-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2019-5fcc2049a1
2019-04-06 19:42:42.476894
-------------------------------------------------------------------------------
-

Name        : glibc
Product     : Fedora 29
Version     : 2.28
Release     : 27.fc29
URL         : http://www.gnu.org/software/glibc/
Summary     : The GNU libc libraries
Description :
The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.

-------------------------------------------------------------------------------
-
Update Information:

This glibc update adds support for the new Japanese era, Reiwa, which will
 begin
on May 1st.  It also includes several other upstream bugfixes via upstream
 sync:
* ja_JP locale: Add entry for the new Japanese era [BZ #22964] * S390: Mark vx
and vxe as important hwcap. * Record CVE-2019-9169 in NEWS and ChangeLog [BZ
#24114] * regex: fix read overrun [BZ #24114] * RISC-V: don't assume PI
 mutexes
and robust futexes before 4.20 (bug 23864) * powerpc: Only enable TLE with
PPC_FEATURE2_HTM_NOSC * RISC-V: Fix elfutils testsuite unwind failures. * nptl:
Fix pthread_rwlock_try*lock stalls (Bug 23844) * nptl: Avoid fork handler lock
for async-signal-safe fork [BZ #24161] * Add compiler barriers around
modifications of the robust mutex list for pthread_mutex_trylock. [BZ #24180] *
NEWS: Mention bug 24112. * nscd: Do not use __inet_aton_exact@GLIBC_PRIVATE [BZ
#20018] * CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ
#20018] * resolv: Do not send queries for non-host-names in nss_dns [BZ #24112]
* resolv: Reformat inet_addr, inet_aton to GNU style * x86-64 memcmp: Use
unsigned Jcc instructions on size [BZ #24155] * x86-64 strnlen/wcsnlen:
 Properly
handle the length parameter [BZ #24097] * x86-64 strncpy: Properly handle the
length parameter [BZ #24097] * x86-64 strncmp family: Properly handle the
 length
parameter [BZ #24097] * x86-64 memset/wmemset: Properly handle the length
parameter [BZ #24097] * x86-64 memrchr: Properly handle the length parameter
 [BZ
#24097] * x86-64 memcpy: Properly handle the length parameter [BZ #24097] *
x86-64 memcmp/wmemcmp: Properly handle the length parameter [BZ #24097] *
 x86-64
memchr/wmemchr: Properly handle the length parameter [BZ #24097] * Add
XFAIL_ROUNDING_IBM128_LIBGCC to more fma() tests * Only build libm with -fno-
math-errno (bug 24024) * sysdeps/ieee754/soft-fp: ignore maybe-uninitialized
with -O [BZ #19444] * ARM: fix kernel assisted atomics with GCC 8 (bug 24034) *
riscv: Use `__has_include__` to include `<asm/syscalls.h>` [BZ #24022] *
 intl:
Do not return NULL on asprintf failure in gettext [BZ #24018] * malloc: Always
call memcpy in _int_realloc [BZ #24027] * Update Alpha libm-test-ulps * m68k:
Fix sigaction kernel definition (BZ #23967) * RISC-V: properly terminate call
chain (bug 23125) * support: Do not require overflow builtin in
support/blob_repeat.c
-------------------------------------------------------------------------------
-
ChangeLog:

* Wed Apr  3 2019 DJ Delorie <dj@redhat.com> - 2.28-27
- Auto-sync with upstream branch release/2.28/master,
  commit 7423da211d1490d9fc76c2f0ce49e5dd90ea9bcc.

- ja_JP locale: Add entry for the new Japanese era [BZ #22964]
- S390: Mark vx and vxe as important hwcap.
- Record CVE-2019-9169 in NEWS and ChangeLog [BZ #24114]
- regex: fix read overrun [BZ #24114]
- RISC-V: don't assume PI mutexes and robust futexes before 4.20 (bug
 23864)
- powerpc: Only enable TLE with PPC_FEATURE2_HTM_NOSC
- RISC-V: Fix elfutils testsuite unwind failures.
- nptl: Fix pthread_rwlock_try*lock stalls (Bug 23844)
- nptl: Avoid fork handler lock for async-signal-safe fork [BZ #24161]
- Add compiler barriers around modifications of the robust mutex list for
 pthread_mutex_trylock. [BZ #24180]
- NEWS: Mention bug 24112.
- nscd: Do not use __inet_aton_exact@GLIBC_PRIVATE [BZ #20018]
- CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018]
- resolv: Do not send queries for non-host-names in nss_dns [BZ #24112]
- resolv: Reformat inet_addr, inet_aton to GNU style
- x86-64 memcmp: Use unsigned Jcc instructions on size [BZ #24155]
- x86-64 strnlen/wcsnlen: Properly handle the length parameter [BZ #24097]
- x86-64 strncpy: Properly handle the length parameter [BZ #24097]
- x86-64 strncmp family: Properly handle the length parameter [BZ #24097]
- x86-64 memset/wmemset: Properly handle the length parameter [BZ #24097]
- x86-64 memrchr: Properly handle the length parameter [BZ #24097]
- x86-64 memcpy: Properly handle the length parameter [BZ #24097]
- x86-64 memcmp/wmemcmp: Properly handle the length parameter [BZ #24097]
- x86-64 memchr/wmemchr: Properly handle the length parameter [BZ #24097]
- Add XFAIL_ROUNDING_IBM128_LIBGCC to more fma() tests
- Only build libm with -fno-math-errno (bug 24024)
- sysdeps/ieee754/soft-fp: ignore maybe-uninitialized with -O [BZ #19444]
- ARM: fix kernel assisted atomics with GCC 8 (bug 24034)
- riscv: Use __has_include__ to include <asm/syscalls.h> [BZ #24022]
- intl: Do not return NULL on asprintf failure in gettext [BZ #24018]
- malloc: Always call memcpy in _int_realloc [BZ #24027]
- Update Alpha libm-test-ulps
- m68k: Fix sigaction kernel definition (BZ #23967)
- RISC-V: properly terminate call chain (bug 23125)
- support: Do not require overflow builtin in support/blob_repeat.c
* Thu Dec 13 2018 Carlos O'Donell <carlos@redhat.com> - 2.28-26
- Auto-sync with upstream branch release/2.28/master,
  commit 4d7af7815af5217db6e8fde6032ddf4f6b2a4420.
- rdlock stalls indefinitely on an unlocked pthread rwlock (swbz#23861)
* Thu Dec 13 2018 Florian Weimer <fweimer@redhat.com> - 2.28-25
- Auto-sync with upstream branch release/2.28/master,
  commit 852620258deea8afda5674f397113fa87ce1007c:
- powerpc: missing CFI register information in __mpn_* functions (swbz#23614)
* Wed Dec 12 2018 Florian Weimer <fweimer@redhat.com> - 2.28-24
- Auto-sync with upstream branch release/2.28/master,
  commit ea16a6938d7ca5f4c2b67c11251c70b30796602a:
- malloc: Add additional test case for tcache double free check (#1647395)
- inet/tst-if_index-long: New test case for CVE-2018-19591 (swbz#23927)
- compat getdents64: Use correct offset for retry (swbz#23972)
- elf: Fix _dl_profile_fixup data-dependency issue (swbz#23690)
* Thu Nov 29 2018 DJ Delorie <dj@redhat.com> - 2.28-23
- Auto-sync with upstream branch release/2.28/master,
  commit b8dd0f42780a3133c02f064a2c0c5c4e7ab61aaa.
- malloc: tcache double free check (#1647395)
* Wed Nov 28 2018 Florian Weimer <fweimer@redhat.com> - 2.28-22
- Auto-sync with upstream branch release/2.28/master,
  commit ce6ba630dbc96f49eb1f30366aa62261df4792f9:
- CVE-2018-19591: if_nametoindex: Fix descriptor leak (#1654000)
- support: Print timestamps in timeout handler
- libio/tst-readline: Increase timeout
* Mon Nov 26 2018 Florian Weimer <fweimer@redhat.com> - 2.28-21
- Do not use parallel make for building locales (#1652228)
* Mon Nov 19 2018 Florian Weimer <fweimer@redhat.com> - 2.28-20
- Auto-sync with upstream branch release/2.28/master,
  commit f44c2ca5eacd2df76fc38be75f9ebb8f0ff555eb:
- Update system call list to Linux 4.19
- time: Fix tzfile low-memory assertion failure (swbz#21716)
- Add newlines in __libc_fatal calls (swbz#20271)
- nscd: Fix use-after-free in addgetnetgrentX (swbz#23520)
- malloc: Additional heap integrity checks
- Add an additional test to resolv/tst-resolv-network.c (swbz#17630)
* Fri Nov  9 2018 Florian Weimer <fweimer@redhat.com> - 2.28-19
- Auto-sync with upstream branch release/2.28/master,
  commit 3e8d8dd5afba18a847ff7a80f473336f777cc329:
- Disable CET for binaries created by older link editors (#1648297)
* Wed Nov  7 2018 Florian Weimer <fweimer@redhat.com> - 2.28-18
- Drop patches that were applied to upstream release/2.28/master branch:
    glibc-rh1614705.patch
    glibc-rh1615608.patch
    glibc-error-va_end.patch
    glibc-nscd-leak.patch
    glibc-nss_files-leak.patch
    glibc-rh1622669.patch
    glibc-1622674-1.patch
    glibc-1622674-2.patch
    glibc-rh1631338-1.patch
    glibc-rh1631338-2.patch
    glibc-rh1623519.patch
    glibc-rh1631719.patch
    glibc-rh1631728.patch
    glibc-rh1623519-2.patch
- Auto-sync with upstream branch release/2.28/master,
  commit fc0e3393ff775aa795b523083bb0db7f18d3b91e:
- RISC-V: Move libc_fesetround_riscv after libc_feholdexcept_riscv
- pthread_spawn: Fix potential segfault in maybe_script_execute
- preadv2/pwritev2: Fix misreported errno (swbz#23579)
- kl_GL: Fix spelling of Sunday, should be "sapaat" (swbz#20209)
- i386: Use _dl_runtime_[resolve|profile]_shstk for SHSTK (swbz#23716)
- pthread_mutex_lock: Fix race while promoting to PTHREAD_MUTEX_ELISION_NP
  (swbz#23275)
- signal: Use correct type for si_band in siginfo_t (swbz#23562)
- stdlib/test-bz22786: Avoid spurious test failures using alias mappings
- x86: Fix Haswell CPU string flags (swbz#23709)
- libanl: Fix crash if first helper thread creation failed (#1646381)
* Thu Nov  1 2018 Mike FABIAN <mfabian@redhat.com> - 2.28-17
- Include Esperanto (eo) in glibc-all-langpacks (#1643756)
* Thu Sep 27 2018 Florian Weimer <fweimer@redhat.com> - 2.28-16
- stdlib/tst-setcontext9 test suite failure on ppc64le (#1623519)
* Wed Sep 26 2018 Florian Weimer <fweimer@redhat.com> - 2.28-15
- Add missing ENDBR32 in start.S (#1631728)
* Wed Sep 26 2018 Florian Weimer <fweimer@redhat.com> - 2.28-14
- Fix bug in generic strstr with large needles (#1631719)
* Wed Sep 26 2018 Florian Weimer <fweimer@redhat.com> - 2.28-13
- stdlib/tst-setcontext9 test suite failure (#1623519)
* Wed Sep 26 2018 Florian Weimer <fweimer@redhat.com> - 2.28-12
- gethostid: Missing NULL check for gethostbyname_r result (#1631338)
* Wed Sep  5 2018 Florian Weimer <fweimer@redhat.com> - 2.28-11
- Add python3-devel build dependency for downstream benefit
* Wed Sep  5 2018 Carlos O'Donell <carlos@redhat.com> - 2.28-10
- Provide compatibility support for linking against libpthread_nonshared.a
  (#1625507)
-------------------------------------------------------------------------------
-
References:

  [ 1 ] Bug #1696390 - glibc: The Japanese Era name will be changed on May 1,
 2019 [f29]
        https://bugzilla.redhat.com/show_bug.cgi?id=1696390
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-5fcc2049a1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org