Fedora 40 glibc: 2025-69207650a4 critical: buffer overflow and randomness

The glibc package contains standard libraries which are used by

multiple programs on the system. In order to save disk space and

memory, as well as to make upgrading easier, common system code is

kept in one place and shared between programs. This particular package

contains the most important sets of shared libraries: the standard C

library and the standard math library. Without these two libraries, a

Linux system will not function.

This update addresses two security vulnerabilities: * CVE-2025-0395: A buffer overflow may occur in the assert function with certain large program names and assert expressions. * CVE-2025-0577: getrandom, arc4random can produce predictable randomness if a multi-threaded program creates additional threads after fork. The following non-security bugs are fixed: * Compatibility with certain programs that call free(environ) is improved (however, deallocating environ remains undefined in general). * Crashes in string functions on certain hypervisors that report L3 cache sizes above 4 GiB are avoided. * Poor performance of x86-64 string functions in certain cases. * Initialization of the restartable sequence area now follows recommended practices.