--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2017-0d3fdd3d1f
2017-10-24 20:07:54.665530
--------------------------------------------------------------------------------Name        : glibc
Product     : Fedora 27
Version     : 2.26
Release     : 15.fc27
URL         : http://www.gnu.org/software/glibc/
Summary     : The GNU libc libraries
Description :
The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.

--------------------------------------------------------------------------------Update Information:

This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the
`nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a
security hardening measure, stdio streams are no longer flushed on process
abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in
the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM
z Series (RHBZ#1499260).  Two security fixes for the `glob` function are
provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807).  An error in the
`sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been
corrected (RHBZ#1504165).  The included upstream update from the glibc 2.26
stable branch improves C++ compatibility for ` ` functions and fixes a
memory leak in malloc when thread local caches are in use.
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure
        https://bugzilla.redhat.com/show_bug.cgi?id=1498880
  [ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package
        https://bugzilla.redhat.com/show_bug.cgi?id=1400538
  [ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv
        https://bugzilla.redhat.com/show_bug.cgi?id=1416405
  [ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod
        https://bugzilla.redhat.com/show_bug.cgi?id=1498900
  [ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support.
        https://bugzilla.redhat.com/show_bug.cgi?id=1499260
  [ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1
        https://bugzilla.redhat.com/show_bug.cgi?id=1504165
  [ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1504807
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade glibc' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 27: glibc Security Update 2017-0d3fdd3d1f

October 24, 2017
This update adds support for the IBM858 codepage (RHBZ#1416405)

Summary

The glibc package contains standard libraries which are used by

multiple programs on the system. In order to save disk space and

memory, as well as to make upgrading easier, common system code is

kept in one place and shared between programs. This particular package

contains the most important sets of shared libraries: the standard C

library and the standard math library. Without these two libraries, a

Linux system will not function.

This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the

`nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a

security hardening measure, stdio streams are no longer flushed on process

abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in

the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM

z Series (RHBZ#1499260). Two security fixes for the `glob` function are

provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807). An error in the

`sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been

corrected (RHBZ#1504165). The included upstream update from the glibc 2.26

stable branch improves C++ compatibility for ` ` functions and fixes a

memory leak in malloc when thread local caches are in use.

[ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure

https://bugzilla.redhat.com/show_bug.cgi?id=1498880

[ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package

https://bugzilla.redhat.com/show_bug.cgi?id=1400538

[ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv

https://bugzilla.redhat.com/show_bug.cgi?id=1416405

[ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod

https://bugzilla.redhat.com/show_bug.cgi?id=1498900

[ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support.

https://bugzilla.redhat.com/show_bug.cgi?id=1499260

[ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1

https://bugzilla.redhat.com/show_bug.cgi?id=1504165

[ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1504807

su -c 'dnf upgrade glibc' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-0d3fdd3d1f 2017-10-24 20:07:54.665530 Product : Fedora 27 Version : 2.26 Release : 15.fc27 URL : http://www.gnu.org/software/glibc/ Summary : The GNU libc libraries Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function. This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the `nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a security hardening measure, stdio streams are no longer flushed on process abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM z Series (RHBZ#1499260). Two security fixes for the `glob` function are provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807). An error in the `sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been corrected (RHBZ#1504165). The included upstream update from the glibc 2.26 stable branch improves C++ compatibility for ` ` functions and fixes a memory leak in malloc when thread local caches are in use. [ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure https://bugzilla.redhat.com/show_bug.cgi?id=1498880 [ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package https://bugzilla.redhat.com/show_bug.cgi?id=1400538 [ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv https://bugzilla.redhat.com/show_bug.cgi?id=1416405 [ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod https://bugzilla.redhat.com/show_bug.cgi?id=1498900 [ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support. https://bugzilla.redhat.com/show_bug.cgi?id=1499260 [ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1 https://bugzilla.redhat.com/show_bug.cgi?id=1504165 [ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1504807 su -c 'dnf upgrade glibc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 27
Version : 2.26
Release : 15.fc27
URL : http://www.gnu.org/software/glibc/
Summary : The GNU libc libraries

Related News