Fedora 27: glibc Security Update 2017-0d3fdd3d1f
Summary
The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.
This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the
`nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a
security hardening measure, stdio streams are no longer flushed on process
abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in
the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM
z Series (RHBZ#1499260). Two security fixes for the `glob` function are
provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807). An error in the
`sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been
corrected (RHBZ#1504165). The included upstream update from the glibc 2.26
stable branch improves C++ compatibility for `
memory leak in malloc when thread local caches are in use.
[ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure
https://bugzilla.redhat.com/show_bug.cgi?id=1498880
[ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package
https://bugzilla.redhat.com/show_bug.cgi?id=1400538
[ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv
https://bugzilla.redhat.com/show_bug.cgi?id=1416405
[ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod
https://bugzilla.redhat.com/show_bug.cgi?id=1498900
[ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support.
https://bugzilla.redhat.com/show_bug.cgi?id=1499260
[ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1
https://bugzilla.redhat.com/show_bug.cgi?id=1504165
[ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1504807
su -c 'dnf upgrade glibc' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
FEDORA-2017-0d3fdd3d1f 2017-10-24 20:07:54.665530 Product : Fedora 27 Version : 2.26 Release : 15.fc27 URL : http://www.gnu.org/software/glibc/ Summary : The GNU libc libraries Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function. This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the `nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a security hardening measure, stdio streams are no longer flushed on process abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM z Series (RHBZ#1499260). Two security fixes for the `glob` function are provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807). An error in the `sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been corrected (RHBZ#1504165). The included upstream update from the glibc 2.26 stable branch improves C++ compatibility for ` ` functions and fixes a memory leak in malloc when thread local caches are in use. [ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure https://bugzilla.redhat.com/show_bug.cgi?id=1498880 [ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package https://bugzilla.redhat.com/show_bug.cgi?id=1400538 [ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv https://bugzilla.redhat.com/show_bug.cgi?id=1416405 [ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod https://bugzilla.redhat.com/show_bug.cgi?id=1498900 [ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support. https://bugzilla.redhat.com/show_bug.cgi?id=1499260 [ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1 https://bugzilla.redhat.com/show_bug.cgi?id=1504165 [ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1504807 su -c 'dnf upgrade glibc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Change Log
References