glibc/glibc.changes

9748 lines
352 KiB
Plaintext

-------------------------------------------------------------------
Wed Oct 9 07:42:01 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)
-------------------------------------------------------------------
Wed Sep 18 14:45:44 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Use nss-systemd by default also in SLE (bsc#1230638)
-------------------------------------------------------------------
Thu Jul 18 08:31:37 UTC 2024 - Andreas Schwab <schwab@suse.de>
- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228041, BZ
#31934)
-------------------------------------------------------------------
Wed May 29 10:41:20 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Fix typo in last change
-------------------------------------------------------------------
Thu May 23 11:31:34 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Also include stat64 in the 32-bit libc_nonshared.a workaround
(bsc#1221482)
-------------------------------------------------------------------
Wed May 8 14:06:39 UTC 2024 - Giuliano Belinassi <giuliano.belinassi@suse.com>
- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
for _start routine (bsc#1221940)
-------------------------------------------------------------------
Tue May 7 10:32:54 UTC 2024 - Andreas Schwab <schwab@suse.de>
- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
(bsc#1221482)
-------------------------------------------------------------------
Wed May 1 23:50:51 UTC 2024 - Giuliano Belinassi <giuliano.belinassi@suse.com>
- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
nscd: Stack-based buffer overflow in netgroup cache
(CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
nscd: Avoid null pointer crashes after notfound response
(CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
nscd: Do not send missing not-found response in addgetnetgrentX
(CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
CVE-2024-33602, bsc#1223425, BZ #31680)
-------------------------------------------------------------------
Thu Apr 18 08:22:48 UTC 2024 - Andreas Schwab <schwab@suse.de>
- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
writes when writing escape sequence (CVE-2024-2961, bsc#1222992)
-------------------------------------------------------------------
Wed Apr 3 15:54:02 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
(bsc#1221482)
-------------------------------------------------------------------
Thu Mar 21 13:22:51 UTC 2024 - Andreas Schwab <schwab@suse.de>
- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
#30945)
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
sched_getcpu (BZ #31479)
-------------------------------------------------------------------
Mon Mar 11 10:06:42 UTC 2024 - Andreas Schwab <schwab@suse.de>
- duplocale-global-locale.patch: duplocale: protect use of global locale
(bsc#1220441, BZ #23970)
-------------------------------------------------------------------
Mon Feb 26 12:48:48 UTC 2024 - Andreas Schwab <schwab@suse.de>
- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
#31402)
-------------------------------------------------------------------
Wed Feb 7 09:08:50 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Add libnsl1 to baselibs.conf (bsc#1219640)
-------------------------------------------------------------------
Wed Jan 31 09:25:16 UTC 2024 - Andreas Schwab <schwab@suse.de>
- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
__vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
(bsc#1218866)
-------------------------------------------------------------------
Mon Jan 29 10:06:28 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Change minimum GCC to 13
-------------------------------------------------------------------
Tue Jan 23 16:15:56 UTC 2024 - Andreas Schwab <schwab@suse.de>
- Split off libnsl.so.1 into a separate package
-------------------------------------------------------------------
Tue Jan 2 11:30:46 UTC 2024 - Andreas Schwab <schwab@suse.de>
- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
(BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
_IO_wdo_write (BZ #31183)
-------------------------------------------------------------------
Tue Dec 5 11:52:03 UTC 2023 - Andreas Schwab <schwab@suse.de>
- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
(bsc#1217445, BZ #31113)
-------------------------------------------------------------------
Mon Dec 4 15:16:38 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Remove systemd from shadow and gshadow lookups (bsc#1217220)
-------------------------------------------------------------------
Mon Oct 23 09:52:12 UTC 2023 - Andreas Schwab <schwab@suse.de>
- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)
-------------------------------------------------------------------
Wed Oct 18 11:54:04 UTC 2023 - Andreas Schwab <schwab@suse.de>
- dtors-reverse-ctor-order.patch: Remove, has been reverted
-------------------------------------------------------------------
Tue Oct 17 12:00:11 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Avoid use of SSE in i586 build
-------------------------------------------------------------------
Mon Oct 9 08:50:18 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Add systemd also to gshadow lookups (jsc#PED-5188)
- For SLE continue to use nsswitch.conf without systemd
-------------------------------------------------------------------
Wed Oct 4 09:31:09 UTC 2023 - Andreas Schwab <schwab@suse.de>
- setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in
setxid binaries
- tunables-string-parsing.patch: tunables: Terminate if end of input is
reached (CVE-2023-4911, bsc#1215501)
-------------------------------------------------------------------
Wed Sep 27 14:08:48 UTC 2023 - Andreas Schwab <schwab@suse.de>
- fstat-implementation.patch: io: Do not implement fstat with fstatat
-------------------------------------------------------------------
Mon Sep 25 07:58:08 UTC 2023 - Andreas Schwab <schwab@suse.de>
- getaddrinfo-memory-leak.patch: Fix leak in getaddrinfo introduced by the
fix for CVE-2023-4806 (CVE-2023-5156, bsc#1215714, BZ #30884)
-------------------------------------------------------------------
Mon Sep 18 08:48:59 UTC 2023 - Andreas Schwab <schwab@suse.de>
- getcanonname-use-after-free.patch: getaddrinfo: Fix use after free in
getcanonname (CVE-2023-4806, bsc#1215281, BZ #30843)
- Do not build any cross packages in SLES
-------------------------------------------------------------------
Wed Sep 13 12:25:56 UTC 2023 - Andreas Schwab <schwab@suse.de>
- no-aaaa-read-overflow.patch: Stack read overflow with large TCP
responses in no-aaaa mode (CVE-2023-4527, bsc#1215280, BZ #30842)
-------------------------------------------------------------------
Tue Sep 12 12:52:55 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Add systemd to passwd, group and shadow lookups (jsc#PED-5188)
-------------------------------------------------------------------
Mon Sep 11 09:20:07 UTC 2023 - Andreas Schwab <schwab@suse.de>
- ppc64-flock-fob64.patch: io: Fix record locking contants for powerpc64
with __USE_FILE_OFFSET64 (BZ #30804)
- libio-io-vtables.patch: libio: Fix oversized __io_vtables
- call-init-proxy-objects.patch: elf: Do not run constructors for proxy
objects
- dtors-reverse-ctor-order.patch: elf: Always call destructors in reverse
constructor order (BZ #30785)
-------------------------------------------------------------------
Tue Sep 5 11:13:13 UTC 2023 - Andreas Schwab <schwab@suse.de>
- intl-c-utf-8-like-c-locale.patch: intl: Treat C.UTF-8 locale like C
locale (BZ #16621)
- glibc-disable-gettext-for-c-utf8.patch: Removed
-------------------------------------------------------------------
Mon Aug 28 11:56:10 UTC 2023 - Richard Biener <rguenther@suse.com>
- Add cross-ppc64le package
-------------------------------------------------------------------
Tue Aug 22 15:46:51 UTC 2023 - Andreas Schwab <schwab@suse.de>
- posix-memalign-fragmentation.patch: malloc: Enable merging of remainders
in memalign, remove bin scanning from memalign (BZ #30723)
- Limit build counter sync to i686 flavor, to reduce needs for rebuilds
-------------------------------------------------------------------
Tue Aug 22 11:24:16 UTC 2023 - Richard Biener <rguenther@suse.com>
- Add cross-s390x package (bsc#1214460)
-------------------------------------------------------------------
Mon Aug 14 08:12:28 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Require that elf/check-localplt does not fail
- glibc-2.3.90-langpackdir.diff: add hidden alias for __strcpy_chk
- cache-amd-legacy.patch: x86: Fix for cache computation on AMD legacy
cpus
- cache-intel-shared.patch: x86: Fix incorrect scope of setting
`shared_per_thread` (BZ# 30745)
-------------------------------------------------------------------
Wed Aug 2 10:50:32 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.38
* When C2X features are enabled and the base argument is 0 or 2, the
following functions support binary integers prefixed by 0b or 0B as
input
* PRIb*, PRIB* and SCNb* macros from C2X have been added to
<inttypes.h>.
* printf-family functions now support the wN format length modifiers for
arguments of type intN_t, int_leastN_t, uintN_t or uint_leastN_t
and the wfN format
length modifiers for arguments of type int_fastN_t or uint_fastN_t, as
specified in draft ISO C2X
* A new tunable, glibc.pthread.stack_hugetlb, can be used to disable
Transparent Huge Pages (THP) in stack allocation at pthread_create
* Vector math library libmvec support has been added to AArch64
* The strlcpy and strlcat functions have been added
* CVE-2023-25139: When the printf family of functions is called with a
format specifier that uses an <apostrophe> (enable grouping) and a
minimum width specifier, the resulting output could be larger than
reasonably expected by a caller that computed a tight bound on the
buffer size
- Enable build with _FORTIFY_SOURCE
- glibc-2.3.90-langpackdir.diff: avoid reference to __strcpy_chk
- iconv-error-verbosity.patch: iconv: restore verbosity with unrecognized
encoding names (BZ #30694)
- printf-grouping.patch, strftime-time64.patch,
getlogin-no-loginuid.patch, fix-locking-in-_IO_cleanup.patch,
gshadow-erange-rhandling.patch, system-sigchld-block.patch,
gmon-buffer-alloc.patch, check-pf-cancel-handler.patch,
powerpc64-fcntl-lock.patch, realloc-limit-chunk-reuse.patch,
dl-find-object-return.patch; Removed
- bsc#1211828
- bsc#1212819
-------------------------------------------------------------------
Mon Jul 10 08:46:18 UTC 2023 - Andreas Schwab <schwab@suse.de>
- gshadow-erange-rhandling.patch: gshadow: Matching sgetsgent, sgetsgent_r
ERANGE handling (BZ #30151)
- system-sigchld-block.patch: posix: Fix system blocks SIGCHLD erroneously
(BZ #30163)
- gmon-buffer-alloc.patch: gmon: Fix allocated buffer overflow
(bsc#1207975, BZ #29444)
- check-pf-cancel-handler.patch: __check_pf: Add a cancellation cleanup
handler (BZ #20975)
- powerpc64-fcntl-lock.patch: io: Fix F_GETLK, F_SETLK, and F_SETLKW for
powerpc64
- realloc-limit-chunk-reuse.patch: realloc: Limit chunk reuse to only
growing requests (BZ #30579)
- dl-find-object-return.patch: elf: _dl_find_object may return 1 during
early startup (BZ #30515)
-------------------------------------------------------------------
Mon Jul 3 16:31:17 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Need to build with GCC 12 as minimum
-------------------------------------------------------------------
Thu Jun 29 13:05:55 UTC 2023 - Andreas Schwab <schwab@suse.de>
- fix-locking-in-_IO_cleanup.patch: Update to final version
-------------------------------------------------------------------
Fri Apr 28 23:42:47 UTC 2023 - Giuliano Belinassi <giuliano.belinassi@suse.com>
- ulp-prologue-into-asm-functions.patch: Add support for livepatches in
ASM written functions (bsc#1210777, bsc#1211726)
-------------------------------------------------------------------
Thu Mar 30 12:03:36 UTC 2023 - Andreas Schwab <schwab@suse.de>
- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
is unset (bsc#1209229, BZ #30235)
-------------------------------------------------------------------
Thu Mar 16 15:41:56 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Exclude static archives from preparation for live patching (bnc#1208721)
-------------------------------------------------------------------
Wed Feb 1 16:06:35 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.37
* The getent tool now supports the --no-addrconfig option
* The dynamic linker no longer loads shared objects from the "tls"
subdirectories on the library search path or the subdirectory that
corresponds to the AT_PLATFORM system name, or employs the legacy AT_HWCAP
search mechanism, which was deprecated in version 2.33
- printf-grouping.patch: Account for grouping in printf width (BZ #30068)
- strftime-time64.patch: Use 64-bit time_t interfaces in strftime and
strptime (BZ #30053)
- glibcextract-compile-c-snippet.patch, sys-mount-kernel-definition.patch,
sys-mount-usage.patch, nscd-netlink-cache-invalidation.patch,
syslog-large-messages.patch, dlmopen-libc-early-init.patch,
ldd-vdso-dependency.patch, syslog-extra-whitespace.patch,
errlist-edeadlock.patch, makeflags.patch, get-nscd-addresses.patch,
x86-64-avx2-string-functions.patch, nscd-aicache.patch,
dl-debug-bindings.patch, floatn.patch: Removed
- bsc#1207957
- bsc#1208358
- bsc#1212910
-------------------------------------------------------------------
Tue Dec 27 12:24:54 UTC 2022 - Ludwig Nussel <lnussel@suse.com>
- Remove reference to obsolete %usrmerged macro (boo#1206798)
-------------------------------------------------------------------
Thu Dec 15 23:25:15 UTC 2022 - Andreas Schwab <schwab@suse.de>
- floatn.patch: Update _FloatN header support for C++ in GCC 13
-------------------------------------------------------------------
Thu Nov 10 17:06:18 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>
- nscd: Convert to systemd-sysusers
-------------------------------------------------------------------
Wed Oct 26 14:07:48 UTC 2022 - Andreas Schwab <schwab@suse.de>
- dl-debug-bindings.patch: elf: Reinstate on DL_DEBUG_BINDINGS
_dl_lookup_symbol_x (bsc#1204710)
-------------------------------------------------------------------
Wed Oct 5 07:53:24 UTC 2022 - Andreas Schwab <schwab@suse.de>
- get-nscd-addresses.patch: get_nscd_addresses: Fix subscript typos (BZ
#29605)
- x86-64-avx2-string-functions.patch: check for required cpu features in
AVX2 string functions (BZ #29611)
- nscd-aicache.patch: nscd: Drop local address tuple variable (BZ #29607)
-------------------------------------------------------------------
Wed Sep 21 08:47:52 UTC 2022 - Andreas Schwab <schwab@suse.de>
- makeflags.patch: Makerules: fix MAKEFLAGS assignment for upcoming
make-4.4 (BZ# 29564)
-------------------------------------------------------------------
Thu Sep 8 09:44:00 UTC 2022 - Andreas Schwab <schwab@suse.de>
- errlist-edeadlock.patch: errlist: add missing entry for EDEADLOCK (BZ
#29545)
-------------------------------------------------------------------
Tue Sep 6 11:22:46 UTC 2022 - Andreas Schwab <schwab@suse.de>
- syslog-large-messages.patch: syslog: Fix large messages (CVE-2022-39046,
bsc#1203011, BZ #29536)
- dlmopen-libc-early-init.patch: elf: Call __libc_early_init for reused
namespaces (BZ #29528)
- ldd-vdso-dependency.patch: elf: Restore how vDSO dependency is printed
with LD_TRACE_LOADED_OBJECTS (BZ #29539)
- syslog-extra-whitespace.patch: syslog: Remove extra whitespace between
timestamp and message (BZ #29544)
-------------------------------------------------------------------
Wed Aug 24 09:29:02 UTC 2022 - Fabian Vogt <fvogt@suse.com>
- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
invalidation if epoll is used (boo#1199964, BZ #29415)
-------------------------------------------------------------------
Mon Aug 15 09:21:34 UTC 2022 - Andreas Schwab <schwab@suse.de>
- glibcextract-compile-c-snippet.patch: glibcextract.py: Add
compile_c_snippet
- sys-mount-kernel-definition.patch: linux: Mimic kernel definition for
BLOCK_SIZE
- sys-mount-usage.patch: linux: Fix sys/mount.h usage with kernel headers
-------------------------------------------------------------------
Tue Aug 2 07:41:38 UTC 2022 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.36
Major new features:
* Support for DT_RELR relative relocation format has been added to
glibc
* On Linux, the pidfd_open, pidfd_getfd, and pidfd_send_signal functions
have been added
* On Linux, the process_madvise function has been added
* On Linux, the process_mrelease function has been added
* The “no-aaaa” DNS stub resolver option has been added
* On Linux, the fsopen, fsmount, move_mount, fsconfig, fspick, open_tree,
and mount_setattr have been added
* localedef now accepts locale definition files encoded in UTF-8
* Support for the mbrtoc8 and c8rtomb multibyte/UTF-8 character conversion
functions has been added per the ISO C2X N2653 and C++20 P0482R6 proposals
* The functions arc4random, arc4random_buf, and arc4random_uniform have been
added
Deprecated and removed features, and other changes affecting compatibility:
* Support for prelink will be removed in the next release
* The Linux kernel version check has been removed along with the
LD_ASSUME_KERNEL environment variable
* On Linux, The LD_LIBRARY_VERSION environment variable has been removed
- get-nprocs-sched-uninit-read.patch, get-nprocs-inaccurate.patch,
strcmp-rtm-fallback.path, pt-load-invalid-hole.patch,
localedef-ld-monetary.patch, nptl-spurious-eintr.patch,
strncpy-power9-vsx.patch, nptl-cleanup-async-restore.patch,
read-chk-cancel.patch, wcrtomb-fortify.patch,
nptl-cleanup-async-restore-2.patch: Removed
- CVE-2023-4813, bsc#1215286
- bsc#1198751
- bsc#1200334
-------------------------------------------------------------------
Thu Jul 14 11:21:34 UTC 2022 - Andreas Schwab <schwab@suse.de>
- nptl-cleanup-async-restore-2.patch: nptl: Fix
___pthread_unregister_cancel_restore asynchronous restore (bsc#1200093,
BZ #29214)
-------------------------------------------------------------------
Thu Jun 23 09:46:45 UTC 2022 - Andreas Schwab <schwab@suse.de>
- read-chk-cancel.patch: debug: make __read_chk a cancellation point
(bsc#1200682, BZ #29274)
- wcrtomb-fortify.patch: wcrtomb: Make behavior POSIX compliant
(bsc#1200688)
-------------------------------------------------------------------
Thu Jun 9 12:01:07 UTC 2022 - Andreas Schwab <schwab@suse.de>
- Set SUSE_ZNOW=0
-------------------------------------------------------------------
Wed Jun 8 13:32:57 UTC 2022 - Andreas Schwab <schwab@suse.de>
- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
__strncpy_power9 (BZ #29197)
- nptl-cleanup-async-restore.patch: nptl: Fix __libc_cleanup_pop_restore
asynchronous restore (bsc#1200093, BZ #29214)
-------------------------------------------------------------------
Tue May 17 14:07:46 UTC 2022 - Andreas Schwab <schwab@suse.de>
- nptl-spurious-eintr.patch: nptl: Handle spurious EINTR when thread
cancellation is disabled (BZ #29029)
-------------------------------------------------------------------
Thu May 12 14:33:56 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
- Follow the distro default gcc version to build the cross
bootstrap packages.
-------------------------------------------------------------------
Fri Apr 29 10:48:30 UTC 2022 - Marcus Meissner <meissner@suse.com>
- switched to https urls
-------------------------------------------------------------------
Mon Feb 28 10:51:19 UTC 2022 - Andreas Schwab <schwab@suse.de>
- get-nprocs-sched-uninit-read.patch: linux: __get_nprocs_sched: do not
feed CPU_COUNT_S with garbage (BZ #28850)
- get-nprocs-inaccurate.patch: linux: fix accuracy of get_nprocs and
get_nprocs_conf (BZ #28865)
- strcmp-rtm-fallback.path: x86: Fallback {str|wcs}cmp RTM in the ncmp
overflow case (BZ #28896)
- pt-load-invalid-hole.patch: elf: Check invalid hole in PT_LOAD segments
(BZ #28838)
- localedef-ld-monetary.patch: localedef: Update LC_MONETARY handling (BZ
#28845)
-------------------------------------------------------------------
Thu Feb 3 11:52:01 UTC 2022 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.35
Major new features:
* Unicode 14.0.0 Support
* Bump r_version in the debugger interface to 2
* Support for the C.UTF-8 locale has been added to glibc
* <math.h> functions that round their results to a narrower type, and
corresponding <tgmath.h> macros, are added from TS 18661-1:2014, TS
18661-3:2015 and draft ISO C2X
* <math.h> functions for floating-point maximum and minimum,
corresponding to new operations in IEEE 754-2019, and corresponding
<tgmath.h> macros, are added from draft ISO C2X
* <math.h> macros for single-precision float constants are added as a
GNU extension
* The __STDC_IEC_60559_BFP__ and __STDC_IEC_60559_COMPLEX__ macros are
predefined as specified in TS 18661-1:2014
* The exp10 functions in <math.h> now have a corresponding type-generic
macro in <tgmath.h>
* The ISO C2X macro _PRINTF_NAN_LEN_MAX has been added to <stdio.h>
* printf-family functions now support the %b format for output of
integers in binary, as specified in draft ISO C2X, and the %B variant
of that format recommended by draft ISO C2X
* A new DSO sorting algorithm has been added in the dynamic linker that uses
topological sorting by depth-first search (DFS), solving performance issues
of the existing sorting algorithm when encountering particular circular
object dependency cases
* A new tunable, glibc.rtld.dynamic_sort, can be used to select between
the two DSO sorting algorithms
* ABI support for a new function '__memcmpeq'. '__memcmpeq' is meant
to be used by compilers for optimizing usage of 'memcmp' when its
return value is only used for its boolean status
* Support for automatically registering threads with the Linux rseq
system call has been added
* A symbolic link to the dynamic linker is now installed under
/usr/bin/ld.so (or more precisely, '${bindir}/ld.so')
* All programs and the testsuite in glibc are now built as position independent
executables (PIE) by default on toolchains and architectures that support it
* On Linux, a new tunable, glibc.malloc.hugetlb, can be used to
either make malloc issue madvise plus MADV_HUGEPAGE on mmap and sbrk
or to use huge pages directly with mmap calls with the MAP_HUGETLB
flags)
* The printf family of functions now handles the flagged %#m conversion
specifier, printing errno as an error constant (similar to strerrorname_np)
* The function _dl_find_object has been added
* On Linux, the epoll_pwait2 function has been added
* The function posix_spawn_file_actions_addtcsetpgrp_np has been added,
enabling posix_spawn and posix_spawnp to set the controlling terminal in
the new process in a race free manner
* Source fortification (_FORTIFY_SOURCE) level 3 is now available for
applications compiling with glibc and gcc 12 and later
Deprecated and removed features, and other changes affecting compatibility:
* On x86-64, the LD_PREFER_MAP_32BIT_EXEC environment variable support
has been removed since the first PT_LOAD segment is no longer executable
due to defaulting to -z separate-code
* The r_version update in the debugger interface makes the glibc binary
incompatible with GDB
* Intel MPX support (lazy PLT, ld.so profile, and LD_AUDIT) has been removed
* The catchsegv script and associated libSegFault.so shared object have
been removed
* Support for prelink will be removed in the next release; this includes
removal of the LD_TRACE_PRELINKING, and LD_USE_LOAD_BIAS, environment
variables and their functionality in the dynamic loader
Changes to build and runtime requirements:
* The audit module interface version LAV_CURRENT is increased to enable
proper bind-now support
* The audit interface on aarch64 is extended to support both the indirect
result location register (x8) and NEON Q register
Security related changes:
* CVE-2022-23219: Passing an overlong file name to the clnt_create
legacy function could result in a stack-based buffer overflow when
using the "unix" protocol
* CVE-2022-23218: Passing an overlong file name to the svcunix_create
legacy function could result in a stack-based buffer overflow
* CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath
function could result in a memory leak and potential access of
uninitialized memory
* CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd
function may result in an off-by-one buffer underflow and overflow
when the current working directory is longer than PATH_MAX and also
corresponds to the / directory through an unprivileged mount
namespace
- copy-and-spawn-sgid-double-close.patch,
fcntl-time-bits-64-redirect.patch, gaiconf-init-double-free.patch,
gconv-parseconfdir-memory-leak.patch, getcwd-attribute-access.patch,
glibc-c-utf8-locale.patch, iconv-charmap-close-output.patch,
ld-show-auxv-colon.patch, ldconfig-leak-empty-paths.patch,
librt-null-pointer.patch, pthread-kill-fail-after-exit.patch,
pthread-kill-race-thread-exit.patch, pthread-kill-return-esrch.patch,
pthread-kill-send-specific-thread.patch,
pthread-mutexattr-getrobust-np-type.patch,
setxid-deadlock-blocked-signals.patch,
sysconf-nprocessors-affinity.patch, x86-string-control-test.patch:
Removed.
- bsc#1194640
- bsc#1194768
- bsc#1194770
- bsc#1197718
- bsc#1211829
- bsc#1215891
-------------------------------------------------------------------
Fri Nov 26 13:38:02 UTC 2021 - Michael Matz <matz@suse.com>
- Enable building the cross packages in rings.
-------------------------------------------------------------------
Wed Nov 16 17:22:28 UTC 2021 - Giuliano Belinassi <giuliano.belinassi@suse.com>
- Add ExtraBuildFlags for build flags that cannot be passed to configure.
- Add support for livepatches (jsc#SLE-20049).
- Generate ipa-clones tarball artifact when livepatching is enabled.
-------------------------------------------------------------------
Wed Nov 10 13:39:26 UTC 2021 - Andreas Schwab <schwab@suse.de>
- glibc.rpmlintrc: Update for rpmlint2
-------------------------------------------------------------------
Tue Oct 5 10:58:00 UTC 2021 - Andreas Schwab <schwab@suse.de>
- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
(BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
__x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
#28036)
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
icon-charmap-close-output.patch
-------------------------------------------------------------------
Wed Aug 11 12:56:09 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Don't create separate debuginfo packages for cross packages
-------------------------------------------------------------------
Wed Aug 11 12:23:10 UTC 2021 - Andreas Schwab <schwab@suse.de>
- ldconfig-leak-empty-paths.patch: ldconfig: avoid leak on empty paths in
config file
- gconv-parseconfdir-memory-leak.patch: gconv_parseconfdir: Fix memory leak
- gaiconf-init-double-free.patch: gaiconf_init: Avoid double-free in label
and precedence lists
- copy-and-spawn-sgid-double-close.patch: copy_and_spawn_sgid: Avoid
double calls to close()
- icon-charmap-close-output.patch: iconv_charmap: Close output file when
done
- fcntl-time-bits-64-redirect.patch: Linux: Fix fcntl, ioctl, prctl
redirects for _TIME_BITS=64 (BZ #28182)
- librt-null-pointer.patch: librt: fix NULL pointer dereference (BZ
#28213)
-------------------------------------------------------------------
Tue Aug 10 13:18:54 UTC 2021 - Michael Matz <matz@suse.com>
- Add cross development packages for aarch64 and riscv64.
-------------------------------------------------------------------
Mon Aug 2 09:38:46 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.34
Major new features:
* When _DYNAMIC_STACK_SIZE_SOURCE or _GNU_SOURCE are defined,
PTHREAD_STACK_MIN is no longer constant and is redefined to
sysconf(_SC_THREAD_STACK_MIN)
* Add _SC_MINSIGSTKSZ and _SC_SIGSTKSZ
* The dynamic linker implements the --list-diagnostics option, printing
a dump of information related to IFUNC resolver operation and
glibc-hwcaps subdirectory selection
* On Linux, the function execveat has been added
* The ISO C2X function timespec_getres has been added
* The feature test macro __STDC_WANT_IEC_60559_EXT__, from draft ISO
C2X, is supported to enable declarations of functions defined in Annex F
of C2X
* Add support for 64-bit time_t on configurations like x86 where time_t
is traditionally 32-bit
* The main gconv-modules file in glibc now contains only a small set of
essential converter modules and the rest have been moved into a supplementary
configuration file gconv-modules-extra.conf in the gconv-modules.d directory
in the same GCONV_PATH
* On Linux, a new tunable, glibc.pthread.stack_cache_size, can be used
to configure the size of the thread stack cache
* The function _Fork has been added as an async-signal-safe fork replacement
since Austin Group issue 62 droped the async-signal-safe requirement for
fork (and it will be included in the future POSIX standard)
* On Linux, the close_range function has been added
* The function closefrom has been added
* The posix_spawn_file_actions_closefrom_np function has been added, enabling
posix_spawn and posix_spawnp to close all file descriptors great than or
equal to a giver integer
Deprecated and removed features, and other changes affecting compatibility:
* The function pthread_mutex_consistent_np has been deprecated
* The function pthread_mutexattr_getrobust_np has been deprecated
* The function pthread_mutexattr_setrobust_np has been deprecated
* The function pthread_yield has been deprecated
* The function inet_neta declared in <arpa/inet.h> has been deprecated
* Various rarely-used functions declared in <resolv.h> and
<arpa/nameser.h> have been deprecated
* The pthread cancellation handler is now installed with SA_RESTART and
pthread_cancel will always send the internal SIGCANCEL on a cancellation
request
* The symbols mallwatch and tr_break are now deprecated and no longer used in
mtrace
* The __morecore and __after_morecore_hook malloc hooks and the default
implementation __default_morecore have been removed from the API
* Debugging features in malloc such as the MALLOC_CHECK_ environment variable
(or the glibc.malloc.check tunable), mtrace() and mcheck() have now been
disabled by default in the main C library
* The deprecated functions malloc_get_state and malloc_set_state have been
moved from the core C library into libc_malloc_debug.so
* The deprecated memory allocation hooks __malloc_hook, __realloc_hook,
__memalign_hook and __free_hook are now removed from the API
Changes to build and runtime requirements:
* On Linux, the shm_open, sem_open, and related functions now expect the
file shared memory file system to be mounted at /dev/shm
Security related changes:
CVE-2021-27645: The nameserver caching daemon (nscd), when processing
a request for netgroup lookup, may crash due to a double-free,
potentially resulting in degraded service or Denial of Service on the
local system
CVE-2021-33574: The mq_notify function has a potential use-after-free
issue when using a notification type of SIGEV_THREAD and a thread
attribute with a non-default affinity mask
CVE-2021-35942: The wordexp function may overflow the positional
parameter number when processing the expansion resulting in a crash
- nss-database-check-reload.patch, nss-load-chroot.patch,
x86-isa-level.patch, nscd-netgroupcache.patch,
nss-database-lookup.patch, select-modify-timeout.patch,
nptl-db-libpthread-load-order.patch, rawmemchr-warning.patch,
tst-cpu-features-amx.patch, mq-notify-use-after-free.patch: Removed
- bsc#1181403
- bsc#1184035
- bsc#1187911
- jsc#PED-987
-------------------------------------------------------------------
Fri Jun 11 11:42:10 UTC 2021 - Ludwig Nussel <lnussel@suse.de>
- Enable usrmerge in Factory always as it's default there
- Add conflict with pre-usrmerge filesystem package
-------------------------------------------------------------------
Thu Jun 10 13:24:39 UTC 2021 - Andreas Schwab <schwab@suse.de>
- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
(CVE-2021-33574, bsc#1186489, BZ #27896)
- Drop glibc-usrmerge-bootstrap-helper package
-------------------------------------------------------------------
Thu May 27 18:05:05 UTC 2021 - Andreas Schwab <schwab@suse.de>
- tst-cpu-features-amx.patch: x86: tst-cpu-features-supports.c: Update AMX
check
-------------------------------------------------------------------
Wed May 26 09:55:50 UTC 2021 - Andreas Schwab <schwab@suse.de>
- rawmemchr-warning.patch: string: Work around GCC PR 98512 in rawmemchr
-------------------------------------------------------------------
Tue May 4 12:19:24 UTC 2021 - Andreas Schwab <schwab@suse.de>
- nptl-db-libpthread-load-order.patch: nptl_db: Support different
libpthread/ld.so load orders (bsc#1184214, BZ #27744)
-------------------------------------------------------------------
Tue Apr 13 11:44:37 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Enable support for static PIE (bsc#1184646)
- select-modify-timeout.patch: linux: always update select timeout
(bsc#1184339, BZ #27706)
-------------------------------------------------------------------
Tue Mar 23 16:55:51 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Don't remove -f[asynchronous-]unwind-tables during configure run, no
longer needed
-------------------------------------------------------------------
Mon Mar 8 10:43:30 UTC 2021 - Andreas Schwab <schwab@suse.de>
- nss-database-check-reload.patch: nsswitch: return result when nss
database is locked (BZ #27343)
- nss-load-chroot.patch: nss: Re-enable NSS module loading after chroot
(bsc#1182323, BZ #27389)
- x86-isa-level.patch: x86: Set minimum x86-64 level marker (bsc#1182522,
BZ #27318)
- nss-database-lookup.patch: nss: fix nss_database_lookup2's alternate
handling (bsc#1182247, BZ #27416)
- nss-revert-api.patch: remove
- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
(CVE-2021-27645, bsc#1182733, BZ #27462)
-------------------------------------------------------------------
Tue Mar 2 11:57:15 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Disable x86 ISA level for now (bsc#1182522, BZ #27318)
- nss-revert-api.patch: Workaround for nss-compat brokeness (bsc#1182247,
BZ #27416)
-------------------------------------------------------------------
Mon Mar 1 16:43:55 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Fix build of utils flavor for usrmerge
-------------------------------------------------------------------
Thu Feb 18 11:29:12 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Prepare for usrmerge (bsc#1029961)
-------------------------------------------------------------------
Tue Feb 16 13:52:50 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Add --enable-memory-tagging for aarch64
-------------------------------------------------------------------
Tue Feb 2 09:33:28 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.33
* The dynamic linker accepts the --list-tunables argument which prints
all the supported tunables.
* The dynamic linker accepts the --argv0 argument and provides opportunity
to change argv[0] string.
* The dynamic linker loads optimized implementations of shared objects
from subdirectories under the glibc-hwcaps directory on the library
search path if the system's capabilities meet the requirements for
that subdirectory.
* The new --help option of the dynamic linker provides usage and
information and library search path diagnostics.
* The mallinfo2 function is added to report statistics as per mallinfo,
but with larger field widths to accurately report values that are
larger than fit in an integer.
* Add <sys/platform/x86.h> to provide query macros for x86 CPU features.
* A new fortification level _FORTIFY_SOURCE=3 is available.
* The mallinfo function is marked deprecated.
* When dlopen is used in statically linked programs, alternative library
implementations from HWCAP subdirectories are no longer loaded.
* The deprecated <sys/vtimes.h> header and the function vtimes have been
removed.
* On s390(x), the type float_t is now derived from the macro
__FLT_EVAL_METHOD__ that is defined by the compiler, instead of being
hardcoded to double.
* A future version of glibc will stop loading shared objects from the
"tls" subdirectories on the library search path, the subdirectory that
corresponds to the AT_PLATFORM system name, and also stop employing
the legacy AT_HWCAP search mechanism.
* CVE-2021-3326: An assertion failure during conversion from the
ISO-20220-JP-3 character set using the iconv function has been fixed.
- Remove obsolete, unused /etc/default/nss
- aarch64-static-pie.patch, euc-kr-overrun.patch,
get-nprocs-cpu-online-parsing.patch, iconv-redundant-shift.patch,
iconv-ucs4-loop-bounds.patch, ifunc-fma4.patch,
intl-codeset-suffixes.patch, nscd-gc-cycle.patch,
printf-long-double-non-normal.patch, strerrorname-np.patch,
syslog-locking.patch, sysvipc.patch: Removed
- bsc#1180557
- bsc#1181505
- bsc#1191592
- bsc#1201942
-------------------------------------------------------------------
Tue Jan 19 13:52:09 UTC 2021 - Andreas Schwab <schwab@suse.de>
- Remove support for %optimize_power
- Move to power4 baseline on ppc
-------------------------------------------------------------------
Tue Dec 15 16:41:29 UTC 2020 - Andreas Schwab <schwab@suse.de>
- aarch64-static-pie.patch: fix static PIE start code for BTI
(bsc#1179450, BZ #27068)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
/sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
-------------------------------------------------------------------
Tue Nov 10 15:36:40 UTC 2020 - Andreas Schwab <schwab@suse.de>
- intl-codeset-suffixes.patch: intl: Handle translation output codesets
with suffixes (BZ #26383)
- strerrorname-np.patch: string: Fix strerrorname_np return value (BZ
#26555)
- sysvipc.patch: sysvipc: Fix SEM_STAT_ANY kernel argument pass (BZ
#26637, BZ #26639, BZ #26636)
-------------------------------------------------------------------
Mon Oct 26 07:07:38 UTC 2020 - Richard Biener <rguenther@suse.com>
- Use --enable-cet on x86_64 to instrument glibc for indirect branch
tracking and shadow stack use. Enable indirect branch tracking
and shadow stack in the dynamic loader (jsc#PM-2110, bsc#1175154)
-------------------------------------------------------------------
Tue Sep 8 08:00:33 UTC 2020 - Andreas Schwab <schwab@suse.de>
- Keep nsswitch.conf in /etc for SLES15
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
functions (bsc#1172085, BZ #26100)
- ifunc-fma4.patch: x86-64: Fix FMA4 detection in ifunc (BZ #26534)
-------------------------------------------------------------------
Thu Aug 6 08:08:04 UTC 2020 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.32
* Unicode 13.0.0 Support
* New locale added: ckb_IQ
* The GNU C Library now loads audit modules listed in the DT_AUDIT and
DT_DEPAUDIT dynamic section entries of the main executable
* powerpc64le supports IEEE128 long double libm/libc redirects when
using the -mabi=ieeelongdouble to compile C code on supported GCC
toolchains
* To help detect buffer overflows and other out-of-bounds accesses
several APIs have been annotated with GCC 'access' attribute
* On Linux, functions the pthread_attr_setsigmask_np and
pthread_attr_getsigmask_np have been added
* The GNU C Library now provides the header file <sys/single_threaded.h>
which declares the variable __libc_single_threaded
* The functions sigabbrev_np and sigdescr_np have been added
* The functions strerrorname_np and strerrordesc_np have been added
* AArch64 now supports standard branch protection security hardening
in glibc when it is built with a GCC that is configured with
--enable-standard-branch-protection (or if -mbranch-protection=standard
flag is passed when building both GCC target libraries and glibc,
in either case a custom GCC is needed)
* The deprecated <sys/sysctl.h> header and the sysctl function have been
removed
* The sstk function is no longer available to newly linked binaries
* The legacy signal handling functions siginterrupt, sigpause, sighold,
sigrelse, sigignore and sigset, and the sigmask macro have been
deprecated
* ldconfig now defaults to the new format for ld.so.cache
* The deprecated arrays sys_siglist, _sys_siglist, and sys_sigabbrev
are no longer available to newly linked binaries, and their declarations
have been removed from <string.h>
* The deprecated symbols sys_errlist, _sys_errlist, sys_nerr, and _sys_nerr
are no longer available to newly linked binaries, and their declarations
have been removed from from <stdio.h>
* Both strerror and strerror_l now share the same internal buffer in the
calling thread, meaning that the returned string pointer may be invalided
or contents might be overwritten on subsequent calls in the same thread or
if the thread is terminated
* Using weak references to libpthread functions such as pthread_create
or pthread_key_create to detect the singled-threaded nature of a
program is an obsolescent feature
* The "files" NSS module no longer supports the "key" database (used for
secure RPC)
* The __morecore and __after_morecore_hook malloc hooks and the default
implementation __default_morecore have been deprecated
* The hesiod NSS module has been deprecated and will be removed in a
future version of glibc
* CVE-2016-10228: An infinite loop has been fixed in the iconv program when
invoked with the -c option and when processing invalid multi-byte input
sequences
* CVE-2020-10029: Trigonometric functions on x86 targets suffered from stack
corruption when they were passed a pseudo-zero argument
* CVE-2020-1752: A use-after-free vulnerability in the glob function when
expanding ~user has been fixed.
* CVE-2020-6096: A signed comparison vulnerability in the ARMv7 memcpy and
memmove functions has been fixed
- riscv-syscall-clobber.patch, ldbl-96-rem-pio2l.patch,
long-double-alias.patch: Removed
- bsc#1027496
- bsc#1162930
- bsc#1166106
- bsc#1167631
- bsc#1167939
- bsc#1194785, jsc#SLE-18195
- bsc#1200855
- bsc#1201560
- bsc#1201640
- bsc#1207571
- jsc#SLE-13520
-------------------------------------------------------------------
Tue Jun 23 08:32:23 UTC 2020 - Andreas Schwab <schwab@suse.de>
- long-double-alias.patch: Fix build with GCC 10 when long double = double
- nscd-gc-cycle.patch: nscd: bump GC cycle during cache pruning
(bsc#1171878, BZ #26130)
-------------------------------------------------------------------
Mon May 18 12:25:49 UTC 2020 - Andreas Schwab <schwab@suse.de>
- glibc-nsswitch-usr.diff: read /usr/etc/nsswitch.conf if
/etc/nsswitch.conf does not exist
- Install default nsswitch.conf in /usr/etc
- Don't install gai.conf in /etc
-------------------------------------------------------------------
Mon Apr 20 12:43:19 UTC 2020 - Andreas Schwab <schwab@suse.de>
- Split off %lang_package
-------------------------------------------------------------------
Thu Mar 12 10:21:15 UTC 2020 - Andreas Schwab <schwab@suse.de>
- riscv-syscall-clobber.patch: riscv: Avoid clobbering register parameters
in syscall
- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)
-------------------------------------------------------------------
Tue Feb 18 12:41:56 UTC 2020 - Andreas Schwab <schwab@suse.de>
- nsswitch.conf: comment out initgroups setting, so that it defaults to
the group setting (bsc#1164075)
-------------------------------------------------------------------
Thu Feb 13 14:16:05 UTC 2020 - Andreas Schwab <schwab@suse.de>
- fix-locking-in-_IO_cleanup.patch: update to latest version
-------------------------------------------------------------------
Mon Feb 3 08:13:02 UTC 2020 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.31
* The GNU C Library now supports a feature test macro _ISOC2X_SOURCE to
enable features from the draft ISO C2X standard
* The <math.h> functions that round their results to a narrower type now
have corresponding type-generic macros in <tgmath.h>
* The function pthread_clockjoin_np has been added, enabling join with a
terminated thread with a specific clock
* New locale added: mnw_MM (Mon language spoken in Myanmar).
* The DNS stub resolver will optionally send the AD (authenticated data) bit
in queries if the trust-ad option is set via the options directive in
/etc/resolv.conf (or if RES_TRUSTAD is set in _res.options)
* The totalorder and totalordermag functions, and the corresponding
functions for other floating-point types, now take pointer arguments to
avoid signaling NaNs possibly being converted to quiet NaNs in argument
passing
* The obsolete function stime is no longer available to newly linked
binaries, and its declaration has been removed from <time.h>
* The gettimeofday function no longer reports information about a
system-wide time zone
* If a lazy binding failure happens during dlopen, during the execution of
an ELF constructor, the process is now terminated
- malloc-info-whitespace.patch, riscv-vfork.patch,
prefer-map-32bit-exec.patch, backtrace-powerpc.patch,
ldconfig-dynstr.patch: Removed.
- bsc#1157893
- bsc#1163184
- fate#325815, fate#325879, fate#325880, fate#325881, fate#325882
- fate#325962
-------------------------------------------------------------------
Tue Jan 21 15:08:13 UTC 2020 - Andreas Schwab <schwab@suse.de>
- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
(CVE-2020-1751, bsc#1158996, BZ #25423)
- Drop support for pluggable gconv modules (bsc#1159851)
-------------------------------------------------------------------
Mon Dec 9 13:21:34 UTC 2019 - Andreas Schwab <schwab@suse.de>
- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
#25204)
-------------------------------------------------------------------
Tue Nov 26 11:34:45 CET 2019 - kukuk@suse.de
- nsswitch.conf: add usrfiles for services, protocols, rpc, ethers
and aliases for /usr/etc move
-------------------------------------------------------------------
Mon Oct 14 13:36:30 UTC 2019 - Andreas Schwab <schwab@suse.de>
- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
(CVE-2019-25013, BZ #24973)
-------------------------------------------------------------------
Thu Oct 10 14:39:24 UTC 2019 - Andreas Schwab <schwab@suse.de>
- ldconfig-dynstr.patch: ldconfig: handle .dynstr located in separate
segment (bsc#1153149, BZ #25087)
-------------------------------------------------------------------
Mon Sep 23 14:00:09 UTC 2019 - Andreas Schwab <schwab@suse.de>
- Package gconv-modules.cache as %ghost
- Regenerate it also in the %post of glibc-local-base-<targettype>
-------------------------------------------------------------------
Mon Sep 23 13:01:24 UTC 2019 - Ludwig Nussel <lnussel@suse.de>
- move mo files to glibc-locale as that's where all the other
informations for those locales are. glibc-locale-base only has English
anyways.
-------------------------------------------------------------------
Wed Sep 18 13:57:25 UTC 2019 - Andreas Schwab <schwab@suse.de>
- riscv-vfork.patch: Fix RISC-V vfork build with Linux 5.3 kernel headers
-------------------------------------------------------------------
Mon Aug 19 13:47:26 UTC 2019 - Andreas Schwab <schwab@suse.de>
- Remove NoSource tags (bsc#994835)
-------------------------------------------------------------------
Mon Aug 19 15:40:19 CEST 2019 - kukuk@suse.de
- pwdutils is long gone and replaced by shadow
-------------------------------------------------------------------
Fri Aug 2 08:59:46 UTC 2019 - Andreas Schwab <schwab@suse.de>
- Update to glibc 2.30
* Unicode 12.1.0 Support
* The dynamic linker accepts the --preload argument to preload shared
objects
* The twalk_r function has been added
* On Linux, the getdents64, gettid, and tgkill functions have been added
* Minguo (Republic of China) calendar support has been added
* The entry for the new Japanese era has been added
* Memory allocation functions malloc, calloc, realloc, reallocarray, valloc,
pvalloc, memalign, and posix_memalign fail now with total object size
larger than PTRDIFF_MAX
* The dynamic linker no longer refuses to load objects which reference
versioned symbols whose implementation has moved to a different soname
since the object has been linked
* Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock,
pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait
functions
* On AArch64 the GNU IFUNC resolver call ABI changed
* The copy_file_range function fails with ENOSYS if the kernel does not
support the system call of the same name
* The functions clock_gettime, clock_getres, clock_settime,
clock_getcpuclockid, clock_nanosleep were removed from the librt library
for new applications (on architectures which had them)
* The obsolete and never-implemented XSI STREAMS header files <stropts.h>
and <sys/stropts.h> have been removed
* Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6
resolver flag (deprecated in glibc 2.25) have been removed
* The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub
resolver have been removed from <resolv.h>
* With --enable-bind-now, installed programs are now linked with the
BIND_NOW flag.
* On 32-bit Arm, support for the port-based I/O emulation and the <sys/io.h>
header have been removed
* The Linux-specific <sys/sysctl.h> header and the sysctl function have been
deprecated and will be removed from a future version of glibc
* CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check
size
* CVE-2019-9169: Attempted case-insensitive regular-expression match
via proceed_next_node in posix/regexec.c leads to heap-based buffer
over-read
- pthread-rwlock-trylock-stalls.patch,
arm-systemtap-probe-constraint.patch, pthread-mutex-barrier.patch,
fork-handler-lock.patch, pthread-join-probe.patch,
riscv-clone-unwind.patch, add-new-Fortran-vector-math-header-file.patch,
regex-read-overrun.patch, japanese-era-name-may-2019.patch,
dl-show-auxv.patch, s390-vx-vxe-hwcap.patch, taisho-era-string.patch,
malloc-tracing-hooks.patch, pldd-inf-loop.patch,
malloc-large-bin-corruption-check.patch, wfile-sync-crash.patch,
malloc-tests-warnings.patch, fnmatch-collating-elements.patch,
iconv-reset-input-buffer.patch: Removed
- malloc-info-whitespace.patch: Remove unwanted leading whitespace in
malloc_info (BZ #24867)
- bsc#1100396
- bsc#1130045
-------------------------------------------------------------------
Wed Jul 17 09:47:02 UTC 2019 - Andreas Schwab <schwab@suse.de>
- Move /var/lib/misc/Makefile to /usr/share/misc/Makefile.makedb (bsc#1138726)
-------------------------------------------------------------------
Wed Jun 26 07:41:20 UTC 2019 - Andreas Schwab <schwab@suse.de>
- malloc-tests-warnings.patch: Fix warnings in malloc tests with GCC 9
-------------------------------------------------------------------
Tue Jun 25 07:30:13 UTC 2019 - Martin Liška <mliska@suse.cz>
- Set optflags for i686 after _lto_cflags is set (boo#1138807).
-------------------------------------------------------------------
Thu Jun 20 10:02:20 UTC 2019 - Martin Liška <mliska@suse.cz>
- Disable LTO due to a usage of top-level assembler that
causes LTO issues (boo#1138807).
-------------------------------------------------------------------
Wed Jun 12 12:10:59 UTC 2019 - Andreas Schwab <schwab@suse.de>
- nss-files-long-lines-2.patch: Remove obsolete patch
-------------------------------------------------------------------
Wed May 15 15:55:36 UTC 2019 - Andreas Schwab <schwab@suse.de>
- dl-show-auxv.patch: Fix output of LD_SHOW_AUXV=1
- s390-vx-vxe-hwcap.patch: S390: Mark vx and vxe as important hwcap
- taisho-era-string.patch: ja_JP: Change the offset for Taisho gan-nen
from 2 to 1 (BZ #24162)
- malloc-tracing-hooks.patch: malloc: Set and reset all hooks for tracing
(BZ #16573)
- pldd-inf-loop.patch: elf: Fix pldd (BZ#18035)
- malloc-large-bin-corruption-check.patch: malloc: Check for large bin
list corruption when inserting unsorted chunk (BZ #24216)
- wfile-sync-crash.patch: Fix crash in _IO_wfile_sync (BZ #20568)
-------------------------------------------------------------------
Wed Apr 3 14:56:02 UTC 2019 - Andreas Schwab <schwab@suse.de>
- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
Japanese era (BZ #22964)
- Replace glibc_post_upgrade with lua script
-------------------------------------------------------------------
Thu Mar 7 09:01:37 UTC 2019 - Andreas Schwab <schwab@suse.de>
- add-new-Fortran-vector-math-header-file.patch: Update from upstream
-------------------------------------------------------------------
Tue Mar 5 10:38:30 UTC 2019 - Andreas Schwab <schwab@suse.de>
- regex-read-overrun.patch: fix read overrun (CVE-2019-9169, bsc#1127308,
BZ #24114)
- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
(bsc#1117993, BZ #23973)
-------------------------------------------------------------------
Thu Feb 21 08:37:00 UTC 2019 - Martin Liška <mliska@suse.cz>
- Add add-new-Fortran-vector-math-header-file.patch.
-------------------------------------------------------------------
Mon Feb 18 09:28:08 UTC 2019 - schwab@suse.de
- pthread-rwlock-trylock-stalls.patch: nptl: Fix pthread_rwlock_try*lock
stalls (BZ #23844)
- arm-systemtap-probe-constraint.patch: arm: Use "nr" constraint for
Systemtap probes (BZ #24164)
- pthread-mutex-barrier.patch: Add compiler barriers around modifications
of the robust mutex list for pthread_mutex_trylock (BZ #24180)
- fork-handler-lock.patch: nptl: Avoid fork handler lock for
async-signal-safe fork (BZ #24161)
- pthread-join-probe.patch: nptl: Fix invalid Systemtap probe in
pthread_join (BZ #24211)
- riscv-clone-unwind.patch: RISC-V: Fix elfutils testsuite unwind failures
(BZ #24040)
-------------------------------------------------------------------
Fri Feb 1 10:34:39 UTC 2019 - schwab@suse.de
- Update to glibc 2.29
* The getcpu wrapper function has been added, which returns the currently
used CPU and NUMA node
* Optimized generic exp, exp2, log, log2, pow, sinf, cosf, sincosf and tanf
* The reallocarray function is now declared under _DEFAULT_SOURCE, not just
for _GNU_SOURCE, to match BSD environments
* For powercp64le ABI, Transactional Lock Elision is now enabled iff kernel
indicates that it will abort the transaction prior to entering the kernel
(PPC_FEATURE2_HTM_NOSC on hwcap2)
* The functions posix_spawn_file_actions_addchdir_np and
posix_spawn_file_actions_addfchdir_np have been added, enabling
posix_spawn and posix_spawnp to run the new process in a different
directory
* The popen and system do not run atfork handlers anymore (BZ#17490)
* strftime's default formatting of a locale's alternative year (%Ey)
has been changed to zero-pad the year to a minimum of two digits,
like "%y"
* As a GNU extension, the '_' and '-' flags can now be applied to
"%EY" to control how the year number is formatted
* The glibc.tune tunable namespace has been renamed to glibc.cpu and the
tunable glibc.tune.cpu has been renamed to glibc.cpu.name
* The type of the pr_uid and pr_gid members of struct elf_prpsinfo, defined
in <sys/procfs.h>, has been corrected to match the type actually used by
the Linux kernel
* An archaic GNU extension to scanf, under which '%as', '%aS', and '%a[...]'
meant to scan a string and allocate space for it with malloc, is now
restricted to programs compiled in C89 or C++98 mode with _GNU_SOURCE
defined
- unwind-ctor.patch, old-getdents64.patch, nss-files-leak.patch,
riscv-feholdexcept-setround.patch,
pthread-cond-broadcast-waiters-after-spinning.patch,
regex-uninit-memory-access.patch, spawni-maybe-script-execute.patch,
gethostid-gethostbyname-failure.patch, strstr-huge-needle.patch,
pthread-mutex-lock-elision-race.patch, x86-haswell-string-flags.patch,
if-nametoindex-descr-leak.patch, riscv-flush-icache.patch: Removed
- CVE-2016-10739
- bsc#1114984
- bsc#1114993
- bsc#1122729
- bsc#1131330
- bsc#1149332
- bsc#1151582
- bsc#1164505
-------------------------------------------------------------------
Wed Jan 9 14:21:04 UTC 2019 - schwab@suse.de
- fnmatch-collating-elements.patch: update
- riscv-flush-icache.patch: fix for compiling against 4.20 headers
-------------------------------------------------------------------
Wed Nov 28 09:52:49 UTC 2018 - schwab@suse.de
- if-nametoindex-descr-leak.patch: if_nametoindex: Fix descriptor leak for
overlong name (CVE-2018-19591, BZ #23927, bsc#1117603)
-------------------------------------------------------------------
Wed Nov 7 17:24:35 UTC 2018 - Jan Engelhardt <jengelh@inai.de>
- Fix typography for glibc-locale-base.
-------------------------------------------------------------------
Wed Nov 7 11:09:05 UTC 2018 - schwab@suse.de
- pthread-mutex-lock-elision-race.patch: Fix race in pthread_mutex_lock
while promoting to PTHREAD_MUTEX_ELISION_NP (BZ #23275)
- x86-haswell-string-flags.patch: x86: Fix Haswell CPU string flags (BZ
#23709)
-------------------------------------------------------------------
Wed Sep 26 09:41:59 UTC 2018 - schwab@suse.de
- unwind-ctor.patch: Add missing unwind information to ld.so on powerpc32
(BZ #23707)
- old-getdents64.patch: Rewrite __old_getdents64 (BZ #23497)
- nss-files-leak.patch: Fix file stream leak in aliases lookup (BZ #23521)
- riscv-feholdexcept-setround.patch: Fix rounding save/restore bug
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
waiters-after-spinning case (BZ #23538)
- regex-uninit-memory-access.patch: fix uninitialized memory access (BZ
#23578)
- spawni-maybe-script-execute.patch: Fix segfault in maybe_script_execute
- gethostid-gethostbyname-failure.patch: Check for NULL value from
gethostbyname_r (BZ #23679)
- strstr-huge-needle.patch: Fix strstr bug with huge needles (BZ #23637)
-------------------------------------------------------------------
Wed Sep 12 06:47:33 UTC 2018 - schwab@suse.de
- Add libpng-devel and zlib-devel for utils build
-------------------------------------------------------------------
Wed Aug 15 13:53:41 UTC 2018 - schwab@suse.de
- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
en_US.UTF-8 locales (fate#326551)
-------------------------------------------------------------------
Thu Aug 2 07:48:07 UTC 2018 - schwab@suse.de
- Update to glibc 2.28
* The localization data for ISO 14651 is updated to match the 2016
Edition 4 release of the standard, this matches data provided by
Unicode 9.0.0
* Unicode 11.0.0 Support: Character encoding, character type info, and
transliteration tables are all updated to Unicode 11.0.0, using
generator scripts contributed by Mike FABIAN (Red Hat)
* <math.h> functions that round their results to a narrower type are added
from TS 18661-1:2014 and TS 18661-3:2015
* Two grammatical forms of month names are now supported
* The renameat2 function has been added, a variant of the renameat function
which has a flags argument
* The statx function has been added, a variant of the fstatat64
function with an additional flags argument
* IDN domain names in getaddrinfo and getnameinfo now use the system libidn2
library if installed
* Parsing of dynamic string tokens in DT_RPATH, DT_RUNPATH, DT_NEEDED,
DT_AUXILIARY, and DT_FILTER has been expanded to support the full
range of ELF gABI expressions including such constructs as
'$ORIGIN$ORIGIN' (if valid)
* Support for ISO C threads (ISO/IEC 9899:2011) has been added.
* The nonstandard header files <libio.h> and <_G_config.h> are no longer
installed
* The stdio functions 'getc' and 'putc' are no longer defined as macros
* All stdio functions now treat end-of-file as a sticky condition
* The macros 'major', 'minor', and 'makedev' are now only available from
the header <sys/sysmacros.h>
* The obsolete function ustat is no longer available to newly linked
binaries; the headers <ustat.h> and <sys/ustat.h> have been removed
* The obsolete function nfsservctl is no longer available to newly linked
binaries
* The obsolete function name llseek is no longer available to newly linked
binaries
* The AI_IDN_ALLOW_UNASSIGNED and NI_IDN_ALLOW_UNASSIGNED flags for the
getaddrinfo and getnameinfo functions have been deprecated
* The AI_IDN_USE_STD3_ASCII_RULES and NI_IDN_USE_STD3_ASCII_RULES flags for
the getaddrinfo and getnameinfo functions have been deprecated
* The fcntl function now have a Long File Support variant named fcntl64
* CVE-2016-6261, CVE-2016-6263, CVE-2017-14062: Various vulnerabilities have
been fixed by removing the glibc-internal IDNA implementation and using
the system-provided libidn2 library instead
- Split off all libcrypt related functions into package libxcrypt
- fix-locking-in-_IO_cleanup.patch, fnmatch-collating-elements.patch:
Rediff
- aarch64-sys-ptrace-update.patch,
crypt_blowfish-1.2-hack_around_arm.diff, crypt_blowfish-1.2-sha.diff,
crypt_blowfish-const.patch, crypt_blowfish-gensalt.patch,
glibc-2.14-crypt.diff, i386-memmove-sse2-unaligned.patch,
i386-sigaction-sa-restorer.patch, mempcpy-avx512.patch,
netgroup-cache-keys.patch, nss-database-multiple-dfn.patch,
pkey-get-reserved-name.patch, powerpc-sys-ptrace-undefine-macros.patch,
powerpc-sys-ptrace-update.patch, realpath-ssize-max-overflow.patch,
res-send-enomem.patch, riscv-fmax-fmin-nan.patch,
riscv-kernel-sigaction.patch, riscv-readelflib.patch,
riscv-tls-init.patch: Removed
- glibc_post_upgrade.c: Don't reload init (bsc#1103124)
- CVE-2009-5155, CVE-2015-8985
- bsc#1092877
- bsc#1102526
- bsc#1112570
- bsc#1126590
- bsc#1127223
-------------------------------------------------------------------
Tue Jun 19 08:37:43 UTC 2018 - schwab@suse.de
- Use python3-pexpect instead of python-pexpect
-------------------------------------------------------------------
Thu Jun 14 12:29:54 UTC 2018 - schwab@suse.de
- riscv-kernel-sigaction.patch: fix struct kernel_sigaction to match the
kernel version (BZ #23069)
-------------------------------------------------------------------
Mon Jun 4 08:18:44 UTC 2018 - schwab@suse.de
- glibc-2.3.90-langpackdir.diff: No longer search in /usr/share/locale-bundle
-------------------------------------------------------------------
Wed May 23 08:18:00 UTC 2018 - schwab@suse.de
- mempcpy-avx512.patch: Don't write beyond destination in
__mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- Use %license also for COPYING, COPYING.LIB
-------------------------------------------------------------------
Thu Apr 12 08:12:30 UTC 2018 - schwab@suse.de
- Readd nis to netgroup and automount nss config (bsc#1088860)
-------------------------------------------------------------------
Thu Mar 29 09:53:52 UTC 2018 - schwab@suse.de
- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
-------------------------------------------------------------------
Tue Mar 27 11:30:49 UTC 2018 - schwab@suse.de
- res-send-enomem.patch: Fix crash in resolver on memory allocation
failure (bsc#1086690, BZ #23005)
-------------------------------------------------------------------
Thu Mar 22 09:48:53 UTC 2018 - schwab@suse.de
- pkey-get-reserved-name.patch: Linux: use reserved name __key in pkey_get
(BZ #22797)
- aarch64-sys-ptrace-update.patch: linux/aarch64: sync sys/ptrace.h with
Linux 4.15 (BZ #22433)
- powerpc-sys-ptrace-undefine-macros.patch: powerpc: Undefine Linux ptrace
macros that conflict with __ptrace_request
- powerpc-sys-ptrace-update.patch: linux/powerpc: sync sys/ptrace.h with
Linux 4.15 (BZ #22433, BZ #22807)
- netgroup-cache-keys.patch: Fix netgroup cache keys (BZ #22342)
- i386-sigaction-sa-restorer.patch: i386: Fix i386 sigaction sa_restorer
initialization (BZ #21269)
- riscv-tls-init.patch: RISC-V: Do not initialize $gp in TLS macros
- riscv-fmax-fmin-nan.patch: RISC-V: fmax/fmin: Handle signalling NaNs
correctly (BZ #22884)
-------------------------------------------------------------------
Wed Mar 7 09:14:55 UTC 2018 - schwab@suse.de
- nss-database-multiple-dfn.patch: Fix multiple definitions of
__nss_*_database (BZ #22918)
-------------------------------------------------------------------
Thu Feb 22 15:10:32 UTC 2018 - fvogt@suse.com
- Use %license (boo#1082318)
-------------------------------------------------------------------
Wed Feb 14 12:00:49 UTC 2018 - schwab@suse.de
- Add systemtap-headers to BuildRequires
- Add --enable-systemtap to configure arguments (fate#324969, bsc#1073636)
-------------------------------------------------------------------
Tue Feb 13 10:27:32 UTC 2018 - schwab@suse.de
- riscv-readelflib.patch: Fix parsing flags in ELF64 files on riscv
-------------------------------------------------------------------
Mon Feb 5 08:49:13 UTC 2018 - schwab@suse.de
- Update to glibc 2.27
* Optimized x86-64 asin, atan2, exp, expf, log, pow, atan, sin, cosf,
sinf, sincosf and tan with FMA
* Optimized x86-64 trunc and truncf for processors with SSE4.1
* Optimized generic expf, exp2f, logf, log2f, powf, sinf, cosf and
sincosf
* In order to support faster and safer process termination the malloc API
family of functions will no longer print a failure address and stack
backtrace after detecting heap corruption
* The abort function terminates the process immediately, without flushing
stdio streams
* On platforms where long double has the IEEE binary128 format (aarch64,
alpha, mips64, riscv, s390 and sparc), the math library now implements
_Float128 interfaces for that type, as defined by ISO/IEC TS 18661-3:2015
These are the same interfaces added in version 2.26 for some platforms where
this format is supported but is not the format of long double
* On platforms with support for _Float64x (aarch64, alpha, i386, ia64,
mips64, powerpc64le, riscv, s390, sparc and x86_64), the math library now
implements interfaces for that type, as defined by ISO/IEC TS
18661-3:2015
* The math library now implements interfaces for the _Float32, _Float64 and
_Float32x types, as defined by ISO/IEC TS 18661-3:2015
* glibc now implements the memfd_create and mlock2 functions on Linux
* Support for memory protection keys was added
* The copy_file_range function was added
* The ldconfig utility now processes `include' directives using the C/POSIX
collation ordering
* Support for two grammatical forms of month names has been added
* Support for the RISC-V ISA running on Linux has been added
* Statically compiled applications attempting to load locales compiled for the
GNU C Library version 2.27 will fail and fall back to the builtin C/POSIX
locale
* Support for statically linked applications which call dlopen is deprecated
and will be removed in a future version of glibc
* Support for old programs which use internal stdio data structures and
functions is deprecated
* On GNU/Linux, the obsolete Linux constant PTRACE_SEIZE_DEVEL is no longer
defined by <sys/ptrace.h>
* libm no longer supports SVID error handling (calling a user-provided
matherr function on error) or the _LIB_VERSION variable to control error
handling
* The libm functions pow10, pow10f and pow10l are no longer supported for
new programs
* The mcontext_t type is no longer the same as struct sigcontext
* The add-ons mechanism for building additional packages at the same time as
glibc has been removed
* The res_hnok, res_dnok, res_mailok and res_ownok functions now check that
the specified string can be parsed as a domain name
* In the malloc_info output, the <heap> element may contain another <aspace>
element, "subheaps", which contains the number of sub-heaps
* In the malloc_info output, the <heap> element may contain another <aspace>
element, "subheaps", which contains the number of sub-heaps
* The nonstandard header files <libio.h> and <_G_config.h> are deprecated
and will be removed in a future release
* CVE-2018-6485, CVE-2018-6551: The posix_memalign and memalign
functions, when called with an object size near the value of SIZE_MAX,
would return a pointer to a buffer which is too small, instead of NULL
(bsc#1079036)
- Support for Sun RPC is no longer available, use libtirpc instead
- glibc-nodate.patch, powerpc-elision-enable-envvar.patch,
s390-elision-enable-envvar.patch, resolv-context-leak.patch,
dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
math-c++-compat.patch, remove-nss-nis-compat.patch,
eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
nscd-libnsl.patch, malloc-tcache-leak.patch,
falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
nss-files-large-buffers.patch. sysconf-uio-maxiov.patch,
glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
ldd-system-interp.patchabort-no-flush.patch: Removed
- All patches refreshed
- bsc#1063675
-------------------------------------------------------------------
Tue Jan 30 16:42:14 UTC 2018 - schwab@suse.de
- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
(bsc#1070491, BZ #15142)
-------------------------------------------------------------------
Tue Jan 30 15:04:47 UTC 2018 - schwab@suse.de
- Avoid duplicate source rpm
-------------------------------------------------------------------
Mon Jan 22 10:32:36 UTC 2018 - schwab@suse.de
- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)
-------------------------------------------------------------------
Tue Jan 2 10:43:09 UTC 2018 - schwab@suse.de
- dl-init-paths-overflow.patch: Count components of the expanded path in
_dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
#22607, BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
-------------------------------------------------------------------
Wed Dec 13 15:04:54 UTC 2017 - schwab@suse.de
- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)
-------------------------------------------------------------------
Tue Dec 12 10:37:21 UTC 2017 - schwab@suse.de
- Add _multibuild
-------------------------------------------------------------------
Mon Nov 27 11:11:07 UTC 2017 - schwab@suse.de
- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source
-------------------------------------------------------------------
Thu Oct 26 15:25:07 UTC 2017 - schwab@suse.de
- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)
-------------------------------------------------------------------
Thu Oct 26 08:40:52 UTC 2017 - schwab@suse.de
- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
#22273)
-------------------------------------------------------------------
Mon Oct 23 09:35:18 UTC 2017 - schwab@suse.de
- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
#22111)
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
#22321)
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
(CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
_dl_runtime_resolve (BZ #21265)
-------------------------------------------------------------------
Tue Oct 10 15:47:05 UTC 2017 - schwab@suse.de
- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)
-------------------------------------------------------------------
Mon Oct 9 08:03:28 UTC 2017 - schwab@suse.de
- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove
-------------------------------------------------------------------
Wed Oct 4 12:14:30 UTC 2017 - schwab@suse.de
- nss-compat.patch: Move nss_compat from nis to nss subdir and install it
unconditionally
- nsswitch.conf: switch back to compat for passwd, group, shadow
-------------------------------------------------------------------
Thu Sep 28 07:57:52 UTC 2017 - schwab@suse.de
- assert-pedantic.patch: Suppress pedantic warning caused by statement
expression (BZ #21242, BZ #21972)
- math-c++-compat.patch: Add more C++ compatibility (BZ #22235)
- getaddrinfo-errno.patch: Fix errno and h_errno handling in getaddrinfo
(BZ #21915, BZ #21922)
- resolv-conf-oom.patch: Fix memory handling in OOM situation during
resolv.conf parsing (BZ #22095, BZ #22096)
- dynarray-allocation.patch: Fix initial size of dynarray allocation and
set errno on overflow error
- nearbyint-inexact.patch: Avoid spurious inexact in nearbyint (BZ #22225)
-------------------------------------------------------------------
Mon Sep 25 10:12:24 UTC 2017 - schwab@suse.de
- math-c++-compat.patch: add more C++ compatibility (BZ #22146)
-------------------------------------------------------------------
Tue Sep 12 06:37:36 UTC 2017 - schwab@suse.de
- Remove rpcsvc/yppasswd.* from glibc-devel
- ld-so-hwcap-x86-64.patch: add x86_64 to hwcap (bsc#1056606, BZ #22093)
-------------------------------------------------------------------
Thu Aug 31 13:43:07 UTC 2017 - schwab@suse.de
- eh-frame-zero-terminator.patch: Properly terminate .eh_frame (BZ #22051)
-------------------------------------------------------------------
Thu Aug 31 07:06:20 UTC 2017 - schwab@suse.de
- Disable obsolete libnsl and NIS support
- remove-nss-nis-compat.patch: remove nis and compat from default NSS
configs
- nsswitch.conf: Likewise
-------------------------------------------------------------------
Tue Aug 29 07:13:42 UTC 2017 - schwab@suse.de
- math-c++-compat.patch: Do not use __builtin_types_compatible_p in C++
mode (BZ #21930)
-------------------------------------------------------------------
Thu Aug 17 12:46:46 UTC 2017 - schwab@suse.de
- Add iconvconfig to baselibs.conf (bsc#1051042)
-------------------------------------------------------------------
Thu Aug 10 08:05:15 UTC 2017 - schwab@suse.de
- resolv-context-leak.patch: Fix leaks of resolver contexts
- dl-runtime-resolve-opt-avx512f.patch: Use _dl_runtime_resolve_opt only
with AVX512F (BZ #21871)
- libpthread-compat-wrappers.patch: Don't use IFUNC resolver for longjmp
or system in libpthread (BZ #21041)
-------------------------------------------------------------------
Wed Aug 2 14:32:58 UTC 2017 - schwab@suse.de
- Update to glibc 2.26
* A per-thread cache has been added to malloc
* Unicode 10.0.0 Support
* Improvements to the DNS stub resolver
* New function reallocarray, which resizes an allocated block (like
realloc) to the product of two sizes, with a guaranteed clean failure
upon integer overflow in the multiplication
* New wrappers for the Linux-specific system calls preadv2 and pwritev2
* posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to
create a new session ID for the spawned process
* errno.h is now safe to use from C-preprocessed assembly language on all
supported operating systems
* On ia64, powerpc64le, x86-32, and x86-64, the math library now implements
128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE
754-2008) and ISO/IEC TS 18661-3:2015
* The synchronization that pthread_spin_unlock performs has been changed to
now be equivalent to a C11 atomic store with release memory order to the
spin lock's memory location
* The DNS stub resolver no longer performs EDNS fallback
* res_mkquery and res_nmkquery no longer support the IQUERY opcode
* The _res_opcodes variable has been removed from libresolv
* <string.h> no longer includes inline versions of any string functions,
as this kind of optimization is better done by the compiler
* The nonstandard header <xlocale.h> has been removed
* The obsolete header <sys/ultrasound.h> has been removed
* The obsolete signal constant SIGUNUSED is no longer defined by <signal.h>
* The obsolete function cfree has been removed
* The stack_t type no longer has the name struct sigaltstack
* The ucontext_t type no longer has the name struct ucontext
* On S/390 GNU/Linux, the constants defined by <sys/ptrace.h> have been
synced with the kernel
* Linux kernel 3.2 or later is required at runtime, on all architectures
supported by that kernel
* The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes,
to avoid fragmentation-based spoofing attacks (CVE-2017-12132)
* LD_LIBRARY_PATH is now ignored in binaries running in privileged
AT_SECURE mode to guard against local privilege escalation attacks
(CVE-2017-1000366)
* Avoid printing a backtrace from the __stack_chk_fail function since it
is called on a corrupt stack and a backtrace is unreliable on a
corrupt stack (CVE-2010-3192)
* A use-after-free vulnerability in clntudp_call in the Sun RPC system
has been fixed (CVE-2017-12133)
* fate#322258, fate#321513, fate#322453
- fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff,
i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch,
sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch,
tunables-bigendian.patch: Removed
- bsc#1074208
-------------------------------------------------------------------
Tue Jul 25 07:32:25 UTC 2017 - schwab@suse.de
- Fix RPM group
-------------------------------------------------------------------
Thu Jul 20 12:17:21 UTC 2017 - schwab@suse.de
- s390-elision-enable-envvar.patch: enable TLE only if
GLIBC_ELISION_ENABLE=yes is defined (fate#322271)
-------------------------------------------------------------------
Wed Jun 21 15:15:12 UTC 2017 - schwab@suse.de
- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)
-------------------------------------------------------------------
Wed Jun 14 12:22:21 UTC 2017 - schwab@suse.de
- Remove glibc-cpusetsize.diff, no longer useful
-------------------------------------------------------------------
Wed May 31 10:35:31 UTC 2017 - schwab@suse.de
- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123,
BZ #21289)
-------------------------------------------------------------------
Mon May 29 18:10:31 UTC 2017 - schwab@suse.de
- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h
aliasing
-------------------------------------------------------------------
Mon May 29 10:24:22 UTC 2017 - schwab@suse.de
- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE
locales (bsc#1039502)
-------------------------------------------------------------------
Tue May 23 09:54:08 UTC 2017 - schwab@suse.de
- Remove glibc-testsuite.patch, no longer relevant
-------------------------------------------------------------------
Mon May 22 10:04:59 UTC 2017 - schwab@suse.de
- Use multibuild feature
- Remove obsolete check-build.sh
- glibc.rpmlintrc: remove obsolete entries
- Use %tmpfiles_create in nscd postin
-------------------------------------------------------------------
Wed Mar 29 13:09:49 UTC 2017 - schwab@suse.de
- i686-memchr-sse.patch: Fix i686 memchr overflow calculation
(bsc#1031021, BZ #21182)
- sunrpc-use-after-free.patch: Avoid use-after-free read access in
clntudp_call (BZ #21115)
- Build testsuite with gdb and python-pexpect to enable more tests
-------------------------------------------------------------------
Wed Feb 8 09:38:15 UTC 2017 - schwab@suse.de
- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ
#21109)
-------------------------------------------------------------------
Sun Feb 5 18:26:21 UTC 2017 - schwab@suse.de
- Update to glibc 2.25
* The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR
24731-2:2010, is supported to enable declarations of functions from that
TR.
* The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS
18661-1:2014, is supported to enable declarations of functions and macros
from that TS.
* The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS
18661-4:2015, is supported to enable declarations of functions and macros
from that TS.
* The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are
now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L.
* The inclusion of <sys/sysmacros.h> by <sys/types.h> is deprecated.
* New <fenv.h> features from TS 18661-1:2014 are added to libm: the
fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the
femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros.
* Integer width macros from TS 18661-1:2014 are added to <limits.h>:
CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH,
UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to
<stdint.h>: INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH,
INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH,
UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH,
INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH,
UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH,
UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH,
UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH,
UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH,
WINT_WIDTH.
* New <math.h> features are added from TS 18661-1:2014:
- Signaling NaN macros: SNANF, SNAN, SNANL.
- Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp,
fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf,
fromfpxl, ufromfpx, ufromfpxf, ufromfpxl.
- llogb functions: the llogb, llogbf and llogbl functions, and the
FP_LLOGB0 and FP_LLOGBNAN macros.
- Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag,
fminmagf, fminmagl.
- Comparison macros: iseqsig.
- Classification macros: iscanonical, issubnormal, iszero.
- Total order functions: totalorder, totalorderf, totalorderl,
totalordermag, totalordermagf, totalordermagl.
- Canonicalize functions: canonicalize, canonicalizef, canonicalizel.
- NaN functions: getpayload, getpayloadf, getpayloadl, setpayload,
setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl.
* The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014,
are added to libc.
* Most of glibc can now be built with the stack smashing protector enabled.
* The function explicit_bzero, from OpenBSD, has been added to libc.
* On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined
to float instead of double.
* On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the
float_t and double_t types are now defined to long double instead of float
and double.
* The getentropy and getrandom functions, and the <sys/random.h> header file
have been added.
* The buffer size for byte-oriented stdio streams is now limited to 8192
bytes by default.
* The <sys/quota.h> header now includes the <linux/quota.h> header.
* The malloc_get_state and malloc_set_state functions have been removed.
* The “ip6-dotint” and “no-ip6-dotint” resolver options, and the
corresponding RES_NOIP6DOTINT flag from <resolv.h> have been removed.
* The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING
flag from <resolv.h> have been removed.
* The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG,
RES_BLAST defined in the <resolv.h> header file have been deprecated.
* The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for
_res.flags are deprecated.
* DNSSEC-related declarations and definitions have been removed from the
<arpa/nameser.h> header file, and libresolv will no longer attempt to
decode the data part of DNSSEC record types.
* The resource record type classification macros ns_t_qt_p, ns_t_mrr_p,
ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the
<arpa/nameser.h> header file because the distinction between RR types and
meta-RR types is not officially standardized, subject to revision, and
thus not suitable for encoding in a macro.
* The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook
and rhook members of the res_state type in <resolv.h> have been removed.
* For multi-arch support it is recommended to use a GCC which has
been built with support for GNU indirect functions.
* GDB pretty printers have been added for mutex and condition variable
structures in POSIX Threads.
* Tunables feature added to allow tweaking of the runtime for an application
program.
* A new version of condition variables functions have been implemented in
the NPTL implementation of POSIX Threads to provide stronger ordering
guarantees.
* A new version of pthread_rwlock functions have been implemented to use a more
scalable algorithm primarily through not using a critical section anymore to
make state changes.
* On ARM EABI (32-bit), generating a backtrace for execution contexts which
have been created with makecontext could fail to terminate due to a
missing .cantunwind annotation. (CVE-2016-6323)
* The DNS stub resolver functions would crash due to a NULL pointer
dereference when processing a query with a valid DNS question type which
was used internally in the implementation. (CVE-2015-5180)
- Enable stack protector if part of %optflags
- startcontext-cantunwind.patch: Removed
- cpuid-assertion.patch: Removed
-------------------------------------------------------------------
Thu Oct 13 08:24:22 UTC 2016 - schwab@suse.de
- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)
-------------------------------------------------------------------
Wed Oct 5 15:01:46 UTC 2016 - schwab@suse.de
- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to
/var/lib/nscd
- glibc-2.3.90-langpackdir.diff: simplify
-------------------------------------------------------------------
Tue Aug 2 13:55:44 UTC 2016 - schwab@suse.de
- Update to glibc 2.24
* The minimum Linux kernel version that this version of the GNU C Library
can be used with is 3.2
* The pap_AN locale has been deleted
* The readdir_r and readdir64_r functions have been deprecated
* The type `union wait' has been removed
* A new NSS action is added to facilitate large distributed system
administration
* The deprecated __malloc_initialize_hook variable has been removed from
the API
* The long unused localedef --old-style option has been removed
* nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added
to libm
* An unnecessary stack copy in _nss_dns_getnetbyname_r was removed
(CVE-2016-3075)
* Previously, getaddrinfo copied large amounts of address data to the
stack, even after the fix for CVE-2013-4458 has been applied,
potentially resulting in a stack overflow. getaddrinfo now uses a
heap allocation instead (CVE-2016-3706)
* The glob function suffered from a stack-based buffer overflow when it
was called with the GLOB_ALTDIRFUNC flag and encountered a long file
name (CVE-2016-1234)
* The Sun RPC UDP client could exhaust all available stack space when
flooded with crafted ICMP and UDP messages (CVE-2016-4429)
* The IPv6 name server management code in libresolv could result in a
memory leak for each thread which is created, performs a failing
naming lookup, and exits (CVE-2016-5417)
- startcontext-cantunwind.patch: mark __startcontext as .cantunwind
(bsc#974800, BZ #20435)
- Removed patches:
* 0001-Updated-translations-for-2.23.patch
* 0002-Regenerate-libc.pot-for-2.23.patch
* 0003-Regenerated-configure-scripts.patch
* 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch
* 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch
* 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
* 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch
* 0008-Update-NEWS.patch
* 0009-sln-use-stat64.patch
* 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch
* 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch
* 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch
* 0013-Mention-BZ-19762-in-NEWS.patch
* 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch
* 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch
* 0016-Fix-resource-leak-in-resolver-bug-19257.patch
* 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch
* 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch
* 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch
* 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch
* 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch
* 0022-configure-fix-test-usage.patch
* 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
* 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch
* 0025-getnameinfo-Do-not-preserve-errno.patch
* 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch
* 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch
* 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch
* 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch
* 0030-hesiod-Remove-RCS-keywords.patch
* 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch
* 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch
* 0033-malloc-Remove-NO_THREADS.patch
* 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch
* 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch
* 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch
* 0037-malloc-Add-missing-internal_function-attributes-on-f.patch
* 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch
* 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch
* 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch
* 0041-nss_dns-Check-address-length-before-creating-addrinf.patch
* 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch
* 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch
* 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch
* 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch
* 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch
* 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch
* 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch
* 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
* 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch
* 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch
* 0052-Fix-tst-dlsym-error-build.patch
* 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch
* 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch
* 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch
* 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch
* clntudp-call-alloca.patch
* glibc-memset-nontemporal.diff
* nis-initgroups-status.patch
* nscd-gc-crash.patch
* robust-mutex-deadlock.patch
* strncat-avoid-array-bounds-warning.patch
-------------------------------------------------------------------
Wed Jun 29 12:50:21 UTC 2016 - schwab@suse.de
- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for
stncat on i586 (BZ #20260)
- Update glibc.keyring
- Unset MALLOC_CHECK_ during testsuite run
-------------------------------------------------------------------
Thu Jun 23 07:41:06 UTC 2016 - schwab@suse.de
- nsswitch.conf: Add fallback to files for passwd and group to prepare for
libnsl removal.
-------------------------------------------------------------------
Wed Jun 22 09:08:02 UTC 2016 - schwab@suse.de
- nis-initgroups-status.patch: Return proper status from
_nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
check for timeout (bsc#985170, BZ #20263)
-------------------------------------------------------------------
Thu Jun 9 09:17:10 UTC 2016 - schwab@suse.de
- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
#19755)
-------------------------------------------------------------------
Mon May 30 08:23:03 UTC 2016 - schwab@suse.de
- clntudp-call-alloca.patch: do not use alloca in clntudp_call
(CVE-2016-4429, bsc#980854, BZ #20112)
-------------------------------------------------------------------
Wed May 11 09:33:47 UTC 2016 - schwab@suse.de
- Import patches from 2.23 branch
0001-Updated-translations-for-2.23.patch
0002-Regenerate-libc.pot-for-2.23.patch
0003-Regenerated-configure-scripts.patch
0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch
0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch
0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch
0008-Update-NEWS.patch
0009-sln-use-stat64.patch
0010-Add-sys-auxv.h-wrapper-to-include-sys.patch
0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch
0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch
0013-Mention-BZ-19762-in-NEWS.patch
0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch
0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch
0016-Fix-resource-leak-in-resolver-bug-19257.patch
0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch
0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch
0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch
0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch
0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch
0022-configure-fix-test-usage.patch
0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch
0025-getnameinfo-Do-not-preserve-errno.patch
0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch
0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch
0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch
0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch
0030-hesiod-Remove-RCS-keywords.patch
0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch
0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch
0033-malloc-Remove-NO_THREADS.patch
0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch
0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch
0036-malloc-Remove-malloc-hooks-from-fork-handler.patch
0037-malloc-Add-missing-internal_function-attributes-on-f.patch
0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch
0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch
0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch
0041-nss_dns-Check-address-length-before-creating-addrinf.patch
0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch
0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch
0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch
0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch
0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch
0047-strfmon_l-Use-specified-locale-for-number-formatting.patch
0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch
0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch
0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch
0052-Fix-tst-dlsym-error-build.patch
0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch
0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch
0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch
0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch
- CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727
- resolv-mem-leak.patch: renamed to
0016-Fix-resource-leak-in-resolver-bug-19257.patch
- no-long-double.patch: renamed to
0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
- glibc-gcc6.patch: renamed to
0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
-------------------------------------------------------------------
Mon May 9 14:00:41 UTC 2016 - schwab@suse.de
- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories
- glibc-2.3.locales.diff.bz2: likewise
-------------------------------------------------------------------
Mon Apr 25 08:55:47 UTC 2016 - jslaby@suse.com
- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with
-Wparentheses
-------------------------------------------------------------------
Mon Apr 11 08:00:07 UTC 2016 - schwab@suse.de
- Add compatibility symlinks for LSB 3.0 (fate#318933)
-------------------------------------------------------------------
Mon Mar 21 11:57:49 UTC 2016 - schwab@suse.de
- powerpc-elision-enable-envvar.patch: enable TLE only if
GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)
-------------------------------------------------------------------
Tue Mar 15 10:44:46 UTC 2016 - schwab@suse.de
- ldd-system-interp.patch: Restore warning about execution permission, it
is still needed for noexec mounts (bsc#915985)
-------------------------------------------------------------------
Tue Mar 8 15:28:16 UTC 2016 - idonmez@suse.com
- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8)
and rh#902094 . Added with glibc-c-utf8-locale.patch.
- Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for
C.UTF-8 same as C locale.
-------------------------------------------------------------------
Mon Mar 7 14:47:50 UTC 2016 - schwab@suse.de
- Move %install_info_delete to %preun
- crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer
acceptable
-------------------------------------------------------------------
Tue Feb 23 16:11:36 UTC 2016 - schwab@suse.de
- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE
-------------------------------------------------------------------
Mon Feb 22 11:05:12 UTC 2016 - schwab@suse.de
- Update to glibc 2.23 release.
* Unicode 8.0.0 Support
* sched_setaffinity, pthread_setaffinity_np no longer attempt to guess
the kernel-internal CPU set size
* The fts.h header can now be used with -D_FILE_OFFSET_BITS=64
* getaddrinfo now detects certain invalid responses on an internal
netlink socket
* A defect in the malloc implementation, present since glibc 2.15 (2012)
or glibc 2.10 via --enable-experimental-malloc (2009), could result in
the unnecessary serialization of memory allocation requests across
threads
* The obsolete header <regexp.h> has been removed
* The obsolete functions bdflush, create_module, get_kernel_syms,
query_module and uselib are no longer available to newly linked
binaries
* Optimized string, wcsmbs and memory functions for IBM z13.
* Newly linked programs that define a variable called signgam will no
longer have it set by the lgamma, lgammaf and lgammal functions
- Removed patches:
* dont-remove-nodelete-flag.patch
* openat64-readd-o-largefile.patch
* mntent-blank-line.patch
* opendir-o-directory-check.patch
* strcoll-remove-strdiff-opt.patch
* ld-pointer-guard.patch
* tls-dtor-list-mangling.patch
* powerpc-lock-elision-race.patch
* prelink-elf-rtype-class.patch
* vector-finite-math-aliases.patch
* powerpc-elision-adapt-param.patch
* catopen-unbound-alloca.patch
* strftime-range-check.patch
* hcreate-overflow-check.patch
* errorcheck-mutex-no-elision.patch
* refactor-nan-parsing.patch
* send-dg-buffer-overflow.patch
* isinf-cxx11-conflict.patch
* ibm93x-redundant-shift-si.patch
* iconv-reset-input-buffer.patch
* tzset-tzname.patch
* static-dlopen.patch
-------------------------------------------------------------------
Thu Feb 18 13:22:19 UTC 2016 - schwab@suse.de
- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with
C++11 (bsc#963700, BZ #19439)
-------------------------------------------------------------------
Wed Feb 17 09:48:26 UTC 2016 - schwab@suse.de
- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling
(BZ #19018)
- prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits
for prelink (BZ #19178)
- vector-finite-math-aliases.patch: Better workaround for aliases of
*_finite symbols in vector math library (BZ# 19058)
- powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision
transient failure adapt param (BZ #19174)
- catopen-unbound-alloca.patch: Fix unbound alloca in catopen
(CVE-2015-8779, bsc#962739, BZ #17905)
- strftime-range-check.patch: Add range check on time fields
(CVE-2015-8776, bsc#962736, BZ #18985)
- hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778,
bsc#962737, BZ #18240)
- errorcheck-mutex-no-elision.patch: Don't do lock elision on an error
checking mutex (bsc#956716, BZ #17514)
- refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads
(CVE-2014-9761, bsc#962738, BZ #16962)
- send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer
overflow (CVE-2015-7547, bsc#961721, BZ #18665)
- powerpc-lock-elision-race.patch: renamed from
0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch
-------------------------------------------------------------------
Mon Feb 15 15:43:02 UTC 2016 - schwab@suse.de
- Add audit-devel and libcap-devel to BuildRequires, for use by nscd
-------------------------------------------------------------------
Thu Nov 26 14:46:21 UTC 2015 - schwab@suse.de
- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock
on fork (bsc#958315, BZ #19282)
-------------------------------------------------------------------
Wed Nov 18 15:09:30 UTC 2015 - schwab@suse.de
- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257)
- tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set
DST rules only (BZ #19253)
-------------------------------------------------------------------
Mon Oct 26 15:22:53 UTC 2015 - schwab@suse.de
- glibc-2.3.90-noversion.diff: use stat64
-------------------------------------------------------------------
Mon Oct 19 12:28:58 UTC 2015 - schwab@suse.de
- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777,
bsc#950944, BZ #18928)
-------------------------------------------------------------------
Mon Oct 12 08:12:10 UTC 2015 - schwab@suse.de
- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based
optimization (BZ #18589)
-------------------------------------------------------------------
Thu Oct 8 14:26:14 UTC 2015 - schwab@suse.de
- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE
error handler (BZ #18830)
-------------------------------------------------------------------
Wed Sep 30 11:48:05 UTC 2015 - normand@linux.vnet.ibm.com
- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock
0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch
-------------------------------------------------------------------
Thu Sep 24 09:41:13 UTC 2015 - schwab@suse.de
- nss-files-long-lines-2.patch: Properly reread entry after failure in
nss_files getent function (bsc#945779, BZ #18991)
-------------------------------------------------------------------
Wed Sep 16 10:21:43 UTC 2015 - schwab@suse.de
- fnmatch-collating-elements.patch: Fix fnmatch handling of collating
elements (BZ #17396, BZ #16976)
-------------------------------------------------------------------
Mon Sep 7 13:27:58 UTC 2015 - schwab@suse.de
- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works
test
- static-dlopen.patch: Static dlopen default library search path fix
(bsc#937853)
-------------------------------------------------------------------
Mon Aug 31 12:21:29 UTC 2015 - schwab@suse.de
- mntent-blank-line.patch: Fix memory corruption w/blank lines
-------------------------------------------------------------------
Mon Aug 10 09:23:57 UTC 2015 - schwab@suse.de
- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from
all loaded objects on failed dlopen
- openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64
-------------------------------------------------------------------
Wed Aug 5 09:35:41 UTC 2015 - schwab@suse.de
- Update to glibc 2.22 release.
* Cache information can be queried via sysconf() function on s390
* A buffer overflow in gethostbyname_r and related functions performing DNS
requests has been fixed. (CVE-2015-1781)
* The time zone file parser has been made more robust against crafted time
zone files
* A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors
for LD and GD on x86 and x86-64, has been implemented.
* Character encoding and ctype tables were updated to Unicode 7.0.0
* Added vector math library named libmvec
* A new fmemopen implementation has been added with the goal of POSIX
compliance.
* The header <regexp.h> is deprecated, and will be removed in a future
release.
* bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211
bsc#940195 bsc#940332 bsc#944494 bsc#968787
- Patches from upstream removed
* htm-tabort.patch
* o-tmpfile.patch
* memcpy-chk-non-SSE2.patch
* pthread-mutexattr-gettype-kind.patch
* powerpc-software-sqrt.patch
* static-tls-dtv-limit.patch
* threaded-trim-threshold.patch
* resolv-nameserver-handling.patch
* nss-separate-state-getXXent.patch
* aarch64-sigstksz.patch
* heap-top-corruption.patch
* pthread-join-deadlock.patch
-------------------------------------------------------------------
Mon Jul 27 09:08:21 UTC 2015 - schwab@suse.de
- pthread-join-deadlock.patch: Use IE model for static variables in
libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)
-------------------------------------------------------------------
Wed Jul 22 09:13:48 UTC 2015 - schwab@suse.de
- glibc-nodate.patch: fix verification of timestamp
-------------------------------------------------------------------
Tue Jul 21 07:50:22 UTC 2015 - meissner@suse.com
- also filter out -fstack-protector-strong
-------------------------------------------------------------------
Mon Jun 22 07:22:22 UTC 2015 - schwab@suse.de
- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start
before IPv6 is up (bsc#931399)
- glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.
-------------------------------------------------------------------
Tue Jun 9 08:16:46 UTC 2015 - schwab@suse.de
- Add /usr/include/gnu/lib-names-.*.h to baselibs
- pthread-join-deadlock.patch: Don't require rtld lock to store static TLS
offset in the DTV (bsc#930015, BZ #18457)
- heap-top-corruption.patch: Do not corrupt the top of a threaded heap if
top chunk is MINSIZE (BZ #18502)
-------------------------------------------------------------------
Wed Apr 8 12:50:39 UTC 2015 - mgorman@suse.com
- threaded-trim-threshold.patch: Fix regression in threaded application
malloc performance (bsc#915955, BZ #17195)
-------------------------------------------------------------------
Thu Apr 2 08:11:20 UTC 2015 - schwab@suse.de
- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)
-------------------------------------------------------------------
Mon Mar 30 09:04:49 UTC 2015 - schwab@suse.de
- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ
#17967)
- nss-separate-state-getXXent.patch: Separate internal state between
getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007)
- static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS
limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621,
BZ #17628)
-------------------------------------------------------------------
Mon Mar 9 13:05:32 UTC 2015 - schwab@suse.de
- resolv-nameserver-handling.patch: Replace with simpler version with more
compatibility
-------------------------------------------------------------------
Mon Mar 2 14:27:02 UTC 2015 - schwab@suse.de
- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs
(bsc#920084)
-------------------------------------------------------------------
Tue Feb 24 10:11:46 UTC 2015 - schwab@suse.de
- resolv-nameserver-handling.patch: Rewrite handling of nameserver
configuration in resolver
-------------------------------------------------------------------
Thu Feb 12 13:10:20 UTC 2015 - schwab@suse.de
- htm-tabort.patch: Fix TABORT encoding for little endian
-------------------------------------------------------------------
Mon Feb 9 09:26:01 UTC 2015 - schwab@suse.de
- Update to glibc 2.21 release.
* A new semaphore algorithm has been implemented in generic C code for all
machines
* Added support for TSX lock elision of pthread mutexes on powerpc32,
powerpc64 and powerpc64le
* Optimized strcpy, stpcpy, strchrnul and strrchr implementations for
AArch64
* i386 memcpy functions optimized with SSE2 unaligned load/store
* New locales: tu_IN, bh_IN, raj_IN, ce_RU
* The obsolete sigvec function has been removed
* CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402
CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222
- Patches from upstream removed
* ifunc-x86-slow-sse4.patch
* pthread-mutex-trylock-elision.patch
- o-tmpfile.patch: Fix value of O_TMPFILE for architectures with
non-default O_DIRECTORY (BZ #17912)
-------------------------------------------------------------------
Tue Oct 28 08:56:47 UTC 2014 - schwab@suse.de
- Update to crypt_blowfish 1.3.
* Add support for the $2b$ prefix.
- ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit
(BZ #17501)
-------------------------------------------------------------------
Mon Sep 8 09:48:26 UTC 2014 - schwab@suse.de
- Update to glibc 2.20 release.
* Reverted change of ABI data structures for s390 and s390x
* Support for file description locks is added to systems running the
Linux kernel
* Optimized strchr implementation for AArch64
* The minimum Linux kernel version that this version of the GNU C Library
can be used with is 2.6.32
* Running the testsuite no longer terminates as soon as a test fails
* The am33 port, which had not worked for several years, has been removed
from ports.
* The _BSD_SOURCE and _SVID_SOURCE feature test macros are no longer
supported; they now act the same as _DEFAULT_SOURCE (but generate a
warning)
* Optimized strcmp implementation for ARMv7
* Added support for TX lock elision of pthread mutexes on s390 and s390x
* All supported architectures now use the main glibc sysdeps directory
instead of some being in a separate "ports" directory
* The NPTL implementation of POSIX pthreads is no longer an "add-on"
* Locale names, including those obtained from environment variables (LANG
and the LC_* variables), are more tightly checked for proper syntax
* On x86-64, the dynamic linker's lazy-binding support is now compatible
with application code using Intel MPX instructions
* CVE-2013-7423 bsc#915526 bsc#934084 bsc#973010
- Patches from upstream removed
* nss-dns-memleak.patch
* sin-sign.patch
* pldd-wait-ptrace-stop.patch
* nscd-track-startup-failures.patch
* powerpc-opt-power8.patch
* check-pf-alloca.patch
* getaddrinfo-uninit-result.patch
* ppc64-copysign.patch
* nextafterl-ibm-ldouble.patch
* ibm-long-double-math.patch
* ibm-long-double-frexpl.patch
* aarch64-setcontext.patch
* nss-nis-stack-use.patch
* psfaa.patch
* nss-files-long-lines.patch
* setlocale-directory-traversal.patch
* dt-ppc64-num.patch
* ppc64le-profiling.patch
* s390-revert-abi-change.patch
* disable-gconv-translit-modules.patch
* resolv-dont-ignore-second-answer.patch
* iconv-ibm-sentinel-check.patch
- Remove sprof.1, and mtrace.1, now included in the man-pages package
(bsc#967190)
-------------------------------------------------------------------
Tue Sep 2 07:52:36 UTC 2014 - schwab@suse.de
- iconv-ibm-sentinel-check.patch: Fix crashes on invalid input in IBM
gconv modules (CVE-2014-6040, bnc#894553, BZ #17325)
-------------------------------------------------------------------
Tue Aug 26 10:47:31 UTC 2014 - schwab@suse.de
- disable-gconv-translit-modules.patch: Disable gconv transliteration
module loading (CVE-2014-5119, bnc#892073, BZ #17187)
-------------------------------------------------------------------
Mon Aug 11 10:01:54 UTC 2014 - schwab@suse.de
- pthread-mutexattr-gettype-kind.patch: Filter out
PTHREAD_MUTEX_NO_ELISION_NP bit in pthread_mutexattr_gettype
(bnc#888131, BZ #15790)
-------------------------------------------------------------------
Thu Jul 31 08:06:50 UTC 2014 - schwab@suse.de
- ppc64le-profiling.patch: fix profiling for ppc64le (bnc#889601, BZ
#17213)
- s390-revert-abi-change.patch: replace with upstream patch, switches
default symbol version back to old version (bnc#887228)
-------------------------------------------------------------------
Mon Jul 28 10:18:46 UTC 2014 - schwab@suse.de
- ibm93x-redundant-shift-si.patch: Avoid redundant shift character in
iconv output at block boundary (bnc#886416, BZ #17197)
-------------------------------------------------------------------
Thu Jul 24 15:35:50 UTC 2014 - schwab@suse.de
- s390-revert-abi-change.patch: revert back to pre-2.19 layout of jmp_buf
and ucontext_t on s390 (bnc#887228)
-------------------------------------------------------------------
Tue Jul 22 08:37:38 UTC 2014 - schwab@suse.de
- dt-ppc64-num.patch: Correct DT_PPC64_NUM (bnc#887169, BZ #17153)
-------------------------------------------------------------------
Mon Jul 14 08:33:08 UTC 2014 - schwab@suse.de
- setlocale-directory-traversal.patch: Directory traversal in locale
environment handling (CVE-2014-0475, bnc#887022, BZ #17137)
- Remove the ppc64le check-abi workaround, no longer needed
-------------------------------------------------------------------
Mon Jun 23 10:33:40 UTC 2014 - schwab@suse.de
- nss-files-long-lines.patch: Don't ignore too long lines in nss_files
(bnc#883217, BZ #17079)
- Remove locale.1, localedef.1 and iconvconfig.8 manpages, now included in
the man-pages package (bnc#880703)
- manpages.patch: update
-------------------------------------------------------------------
Mon Jun 16 08:27:38 UTC 2014 - schwab@suse.de
- psfaa.patch: copy filename argument in posix_spawn_file_actions_addopen
(CVE-2014-4043, bnc#882600, BZ #17048)
-------------------------------------------------------------------
Wed May 28 15:11:45 UTC 2014 - matz@suse.de
- glibc-memset-nontemporal.diff: Speedup memset on x86_64
(bnc#868622, BZ #16830)
-------------------------------------------------------------------
Thu May 15 15:45:03 UTC 2014 - schwab@suse.de
- add non-elision-enabled libpthread
-------------------------------------------------------------------
Mon May 12 13:22:40 UTC 2014 - schwab@suse.de
- nss-nis-stack-use.patch: fix unbound stack use in NIS NSS module (BZ
#16932)
-------------------------------------------------------------------
Wed May 7 10:13:24 UTC 2014 - schwab@suse.de
- getaddrinfo-uninit-result.patch: fix parsing of getai result for
IPv6-only request (bnc#876521)
-------------------------------------------------------------------
Thu Apr 17 09:13:32 UTC 2014 - schwab@suse.de
- ibm-long-double-frexpl.patch: Correct IBM long double frexpl
(bnc#872573, BZ #16740, BZ #16619)
-------------------------------------------------------------------
Tue Apr 15 14:23:54 UTC 2014 - schwab@suse.de
- ibm-long-double-math.patch: Remove faulty assembler implementations of
ceil, nearbyintl, roundl for IBM long double (bnc#873457, BZ #16701, BZ
#16706, BZ #16707)
-------------------------------------------------------------------
Tue Apr 15 11:00:59 UTC 2014 - aj@suse.com
- Use /run for nscd instead of /var/run.
-------------------------------------------------------------------
Mon Apr 7 09:06:32 UTC 2014 - schwab@suse.de
- pthread-mutex-destroy.patch: Remove
- pthread-mutex-trylock-elision.patch: Properly handle forced elision in
pthread_mutex_trylock (bnc#865968, BZ #16657)
-------------------------------------------------------------------
Thu Apr 3 07:32:24 UTC 2014 - schwab@suse.de
- nextafterl-ibm-ldouble.patch: Correct IBM long double nextafterl
(bnc#871637, BZ #16739)
-------------------------------------------------------------------
Tue Apr 1 13:33:24 UTC 2014 - schwab@suse.de
- Readd dependency on sysvinit.target to nscd.service (bnc#868422)
- Make the nscd service part of the nss-lookup and nss-user-lookup targets
(bnc#871386)
- Move _constraints back to main package and update it
-------------------------------------------------------------------
Tue Apr 1 07:55:19 UTC 2014 - schwab@suse.de
- ppc64-copysign.patch: Fix ppc64le copysign overwriting parent stack
frame (BZ #16786)
- aarch64-setcontext.patch: Fix aarch64 setcontext clobbering alternate
signal stack (BZ #16629)
-------------------------------------------------------------------
Mon Mar 31 13:22:56 UTC 2014 - schwab@suse.de
- powerpc-opt-power8.patch: readd POWER8 implementation of isnan,
isinf, finite with fix for little endian (bnc#871353)
- pthread-mutex-destroy.patch: Skip checks in pthread_mutex_destroy when
doing elision (bnc#865968)
-------------------------------------------------------------------
Sat Mar 29 16:41:25 UTC 2014 - schwab@suse.de
- powerpc-opt-power8.patch: remove broken POWER8 implementation of isnan,
isinf, finite; fix missing static symbols
- glibc-2.14-crypt.diff: update for file renaming
-------------------------------------------------------------------
Thu Mar 27 08:40:20 UTC 2014 - schwab@suse.de
- check-pf-alloca.patch: remove use of alloca while collecting interface
addresses
-------------------------------------------------------------------
Tue Mar 25 09:26:44 UTC 2014 - schwab@suse.de
- abort-no-flush.patch: Don't close or flush stdio streams on abort (BZ
#15436)
- fix-locking-in-_IO_cleanup.patch: always do locking when accessing
streams (bnc#796982, BZ #15142)
- resolv-dont-ignore-second-answer.patch: don't ignore second answer from
nameserver if the first one was empty (bnc#767266, BZ #13651)
- ldd-system-interp.patch: Never try to execute the file in ldd
(CVE-2009-5064, bnc#677787, BZ #16750)
-------------------------------------------------------------------
Mon Mar 24 12:26:50 UTC 2014 - schwab@suse.de
- check-pf-alloca.patch: Account for alloca use when collecting interface
addresses (bnc#785041, BZ #16002)
-------------------------------------------------------------------
Mon Mar 24 07:59:40 UTC 2014 - schwab@suse.de
- powerpc-opt-power8.patch: two more POWER8 optimisations (bnc#866711,
fate#315443)
-------------------------------------------------------------------
Thu Mar 20 14:52:47 UTC 2014 - schwab@suse.de
- getaddrinfo-uninit-result.patch: Fix use of half-initialized result in
getaddrinfo when using nscd (bnc#867636, BZ #16743)
-------------------------------------------------------------------
Thu Mar 20 07:42:50 UTC 2014 - schwab@suse.de
- Remove dependency on sysinit.target from nscd.service again (bnc#86422)
-------------------------------------------------------------------
Wed Mar 19 14:39:55 UTC 2014 - schwab@suse.de
- powerpc-opt-power8.patch: GLIBC Optimizations For POWER8 Hardware
(bnc#866711, fate#315443)
-------------------------------------------------------------------
Tue Mar 18 17:10:43 UTC 2014 - schwab@suse.de
- Make sure nscd is started after sysinit.target (bnc#868422)
- nscd-track-startup-failures.patch: properly track startup failures in
nscd and mark nscd.service as forking (BZ #16639)
-------------------------------------------------------------------
Thu Mar 6 11:37:51 UTC 2014 - schwab@suse.de
- Add services and netgroup persistent caches to nscd file list
-------------------------------------------------------------------
Wed Feb 26 09:03:25 UTC 2014 - schwab@suse.de
- sin-sign.patch: Fix sign of input to bsloww1 (BZ #16623)
- pldd-wait-ptrace-stop.patch: Update from upstream
-------------------------------------------------------------------
Mon Feb 24 11:38:41 UTC 2014 - schwab@suse.de
- nss-dns-memleak.patch: fix memory leak in nss-dns (bnc#863499)
- Don't build glibc-{extra,info,i18ndata,obsolete} and nscd for i686
-------------------------------------------------------------------
Mon Feb 10 14:24:29 UTC 2014 - schwab@suse.de
- Bump minimum kernel to 3.0
-------------------------------------------------------------------
Sun Feb 9 13:52:23 UTC 2014 - schwab@suse.de
- Update to glibc 2.19 release
-------------------------------------------------------------------
Thu Feb 6 10:38:05 UTC 2014 - schwab@suse.de
- Update to glibc 2.18.90 ee7cc3853761:
* More bug fixes
* SystemTap probes for slow multiple precision fallback paths of
transcendental functions have been introduced.
* Preliminary documentation about Multi-Thread, Async-Signal and
Async-Cancel Safety has been added.
* Change powerpc64le start ABI to 2.17
- Add /usr/local/lib64 to ld.so.conf on all lib64 platforms
- Enable profile build for aarch64
- ppc64le-abilist.patch: Removed
-------------------------------------------------------------------
Wed Jan 8 12:38:29 UTC 2014 - coolo@suse.com
- make pwdutils a real buildrequire
Requires(pre) are used during builds, but don't trigger rebuilds.
But to create clearly defined bootstrap projects, it's essential
to know what packages are required for others. So move this requires
to build to a buildrequire
-------------------------------------------------------------------
Tue Jan 7 14:30:50 UTC 2014 - schwab@suse.de
- Update to glibc 2.18.90 94c8a4bc574c:
* More bug fixes
* Slovenian translations for glibc messages have been contributed by the
Translation Project's Slovenian team of translators.
-------------------------------------------------------------------
Thu Dec 19 13:45:17 UTC 2013 - schwab@suse.de
- Update to glibc 2.18.90 83f5c32d21f7:
* Support for STT_GNU_IFUNC symbols added for ppc64
* A new feature test macro _DEFAULT_SOURCE is available
* The _BSD_SOURCE feature test macro no longer enables BSD interfaces
that conflict with POSIX. The libbsd-compat library (which was a
dummy library that did nothing) has also been removed.
* Added support for version-3 tz format files
- i686-no-sse42-strstr.patch: Removed
-------------------------------------------------------------------
Tue Dec 10 15:03:59 UTC 2013 - schwab@suse.de
- Update to glibc 2.18.90 aeb95445d128:
* More bug fixes
* Support for STT_GNU_IFUNC symbols added for ppc32/power4+
* The public headers no longer use __unused nor __block
* Support for PowerPC64 ELFv2 ABI
- ppc64le-abilist.patch: ABI lists for PowerLE
-------------------------------------------------------------------
Mon Nov 25 13:59:52 UTC 2013 - schwab@suse.de
- Update to glibc 2.18.90 bd12ab55c05e:
* New locales: ak_GH, anp_IN, ar_SS, cmn_TW, hak_TW, lzh_TW, nan_TW, pap_AW,
pap_CW, quz_PE, the_NP.
* Substantially revised locales: gd_GB, ht_HT
* The LC_ADDRESS field was updated to support country_car for almost all
supported locales.
* ISO 1427 definitions were updated.
* ISO 3166 definitions were updated.
* The localedef utility now supports --big-endian and --little-endian
command-line options to generate locales for a different system from that
for which the C library was built.
* Binary locale files now only depend on the endianness of the system for
which they are generated and not on other properties of that system.
* ISO 639 definitions were updated for Chiga (cgg) and Chinese (gan, hak, czh,
cjy, lzh, cmn, mnp, cdo, czo, cpx, wuu, hsn, yue).
* SystemTap probes for malloc have been introduced.
* Support for powerpc64le has been added.
* The soft-float powerpc port now supports e500 processors.
- Remove upstreamed patches:
cbrtl-ldbl-96.patch
fcntl-o-tmpfile.patch
getaddrinfo-overflow.patch
glibc-2.18.tar.xz
glibc-ld-profile.patch
glibc-nscd-hconf.diff
i686-strcasecmp-fallback.patch
m68k-Scrt1.patch
malloc-overflows.patch
nonascii-case.patch
nss-database.patch
printf-overrun.patch
readdir_r-overflow.patch
strcoll-overflow.patch
- Remove obsolete patches:
glibc-2.4.90-revert-only-euro.diff
-------------------------------------------------------------------
Wed Oct 30 14:05:30 UTC 2013 - schwab@suse.de
- getaddrinfo-overflow.patch: Fix stack overflow due to large AF_INET6
requests (CVE-2013-4458, bnc#847227)
-------------------------------------------------------------------
Mon Oct 21 12:14:38 UTC 2013 - schwab@suse.de
- Remove SSE4.2 implementation of strstr for x86-32 (bnc#843464)
-------------------------------------------------------------------
Mon Oct 14 09:32:44 UTC 2013 - schwab@suse.de
- Depend on gcc defaults for base powerpc optimisations (bnc#844824)
-------------------------------------------------------------------
Fri Oct 11 08:37:38 UTC 2013 - schwab@suse.de
- Enable ports addon for m68k and adapt file list
- m68k-Scrt1.patch: Use PIC for Scrt1.o
-------------------------------------------------------------------
Thu Sep 19 14:12:59 UTC 2013 - schwab@suse.de
- nscd-server-user.patch: run nscd as user nscd (fate#314673)
-------------------------------------------------------------------
Thu Sep 12 13:42:23 UTC 2013 - schwab@suse.de
- malloc-overflows.patch: Fix integer overflows in malloc (CVE-2013-4332,
bnc#839870)
-------------------------------------------------------------------
Wed Sep 11 10:11:56 UTC 2013 - schwab@suse.de
- fcntl-o-tmpfile.patch: Add O_TMPFILE to <fcntl.h> (bnc#837965)
- strcoll-overflow.patch: Update to latest version
-------------------------------------------------------------------
Tue Aug 13 07:24:59 UTC 2013 - schwab@suse.de
- Update to glibc 2.18 release
* No source change
- strcoll-overflow.patch: fix buffer overflow in strcoll (CVE-2012-4412,
bnc#779320)
- readdir_r-overflow.patch: fix readdir_r with long file names
(CVE-2013-4237, bnc#834594)
-------------------------------------------------------------------
Tue Aug 6 09:20:04 UTC 2013 - schwab@suse.de
- Update to glibc 2.17.90 85891acadf1b:
* CVE-2013-2207 Incorrectly granting access to another user's pseudo-terminal
has been fixed by disabling the use of pt_chown (Bugzilla #15755).
Distributions can re-enable building and using pt_chown via the new configure
option `--enable-pt_chown'. Enabling the use of pt_chown carries with it
considerable security risks and should only be used if the distribution
understands and accepts the risks.
* CVE-2013-0242 Buffer overrun in regexp matcher has been fixed (Bugzilla
#15078).
* CVE-2013-1914 Stack overflow in getaddrinfo with many results has been
fixed (Bugzilla #15330).
* Add support for calling C++11 thread_local object destructors on thread
and program exit. This needs compiler support for offloading C++11
destructor calls to glibc.
* Improved worst case performance of libm functions with double inputs and
output.
* Support for priority inherited mutexes in pthread condition variables on
non-x86 architectures.
* Optimized string functions for AArch64. Implemented by Marcus Shawcroft.
* Optimized string functions for ARM. Implemented by Will Newton and
Richard Henderson.
* Added a benchmark framework to track performance of functions in glibc.
* New <math.h> macro named issignaling to check for a signaling NaN (sNaN).
It is based on draft TS 18661 and currently enabled as a GNU extension.
* On Linux, the clock function now uses the clock_gettime system call
for improved precision, rather than old times system call.
* Added new API functions pthread_getattr_default_np and
pthread_setattr_default_np to get and set the default pthread
attributes of a process.
* Added support for TSX lock elision for pthread mutexes on i386 and x86-64.
This may improve lock scaling of existing programs on TSX capable systems.
* Support added for AT_HWCAP2 (to coincide with Linux kernel 3.10
availability). Implemented by Ryan S. Arnold.
* Support added for POWER8 platform. Implemented by Ryan S. Arnold.
- Remove upstreamed patches:
pthread-cond-timedwait-i486.patch
glibc-aarch64-lib64.patch
arm-ld-so-cache.patch
rtlddir.patch
regexp-overrun.patch
getaddrinfo-overflow.patch
nscd-netgroup.patch
disable-pt-chown.patch
nscd-short-write.patch
big5-hkscs-update.patch.bz2
digits-dots.patch
strptime-W-week.patch
aarch64-sigsetjmp.patch
- Rediff all remaining patches
- Reenable stackguard randomization on arm
- Recognize ppc64p7 arch to build for power7
- Remove all ABI extensions from libcrypt
- cbrtl-ldbl-96.patch: fix cbrtl for ldbl-96
-------------------------------------------------------------------
Wed Jul 31 12:20:38 UTC 2013 - schwab@suse.de
- i686-strcasecmp-fallback.patch: fix fallback in i686
strcasecmp/strncasecmp
- nonascii-case.patch: also test strncasecmp
- pldd-wait-ptrace-stop.patch: fix pldd not to leave process stopped after
detaching (bnc#819383)
-------------------------------------------------------------------
Mon Jul 22 12:32:34 UTC 2013 - schwab@suse.de
- disable-pt-chown.patch: disable use of pt_chown (CVE-2013-2207,
bnc#830257)
- nonascii-case.patch: fix strcasecmp in tr_TR.ISO-8859-9 locale
- glibc-2.14-crypt.diff: fix incomplete dependencies for libowcrypt
-------------------------------------------------------------------
Thu Jul 4 12:14:27 UTC 2013 - schwab@suse.de
- crypt_blowfish-gensalt.patch: separare crypt_gensalt into its own
library libowcrypt, remove crypt_rn and crypt_ra (fate#314945)
- glibc-2.14-crypt-versioning.diff, glibc-fix-check-abi.patch,
glibc-crypt-badsalttest.patch: folded into glibc-2.14-crypt.diff
- crypt_blowfish-const.patch: constify crypt_blowfish
- crypt_blowfish-1.2-sha.diff: refresh
-------------------------------------------------------------------
Fri Jun 28 12:26:38 UTC 2013 - dmueller@suse.com
- add ld-linux.so.3 compat symlink also for armv6hl
- remove deprecated armv7l
-------------------------------------------------------------------
Wed Jun 19 09:29:55 UTC 2013 - coolo@suse.com
- rely on systemd-rpm-macros instead of the full thing
-------------------------------------------------------------------
Mon Jun 17 09:49:24 UTC 2013 - schwab@suse.de
- nscd-netgroup.patch: Fix handling of netgroup cache in nscd (bnc#819524)
-------------------------------------------------------------------
Mon Jun 10 08:33:46 UTC 2013 - schwab@suse.de
- glibc-bindresvport-blacklist.diff: Renamed from
glibc-2.3.90-bindresvport.blacklist.diff; fix resource leaks
(bnc#824046)
- Remove glibc-armhf-compat.patch
-------------------------------------------------------------------
Mon May 20 08:26:35 UTC 2013 - schwab@suse.de
- aarch64-sigsetjmp.patch: Fix sigsetjmp on aarch64
-------------------------------------------------------------------
Sat May 18 09:34:41 UTC 2013 - schwab@suse.de
- Fix file list for glibc-utils
-------------------------------------------------------------------
Thu May 16 12:02:14 UTC 2013 - schwab@suse.de
- big5-hkscs-update.patch.bz2: Update BIG5-HKSCS charmap to HKSCS-2008
- digits-dots.patch: Fix parsing of numeric hosts in gethostbyname_r
- nss-database.patch: Properly cache the result from looking up the nss
database config
- strptime-W-week.patch: Properly handle %W in strptime
- printf-overrun.patch: Revert problematic fixes for [BZ #11741]
- glibc-aarch64-lib64.patch: Replace with upstream version
- arm-ld-so-cache.patch: ARM: Support loading unmarked objects from cache
- rtlddir.patch: Add support for rtld directory different from slib
directory
- regexp-overrun.patch: Fix buffer overrun in regexp matcher
(CVE-2013-0242, bnc#801246)
- getaddrinfo-overflow.patch: Fix stack overflow in getaddrinfo with many
results (CVE-2013-1914, bnc#813121)
-------------------------------------------------------------------
Thu May 16 10:04:01 UTC 2013 - schwab@suse.de
- When testsuite run fails make all test output available
-------------------------------------------------------------------
Tue May 7 10:00:00 UTC 2013 - schwab@suse.de
- Fix check for XEN build in glibc_post_upgrade
-------------------------------------------------------------------
Sun Apr 14 02:41:52 UTC 2013 - crrodriguez@opensuse.org
- Do not order nscd after syslog.target
-------------------------------------------------------------------
Mon Mar 4 14:16:43 UTC 2013 - schwab@suse.de
- Fix crypt ABI for aarch64
-------------------------------------------------------------------
Thu Feb 28 14:30:44 UTC 2013 - schwab@suse.de
- manpages.patch:
Remove debianisms from manpages (bnc#805054)
-------------------------------------------------------------------
Mon Feb 18 09:28:23 UTC 2013 - schwab@suse.de
- Update crypt ABI for aarch64
- glibc-aarch64-lib64.patch:
Use lib64 for aarch64 and add link for /lib/ld-linux-aarch64.so.1
- Don't build profiling libraries for aarch64
-------------------------------------------------------------------
Tue Feb 5 09:28:44 UTC 2013 - schwab@suse.de
- Move _constraints file to glibc-testsuite only
-------------------------------------------------------------------
Sun Feb 3 00:08:54 UTC 2013 - dmueller@suse.com
- build with ports enabled on aarch64
-------------------------------------------------------------------
Thu Jan 31 15:42:07 UTC 2013 - schwab@suse.de
- Obsolete unscd to migrate back to nscd.
-------------------------------------------------------------------
Thu Jan 31 09:09:06 UTC 2013 - coolo@suse.com
- looks like testsuite runs only on kvm, so add _constraint
(actually it does not build on xen, but I can't constraint that)
-------------------------------------------------------------------
Thu Jan 24 16:33:04 UTC 2013 - schwab@suse.de
- Don't run testsuite in parallel
- Fail if testsuite fails
- Disable crypt/badsalttest test
-------------------------------------------------------------------
Tue Jan 8 09:53:38 UTC 2013 - coolo@suse.com
- add _constraints file to make sure glibc-testsuite only builds on big
hosts. Otherwise it's running out of memory and stalls
-------------------------------------------------------------------
Thu Dec 27 12:31:13 UTC 2012 - aj@suse.de
- Set bugurl to bugs.opensuse.org
-------------------------------------------------------------------
Tue Dec 25 16:50:52 UTC 2012 - aj@suse.de
- Update to glibc 2.17 release (git id c758a6861537):
* bump version number
* update translations
-------------------------------------------------------------------
Tue Dec 18 10:28:01 UTC 2012 - schwab@suse.de
- Move glibc-utils subpackage to own specfile and enable programs that
require libgd
- Filter GLIBC_PRIVATE symbols
- Don't stop at first error in testsuite run
-------------------------------------------------------------------
Mon Dec 17 11:16:49 UTC 2012 - schwab@suse.de
- Split off glibc-testsuite package
-------------------------------------------------------------------
Fri Dec 14 19:31:45 UTC 2012 - aj@suse.de
- Build profile and locale packages for i686 as well.
-------------------------------------------------------------------
Wed Dec 12 08:32:53 UTC 2012 - aj@suse.de
- Update to 4641d57e1e00:
* Updated translations
* bug fixes
-------------------------------------------------------------------
Mon Dec 10 13:08:01 UTC 2012 - schwab@suse.de
- pthread-cond-timedwait-i486.patch:
Extend i486 pthread_cond_timedwait to use futex syscall with absolute
timeout
- nscd-short-write.patch:
Properly check for short writes when sending the response in nscd
-------------------------------------------------------------------
Sat Dec 8 18:55:53 UTC 2012 - aj@suse.de
- Update to 56e7d3ad5c2f:
* Bugfixes
* Fix warnings building glibc
- Remove upstreamed patch glibc-revert-fseek-on-fclose.diff
-------------------------------------------------------------------
Mon Dec 3 15:45:08 UTC 2012 - aj@suse.de
- Remove nosegneg i686 library, it's only used for a 32-bit Xen
hypervisor (not for a 32-bit guest running under 64-bit hypervisor),
and since the 32-bit Xen hypervisor is not part of openSUSE anymore,
it is unneeded (bnc#789607).
-------------------------------------------------------------------
Mon Dec 3 14:47:22 UTC 2012 - schwab@suse.de
- Suppress error message from systemctl in %post -n nscd (bnc#792333)
-------------------------------------------------------------------
Sat Dec 1 08:55:05 UTC 2012 - aj@suse.de
- Update to f638872ab422:
Fix regression introduced with last update in sunrpc code
Fix assertion failure in resolver
Bug fixes
- Remove upstreamed patch glibc-resolv-assert.diff
-------------------------------------------------------------------
Fri Nov 30 09:15:15 UTC 2012 - aj@suse.de
- Update to c93ec1f091ec:
Warn about unsupported DT_FLAGS_1 flags
Add Interlingua locale
Bug fixes
-------------------------------------------------------------------
Thu Nov 29 14:30:11 UTC 2012 - schwab@suse.de
- Remove obsolete patches:
glibc-strict-aliasing.diff
nscd-avoid-gcc-warning.diff
-------------------------------------------------------------------
Wed Nov 28 15:48:32 UTC 2012 - aj@suse.de
- Update to e3c6aa3a5848:
* Fix powerpc64 make abi check failure
* bugfixes
- Install nscd.socket to new /usr location
-------------------------------------------------------------------
Wed Nov 28 09:31:11 UTC 2012 - schwab@suse.de
- Reenable multi-arch on ppc ppc64
-------------------------------------------------------------------
Tue Nov 27 21:34:15 UTC 2012 - aj@suse.de
- Update to de2fd463b1c0:
Various bugfixes including:
* Fix fwrite bug causing grep etc testsuite failure
* sotruss: fix argument parsing
* Check supported DF_1_XXX bits
Add new locales niu_NU and niu_NZ
- Refresh patch glibc-revert-fseek-on-fclose.diff
-------------------------------------------------------------------
Sat Nov 24 13:48:40 UTC 2012 - aj@suse.de
- Remove nscd init script, use systemd files.
-------------------------------------------------------------------
Fri Nov 23 14:33:37 UTC 2012 - matz@suse.com
- Fix getaddrinfo-ipv6-sanity.diff to apply again.
-------------------------------------------------------------------
Tue Nov 20 08:06:49 UTC 2012 - aj@suse.de
- Update to f59cba71d848:
* Various bug fixes
* Add new locales szl_PL, ayc_PE, nhn_MX, doi_IN, mni_IN, sat_IN.
* Remove patch glibc-compiled-binaries.diff since getconf can not be
cross-compiled
* Refresh patch glibc-2.3.90-bindresvport.blacklist.diff
-------------------------------------------------------------------
Sun Nov 11 09:54:43 UTC 2012 - aj@suse.de
- Update to current glibc 2.17 development snapshot (git 7e2bd01fcf3c):
* Upstream changes:
+ ports is now part of main tarball
+ Add port to ARM AArch64
+ New function secure_getenv
+ Systemtap static probes
+ The `clock_*' suite of functions (declared in <time.h>) is now
available directly in the main C library.
+ The `crypt' function now fails if passed salt bytes that violate the
specification for those values. On Linux, the `crypt' function will
consult /proc/sys/crypto/fips_enabled to determine if "FIPS mode" is
enabled, and fail on encrypted strings using the MD5 or DES algorithm
when the mode is enabled.
+ Optimzations and bug fixes
* remove upstream patches malloc-check-size.patch,
glibc-2.16-getaddrinfo-buffer.patch, sparc-bind-now.patch,
pthread-cond-wait-revert.patch
* Remove now obsolete patch glibc-gai-private4.diff
* Refresh patches glibc-2.14-crypt.diff, glibc-2.14-crypt-versioning.diff,
glibc-fix-check-abi.patch, nss-db-path.patch, glibc-2.3.90-noversion.diff,
glibc-revert-fseek-on-fclose.diff
* Disable patches glibc-compiled-binaries.diff, getaddrinfo-ipv6-sanity.diff
and glibc-gai-private4.diff.
* Use git id instead of ChangeLog date in version output (patch glibc-version.diff)
* Enable multi-arch on all architectures that support it.
-------------------------------------------------------------------
Wed Nov 7 14:59:06 UTC 2012 - schwab@suse.de
- Avoid shell comment leaking into %post.
-------------------------------------------------------------------
Thu Oct 25 07:30:04 UTC 2012 - aj@suse.de
- Update to glibc 2.16 c3b96f90c9c1:
- Fix missing _mcount@GLIBC_2.0 on powerpc32 (replaces
patch glibc-2.16-ppc32-mcount.patch)
- Drop patch glibc-elf-localscope.diff, fixed upstream in 2.16
in a different way.
-------------------------------------------------------------------
Tue Oct 9 07:15:12 UTC 2012 - aj@suse.de
- Fix malloc_usable_size (swo#1349, bnc#745247) (patch
malloc-check-size.patch).
- Update to current glibc 2.16 (git a5cfcf08ffaa):
* fix fma detection
* Don't parse %s format argument as multibyte string
* Use size_t instead of int for internal variables in glob
* Properly handle fencepost with MALLOC_ALIGN_MASK
-------------------------------------------------------------------
Sat Oct 6 08:51:46 UTC 2012 - meissner@suse.com
- make glibc-devel-<baselib> require glibc-<baselib> just
like glibc-devel
-------------------------------------------------------------------
Fri Sep 28 07:47:33 UTC 2012 - aj@suse.de
- Fix crash in relocation on sparc with bind-now (swo#14376)
(patch sparc-bind-now.patch).
-------------------------------------------------------------------
Thu Sep 27 12:20:11 UTC 2012 - aj@suse.de
- Fix check-abi on more architectures (bnc#780696), patch by Jan
Engelhardt (updated patch glibc-fix-check-abi.patch).
-------------------------------------------------------------------
Tue Sep 4 11:08:53 UTC 2012 - schwab@linux-m68k.org
- Move pt_chown to %{_libexecdir} so that baselibs can find it.
- Do create hardlinks to getconf so that baselibs use the correct binary
and getconf -v works (obsoletes patch glibc-2.8-getconf.diff).
-------------------------------------------------------------------
Tue Aug 28 07:10:49 UTC 2012 - aj@suse.de
- Update to da1f43196321, major changes:
* Fix strtod integer/buffer overflow (bso#14459).
* Fix segmentation fault in strncasecmp for i686.
* Translation updates
-------------------------------------------------------------------
Tue Jul 24 08:39:30 UTC 2012 - aj@suse.de
- Fix _mcount on PowerPC32.
-------------------------------------------------------------------
Sat Jul 21 07:31:10 UTC 2012 - aj@suse.de
- Enable parallel build for some more cases.
-------------------------------------------------------------------
Fri Jul 20 17:00:00 UTC 2012 - aj@suse.de
- Update to glibc 2.16 release.
* update version numbers
* Documentation updates
- Update manpages from Debian, includes new man pages for
locale.1, mtrace.1, gencat.1 iconvconfig.8.
- Remove getent.1 man page, use the one from man-pages.
-------------------------------------------------------------------
Fri Jul 20 16:42:42 UTC 2012 - aj@suse.de
- Update to glibc 2.16 trunk (git id 416bf844227d):
* Fix check-abi for arm
* Refresh some patches.
* remove merged patches
* mainly lots of bug fixes
* Support for ISO C11
* full details in NEWS file
-------------------------------------------------------------------
Fri Jul 20 15:06:49 UTC 2012 - jengelh@inai.de
- Add commit 10f62770e115d9f (glibc-sparc-fxstatat64.diff) from
upstream to resolve rpmlint-induced packaging abort due to
(previously) "no-return-in-nonvoid"
- Add xz as explicit BuildRequires for openSUSE_12.1
-------------------------------------------------------------------
Thu Jul 19 23:42:46 UTC 2012 - jengelh@inai.de
- Do package ld-linux.so.2 on SPARC as well
-------------------------------------------------------------------
Tue Jul 17 12:22:29 UTC 2012 - aj@suse.de
- Add makeinfo as build requires to be able to generate the info
pages.
-------------------------------------------------------------------
Wed Jul 4 13:36:17 UTC 2012 - aj@suse.de
- Add glibc-2.16-getaddrinfo-buffer.patch to not use a too small
buffer for dns queries on 64-bit systems (bso#14307,bso#13904).
- Fix getaddrinfo-ipv6-sanity.diff (bnc#767125).
-------------------------------------------------------------------
Mon Jul 2 16:23:15 UTC 2012 - agraf@suse.com
- Backport *context patch for ARM from 2.16, so we have a working libpth
-------------------------------------------------------------------
Thu Jun 28 18:46:30 UTC 2012 - aj@suse.de
- Remove not anymore existing nscd.socket.
-------------------------------------------------------------------
Thu Jun 28 12:33:50 UTC 2012 - aj@suse.de
- Update to glibc 2.15-branch (git id 725b8ee08aff):
* Fix regression in cosh (bso#14273)
-------------------------------------------------------------------
Wed Jun 27 07:34:15 UTC 2012 - aj@suse.de
- Testsuite is ok to fail on arm
-------------------------------------------------------------------
Tue Jun 26 07:11:49 UTC 2012 - aj@suse.de
- Update to glibc 2.15 branch (git id b640404bd8c9):
* Fix fmod implementation that returned NaN for some values.
* Fix strcase_cmp_l x86 multiarch implementation.
* Remove glibc-2.15-avx2.patch, merged now.
-------------------------------------------------------------------
Thu Jun 21 11:44:59 UTC 2012 - aj@suse.de
- Fix Bogus FP exception on underflow for exp(double) (bnc#767956)
-------------------------------------------------------------------
Mon Jun 18 11:04:37 UTC 2012 - aj@suse.de
- Remove nscd.socket since nscd does not support socket
activation.
-------------------------------------------------------------------
Wed Jun 13 11:07:15 UTC 2012 - aj@suse.de
- Build power3 libs on 32-bit PowerPC (bnc#765165).
-------------------------------------------------------------------
Wed May 23 20:00:55 UTC 2012 - aj@suse.de
- Update to current git of glibc 2.15 branch:
* obsoletes glibc-2.16-avx.patch,
glibc-2.16-fix-check-localplt.patch
* Fixes for math functions.
-------------------------------------------------------------------
Wed May 23 11:51:02 UTC 2012 - aj@suse.de
- Fix first_weekday for tr_TR locale (tr_TR.patch)
-------------------------------------------------------------------
Wed May 16 08:37:57 UTC 2012 - schwab@linux-m68k.org
- Fix confstr use of local buffer outside its extent
-------------------------------------------------------------------
Wed May 9 07:30:36 UTC 2012 - aj@suse.de
- Split out glibc-armhf-compat.patch from armhf-ld-so.patch.
- Run nscd in the foreground with systemd (glibc-nscd-foreground-patch)
-------------------------------------------------------------------
Tue May 8 14:00:52 UTC 2012 - aj@suse.de
- Refresh glibc-2.16-avx.patch and handle FMA4.
-------------------------------------------------------------------
Thu May 3 11:05:36 UTC 2012 - aj@suse.de
- Fix dynamic linker name for ARMv5.
-------------------------------------------------------------------
Thu Apr 26 14:02:37 UTC 2012 - aj@suse.de
- Fix mcheck (optimization problem with gcc 4.7)
-------------------------------------------------------------------
Wed Apr 25 10:40:20 UTC 2012 - aj@suse.de
- Also check for armv7hl.
-------------------------------------------------------------------
Wed Apr 25 08:47:22 UTC 2012 - adrian@suse.de
- provide old ld-linux.so.3 on armv7, not catched by find.provides
-------------------------------------------------------------------
Sun Apr 22 11:35:05 UTC 2012 - aj@suse.de
- gcc 4.7 does not build crt files properly on powerpc64, backport
patch from upstream to handle this
(glibc-2.16-powerpc-initfini.patch)
-------------------------------------------------------------------
Fri Apr 20 18:28:18 UTC 2012 - aj@suse.de
- Disable patch x86-cpuid-level2.patch, this should be fixed in
valgrind now.
-------------------------------------------------------------------
Thu Apr 19 11:12:43 UTC 2012 - aj@suse.de
- Reorder patches, refresh to apply cleanly with -p1.
-------------------------------------------------------------------
Wed Apr 18 11:35:48 UTC 2012 - aj@suse.de
- Build profiled libs only for base.
- Cleanup patches.
- Remove glibc-2.14-fix-ctors.patch, we have proper support in
binutils now.
-------------------------------------------------------------------
Tue Apr 17 12:35:21 UTC 2012 - aj@suse.de
- The dynamic linker for armv7 hardware float is called
/lib/ld-linux-armhf.so.3. Provide symlink for old location.
-------------------------------------------------------------------
Tue Apr 17 08:29:21 UTC 2012 - aj@suse.de
- Build for power4 only, don't support power3 anymore.
- Add option to build glibc a bit more quickly for testing purposes.
- Remove disabled patch glibc-revert-netlink-cache.patch.
- Start renumbering patches.
-------------------------------------------------------------------
Mon Apr 16 14:31:38 UTC 2012 - aj@suse.de
- Do not build locales and profile for i686 since we only ship
the base and glibc-devel packages.
-------------------------------------------------------------------
Fri Apr 13 09:35:49 UTC 2012 - aj@suse.de
- Fix check-abi to succeed.
- Use feof_unlocked in glibc-2.3.90-bindresvport.blacklist.diff.
- Make x86 to be elf/check-localplt clean again
- Refresh some patches to apply without fuzz.
-------------------------------------------------------------------
Fri Apr 6 09:19:11 UTC 2012 - aj@suse.de
- Disable building with as-needed since it breaks glibc
(testsuite will fail, even if testsuite does not use as-needed)
-------------------------------------------------------------------
Thu Apr 5 18:48:06 UTC 2012 - aj@suse.de
- Another fix for dynamic linking.
-------------------------------------------------------------------
Thu Apr 5 18:22:36 UTC 2012 - aj@suse.de
- Properly fix dl_lookup_x crash (glibc-fix-noload.patch), disable
glibc-fix-lookup-crash.patch.
-------------------------------------------------------------------
Mon Apr 2 09:30:24 UTC 2012 - aj@suse.de
- Fix building on Armv5 (glibc-add-arm-dependency-libmemusage.patch)
-------------------------------------------------------------------
Thu Mar 29 07:51:43 UTC 2012 - aj@suse.de
- Fix crash when nscd is not running (bnc#741021) properly
and disable patch glibc-revert-netlink-cache.patch
-------------------------------------------------------------------
Fri Mar 23 11:07:32 UTC 2012 - aj@suse.de
- Fix path for nss_db (bnc#753657).
-------------------------------------------------------------------
Thu Mar 22 09:41:48 UTC 2012 - aj@suse.de
- Fix LD_PROFILE invocation.
-------------------------------------------------------------------
Wed Mar 21 08:45:12 UTC 2012 - aj@suse.de
- Fix cycle detection in loading of dynamic objects.
-------------------------------------------------------------------
Wed Mar 14 08:26:52 UTC 2012 - aj@suse.de
- Update getaddrinfo-ipv6-sanity.diff (bnc#684534).
-------------------------------------------------------------------
Fri Mar 2 17:01:55 UTC 2012 - aj@suse.de
- vfprintf: validate nargs and maybe allocate from heap (bnc#747768)
-------------------------------------------------------------------
Tue Jan 31 13:20:37 UTC 2012 - aj@suse.de
- Fix checks for AVX (patch glibc-2.16-avx.patch)
-------------------------------------------------------------------
Tue Jan 31 09:44:07 UTC 2012 - aj@suse.de
- Use Linux 2.6.32 on x86_64 as oldest supported kernel
-------------------------------------------------------------------
Tue Jan 31 08:57:15 UTC 2012 - aj@suse.de
- Fix relocation ordering to fix ifunc crash (bnc#740109).
-------------------------------------------------------------------
Sun Jan 29 22:47:18 CET 2012 - dmueller@suse.de
- set abi back to gnueabi for ARM (regression from Jan 12)
-------------------------------------------------------------------
Wed Jan 18 09:29:24 UTC 2012 - aj@suse.de
- Update license strings in spec file.
-------------------------------------------------------------------
Mon Jan 16 13:19:43 UTC 2012 - aj@suse.de
- Split up new subpackage glibc-extra and move makedb with its
dependency on libselinux to it. (bnc#741525)
- Use lua script for verifyscript to not have a dependency on bash
-------------------------------------------------------------------
Thu Jan 12 15:42:36 UTC 2012 - aj@suse.de
- Disable netlink caching (bnc#741021).
-------------------------------------------------------------------
Thu Jan 12 11:01:41 UTC 2012 - aj@suse.de
- Use _target_cpu instead of _build and _host. This makes the
i686 library really build for i686.
-------------------------------------------------------------------
Tue Jan 10 12:31:14 UTC 2012 - aj@suse.de
- Remove all math ifuncs on x86-64.
-------------------------------------------------------------------
Tue Jan 10 09:53:58 UTC 2012 - aj@suse.de
- Remove math ifuncs that cause crashes in apache2 and
gdk-pixbuf-query-loaders-64 (bnc#740109) for now
(glibc-2.15-math64crash.patch).
- nscd needs the same glibc version, add require.
-------------------------------------------------------------------
Mon Jan 9 08:17:08 UTC 2012 - aj@suse.de
- Fix realloc usage in vfscanf (glibc-2.16-scanf.patch)
- Fix getcontext on powerpc 32-bit (glibc-ppc-getcontext.patch)
-------------------------------------------------------------------
Wed Jan 4 09:34:28 UTC 2012 - aj@suse.de
- Remove patch glibc-2.3.4-gb18030-big5hkscs.diff.bz2 and
replace it by gb18030.patch.bz2 (synced with Fedora 16)
(bnc#743617).
-------------------------------------------------------------------
Tue Jan 3 19:42:17 UTC 2012 - aj@suse.de
- Compile unwind-dw2-fde-glibc.c with -fno-strict-aliasing
(patch glibc-strict-aliasing.diff)
- Build on i686 a separate library for usage under Xen.
-------------------------------------------------------------------
Tue Jan 3 15:36:12 UTC 2012 - aj@suse.de
- Only use -mno-tls-direct-seg-refs on 32-bit x86, it's not needed
on x86-64.
-------------------------------------------------------------------
Tue Jan 3 14:37:48 UTC 2012 - aj@suse.de
- Cleanup spec file:
- experimental malloc is not experimental anymore and only option
(drop patch glibc-malloc-arena-max.diff)
- remove obsolete configure flags
-------------------------------------------------------------------
Tue Jan 3 08:40:28 UTC 2012 - aj@suse.de
- Update to 2ba92745c36e:
- Update copyright years
- Fix miscompilation of posix/regex_internal.c with GCC 4.7.
-------------------------------------------------------------------
Tue Jan 3 08:23:44 UTC 2012 - aj@suse.de
- Revert pthread-cond-wait change for now since it causes hangs
(patch pthread-cond-wait-revert.patch).
-------------------------------------------------------------------
Mon Dec 26 12:53:55 UTC 2011 - aj@suse.de
- Update to c0da14cdda1f (glibc-ports: 8a70b2dcabbf):
- new locales
- many bugfixes
- glibc 2.15
- obsoletes tzfile-corruption-fix.patch,
glibc-2.14-32args-printf.patch
-------------------------------------------------------------------
Thu Dec 21 15:16:42 CET 2011 - meissner@suse.de
- Do not mention the buildtime anymore to make build-compare work.
-------------------------------------------------------------------
Mon Dec 19 10:01:56 UTC 2011 - aj@suse.de
- Fix timezone loader overflow (bnc#735850,CVE-2009-5029) (patch
tzfile-corruption-fix.patch)
-------------------------------------------------------------------
Mon Dec 5 09:29:32 UTC 2011 - aj@suse.de
- Update to 52ad36a21973 (glibc-ports: 4a40b38f6355):
* fix many warnings
* bugfixes
* obsolete patches glibc-strict-aliasing.diff and
glibc-arm-clone-unwind-fix.diff
-------------------------------------------------------------------
Tue Nov 29 03:09:56 UTC 2011 - rcoe@wi.rr.com
- fix printf with many args and printf arg specifiers (bnc#733140)
-------------------------------------------------------------------
Thu Nov 24 14:02:55 UTC 2011 - aj@suse.de
- Updated glibc-ports-2.14.1.tar.bz2 from ftp.gnu.org.
-------------------------------------------------------------------
Thu Nov 24 09:25:14 UTC 2011 - aj@suse.com
- Create glibc-devel-static baselibs (bnc#732349).
-------------------------------------------------------------------
Thu Nov 17 10:27:31 UTC 2011 - aj@suse.de
- Remove duplicated locales from glibc-2.3.locales.diff.bz2
-------------------------------------------------------------------
Tue Nov 15 12:49:56 UTC 2011 - aj@suse.de
- nscd now monitors resolv.conf, so simplify glibc-2.4.90-nscd.diff
patch and re-enable it
- Adjust and re-enable glibc-2.3.3-nscd-db-path.diff
-------------------------------------------------------------------
Tue Nov 15 12:10:32 UTC 2011 - aj@suse.de
- Update to 09f93bd3d6b1:
- Clean up internal fopen uses to always use close-on-exec
- Optimized strcasecmp and strncasecmp for SSSE3 and SSE4.2 on x86-32
- bugfixes
-------------------------------------------------------------------
Mon Nov 14 12:02:06 CET 2011 - ro@suse.de
- check-build.sh: accept kernel 3.x
-------------------------------------------------------------------
Tue Nov 8 22:55:40 CET 2011 - dmueller@suse.de
- make glibc-static provide versioned
-----------------------------------------------------------------