rebuild to world?
https://rockylinux.org/news/glibc-vulnerability-april-2024/
Kind regards,
McSinyx
- bug#70581: PHP, glibc, and CVE-2024-2961,
McSinyx <=