Fedora 27: 2017-10-24 Security Fixes For Glibc Critical Flaws

The glibc package contains standard libraries which are used by

multiple programs on the system. In order to save disk space and

memory, as well as to make upgrading easier, common system code is

kept in one place and shared between programs. This particular package

contains the most important sets of shared libraries: the standard C

library and the standard math library. Without these two libraries, a

Linux system will not function.

This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the

`nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a

security hardening measure, stdio streams are no longer flushed on process

abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in

the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM

z Series (RHBZ#1499260). Two security fixes for the `glob` function are

provided (CVE-2017-15670, CVE-2017-15671, RHBZ#1504807). An error in the

`sysconf` function which caused it to return -1 for `_SC_IOV_MAX` has been

corrected (RHBZ#1504165). The included upstream update from the glibc 2.26

stable branch improves C++ compatibility for ` ` functions and fixes a

memory leak in malloc when thread local caches are in use.

[ 1 ] Bug #1498880 - glibc: Do not flush stdio streams on abort, assertion failure

https://bugzilla.redhat.com/show_bug.cgi?id=1498880

[ 2 ] Bug #1400538 - glibc: nss_compat should be shipped in the glibc package

https://bugzilla.redhat.com/show_bug.cgi?id=1400538

[ 3 ] Bug #1416405 - glibc: add ibm-858 to list of charsets for iconv

https://bugzilla.redhat.com/show_bug.cgi?id=1416405

[ 4 ] Bug #1498900 - glibc: /var/db/Makefile should be shipped in nss_db, not nss_hesiod

https://bugzilla.redhat.com/show_bug.cgi?id=1498900

[ 5 ] Bug #1499260 - Failing HTM tbegin for z Series guests despite claiming support.

https://bugzilla.redhat.com/show_bug.cgi?id=1499260

[ 6 ] Bug #1504165 - glibc: sysconf(_SC_IOV_MAX) returns -1

https://bugzilla.redhat.com/show_bug.cgi?id=1504165

[ 7 ] Bug #1504807 - CVE-2017-15670 CVE-2017-15671 glibc: various flaws [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1504807

su -c 'dnf upgrade glibc' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org