[SECURITY] Fedora 32 Update: glibc-2.31-4.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-d860479b2a
2020-07-19 01:08:45.469519
--------------------------------------------------------------------------------
Name : glibc
Product : Fedora 32
Version : 2.31
Release : 4.fc32
URL : http://www.gnu.org/software/glibc/
Summary : The GNU libc libraries
Description :
The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.
--------------------------------------------------------------------------------
Update Information:
This update incorporates fixes from the upstream glibc 2.31 stable release
branch, including a fix for a medium severity security vulnerability.
(CVE-2020-6096)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 15 2020 Patsy Griffin <patsy(a)redhat.com> - 2.31-4
- Auto-sync with upstream branch release/2.31/master,
commit 64246fccafc221cc15a8b70710a9d47a60653c0d.
- arm: CVE-2020-6096: Fix multiarch memcpy for negative length [BZ #25620]
- arm: CVE-2020-6096: fix memcpy and memmove for negative length [BZ #25620]
- NEWS: Mention BZ 25933 fix
- Fix avx2 strncmp offset compare condition check [BZ #25933]
- nss_compat: internal_end*ent may clobber errno, hiding ERANGE [BZ #25976]
* Tue May 19 2020 Florian Weimer <fweimer(a)redhat.com> - 2.31-3
- Auto-sync with upstream branch release/2.31/master,
commit c839175267842bd9e20fdb6637c82f2790d3754f:
- aarch64: fix strcpy and strnlen for big-endian (swbz#25824)
- aarch64: Accept PLT calls to __getauxval within libc.so
- x86-64: Use RDX_LP on __x86_shared_non_temporal_threshold [BZ #25966]
- oc_FR locale: Fix spelling of April (swbz#25639)
- oc_FR locale: Fix spelling of Thursday (swbz#25639)
- Add a C wrapper for prctl (swbz#25896)
- Add a C wrapper for prctl (swbz#25896)
- powerpc: Rename argN to _argN in LOADARGS_N (swbz#25902)
- Add C wrappers for process_vm_readv/process_vm_writev (swbz#25810)
- Mark unsigned long arguments with U in more syscalls (swbz#25810)
- Add a syscall test for (swbz#25810)
- Add SYSCALL_ULONG_ARG_[12] to pass long to syscall (swbz#25810)
- x32: Properly pass long to syscall (swbz#25810)
- Fix build with GCC 10 when long double = double.
- Add new file missed in previous hppa commit.
- Fix data race in setting function descriptors during lazy binding on hppa.
- nios2: delete sysdeps/unix/sysv/linux/nios2/kernel-features.h
- mips: Fix bracktrace result for signal frames
- stdlib: Move tst-system to tests-container
- support/shell-container.c: Add builtin kill
- support/shell-container.c: Add builtin exit
- support/shell-container.c: Return 127 if execve fails
- posix: Fix system error return value (swbz#25715)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-d860479b2a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------