home.social

Search

64 results for “gnufcl”

  1. 🚫 Copying your Python virtual environment folder? Think again.

    Simply copying the venv folder might seem convenient—but it often leads to broken setups and hidden issues.

    A new blog post explores why this method fails and how to migrate environments properly using reproducible workflows.

    📖 Read more: ka2in.github.io/mydocusaurus/b

  2. Many Thanks to the Team for reviewing my pull requests and merging my contributions into their official repository:

    1. Pushing output from into Codeberg Pages
    tinyurl.com/yckmpcvx

    2. with
    tinyurl.com/mwwk4vmk :opensource: :codeberg:

  3. Many Thanks to the #Codeberg Team for reviewing my pull requests and merging my contributions into their official repository:

    1. Pushing output from #SSGs into Codeberg Pages
    tinyurl.com/yckmpcvx

    2. #DocsAsCode with #sphinx
    tinyurl.com/mwwk4vmk :opensource: :codeberg:

  4. Buffer Overflow in GNU C Library Affects Older Versions

    Date: April 17, 2024

    CVE: CVE-2024-2961

    Vulnerability Type: Out-of-bounds Write

    CWE: [[CWE-787]]

    Sources: SecurityVulnerability.io, NVD Mitigation blog

    Issue Summary

    A critical buffer overflow vulnerability has been identified in the GNU C Library's iconv function when converting charsets to certain Chinese Extended encodings. This flaw occurs when converting strings to the ISO-2022-CN-EXT character set in versions prior to 2.40, potentially leading to application crashes or memory corruption.

    Technical Key Findings

    The vulnerability stems from improper boundary checks during character set conversion, allowing up to 4 bytes of overflow. This could enable attackers to execute arbitrary code or disrupt program operation by manipulating memory locations adjacent to the buffer.

    Vulnerable Products

    All versions of GNU C Library older than 2.40 are susceptible. (That's potentially 24 years of a buffer overflow presence in the glibc!)

    Impact Assessment

    The vulnerability poses a high risk, potentially affecting the confidentiality, integrity, and availability of systems utilizing the affected library versions. There is no evidence of active exploitation yet, but the severity of potential impacts warrants prompt attention.

    Patches or Workaround

    The GNU C Library has released patches for this vulnerability. Users are advised to update to version 2.40 or later. If you are unable to (or it's not available on your OS yet), you can mitigate this issue by disabling the affected charsets in gconv.

    Check if you are vulnerable

    // The first line of the linker version info should include the version of glibc (either as GLIBC or GNU libc).

    ldd --version

    // Check if the vulnerable encodings are enabled in iconv:

    iconv -l | grep -E 'CN-?EXT'

    If they are, you will see an output like:

    ISO-2022-CN-EXT//
    ISO2022CNEXT//

    Tags

    #GNUCLibrary #CVE-2024-2961 #BufferOverflow #SecurityPatch #ISO2022CNEXT #CVE20242961 #iconv #iconvglibc

  5. The #Maneage #reproducibility system for scientific research papers that starts from a minimal POSIX-like host OS does not yet build [1] the #GNUCLibrary = #GLibC . We have a draft implementation building glibc *after* #GCC [2]; and an alternative proposal arguing that building glibc *first* and gcc second would be more long-term sustainable [[1] comment18].

    Should GLibC be built first? Why (or why not)?

    [1] savannah.nongnu.org/task/?1539
    [2] gitlab.com/maneage/project-dev

  6. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  7. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  8. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  9. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  10. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  11. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  12. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  13. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  14. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  15. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  16. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  17. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  18. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  19. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  20. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  21. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  22. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  23. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  24. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  25. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  26. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  27. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  28. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  29. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments

  30. Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Benjamin Woodruff, Jeffrey Bencteux, John Muhl, Matheus Branco Borella, Sergey Alexandrovich Bugaev, and Wang Diancheng for assigning their copyright to the FSF! #Inetutils, #GDB, #GCC, #GNUCLib, #GNUHurd, #GNUMach, #GNUstep, #Emacs, and more: u.fsf.org/3ht #CopyrightAssignments