Fedora 32: glibc Update FEDORA-2020-d860479b2a Medium Severity

The glibc package contains standard libraries which are used by

multiple programs on the system. In order to save disk space and

memory, as well as to make upgrading easier, common system code is

kept in one place and shared between programs. This particular package

contains the most important sets of shared libraries: the standard C

library and the standard math library. Without these two libraries, a

Linux system will not function.

This update incorporates fixes from the upstream glibc 2.31 stable release

branch, including a fix for a medium severity security vulnerability.

(CVE-2020-6096)

* Wed Jul 15 2020 Patsy Griffin - 2.31-4

- Auto-sync with upstream branch release/2.31/master,

commit 64246fccafc221cc15a8b70710a9d47a60653c0d.

- arm: CVE-2020-6096: Fix multiarch memcpy for negative length [BZ #25620]

- arm: CVE-2020-6096: fix memcpy and memmove for negative length [BZ #25620]

- NEWS: Mention BZ 25933 fix

- Fix avx2 strncmp offset compare condition check [BZ #25933]

- nss_compat: internal_end*ent may clobber errno, hiding ERANGE [BZ #25976]

* Tue May 19 2020 Florian Weimer - 2.31-3

- Auto-sync with upstream branch release/2.31/master,

commit c839175267842bd9e20fdb6637c82f2790d3754f:

- aarch64: fix strcpy and strnlen for big-endian (swbz#25824)

- aarch64: Accept PLT calls to __getauxval within libc.so

- x86-64: Use RDX_LP on __x86_shared_non_temporal_threshold [BZ #25966]

- oc_FR locale: Fix spelling of April (swbz#25639)

- oc_FR locale: Fix spelling of Thursday (swbz#25639)

- Add a C wrapper for prctl (swbz#25896)

- Add a C wrapper for prctl (swbz#25896)

- powerpc: Rename argN to _argN in LOADARGS_N (swbz#25902)

- Add C wrappers for process_vm_readv/process_vm_writev (swbz#25810)

- Mark unsigned long arguments with U in more syscalls (swbz#25810)

- Add a syscall test for (swbz#25810)

- Add SYSCALL_ULONG_ARG_[12] to pass long to syscall (swbz#25810)

- x32: Properly pass long to syscall (swbz#25810)

- Fix build with GCC 10 when long double = double.

- Add new file missed in previous hppa commit.

- Fix data race in setting function descriptors during lazy binding on hppa.

- nios2: delete sysdeps/unix/sysv/linux/nios2/kernel-features.h

- mips: Fix bracktrace result for signal frames

- stdlib: Move tst-system to tests-container

- support/shell-container.c: Add builtin kill

- support/shell-container.c: Add builtin exit

- support/shell-container.c: Return 127 if execve fails

- posix: Fix system error return value (swbz#25715)

su -c 'dnf upgrade --advisory FEDORA-2020-d860479b2a' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/