A heap overflow in glibc's gethostbyname() function. This is redhat's report: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0235 Upstream patch: https://sourceware.org/git/?p=glibc.git;a=commit;h=d5dd6189d506068ed11c8bfa1e1e9bffde04decd This seems to be a reported from qualys, here is "Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname" http://www.openwall.com/lists/oss-security/2015/01/27/9
From yocto mailing list: > On 28 January 2015 at 11:17, Damian, Alexandru > <alexandru.damian@intel.com> > wrote: > > Do we need to open a bug to track this ? > > Probably for the best to ensure it goes into all the branches we support. FYI, none of the branches we still officially support use (e)glibc older than 2.18, which is where the fix went in upstream; even dora that just went out of support has 2.18 as the default (2.17 is included though). Cheers, Paul Closing this issue now since this does not affects us!!