From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/7289 Path: news.gmane.org!not-for-mail From: Rich Felker Newsgroups: gmane.linux.lib.musl.general Subject: musl 1.1.8 released Date: Mon, 30 Mar 2015 00:05:53 -0400 Message-ID: <20150330040553.GA25108@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1427688386 22959 80.91.229.3 (30 Mar 2015 04:06:26 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 30 Mar 2015 04:06:26 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-7302-gllmg-musl=m.gmane.org@lists.openwall.com Mon Mar 30 06:06:16 2015 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1YcQxq-0000YV-3f for gllmg-musl@m.gmane.org; Mon, 30 Mar 2015 06:06:14 +0200 Original-Received: (qmail 2003 invoked by uid 550); 30 Mar 2015 04:06:12 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 1927 invoked from network); 30 Mar 2015 04:06:05 -0000 Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) Original-Sender: Rich Felker Xref: news.gmane.org gmane.linux.lib.musl.general:7289 Archived-At: This release is a high-priority bug fix release correcting a stack-based buffer overflow in IPv6 literal parsing (CVE-2015-1817) affecting inet_pton and getaddrinfo and several other potentially-serious bugs in regular expression parsing. The omission of the max_align_t type for the new AArch64 port and a regression in the definition of FLT_ROUNDS have also been fixed. All users should upgrade or apply at least the following patches: http://git.musl-libc.org/cgit/musl/patch/?id=fc13acc3dcb5b1f215c007f583a63551f6a71363 http://git.musl-libc.org/cgit/musl/patch/?id=39dfd58417ef642307d90306e1c7e50aaec5a35c Download: http://www.musl-libc.org/releases/musl-1.1.8.tar.gz Signature: http://www.musl-libc.org/releases/musl-1.1.8.tar.gz.asc As always thanks goes out to musl's release sponsors: The Midipix Project: http://midipix.org/ Hurricane Labs: https://www.hurricanelabs.com/ Thank you for supporting musl via Patreon: https://www.patreon.com/musl A 1.0.5 release will soon follow with backports of these and other important bug fixes to the maintenance-only 1.0.x branch. Rich