------------------------------------------------------------------------------- - Fedora Update Notification FEDORA-2021-0cf36f9134 2021-06-08 01:06:15.794782 ------------------------------------------------------------------------------- -
Name : musl Product : Fedora 34 Version : 1.2.2 Release : 1.fc34 URL : https://musl.libc.org Summary : Fully featured lightweight standard C library for Linux Description : musl is a C standard library to power a new generation of Linux-based devices. It is lightweight, fast, simple, free, and strives to be correct in the sense of standards conformance and safety.
------------------------------------------------------------------------------- - Update Information:
#### What's new for 1.2.2 The release adds the `_Fork` function from the upcoming edition of POSIX and takes advantage of the interpretation dropping the async-signal-safety requirement from `fork` to provide a consistent execution environment (not restricted to calling only async-signal-safe functions) after a multithreaded parent forks. This solves deadlocks which would otherwise be effectively unfixable in some language runtimes that expose `fork` as part of their contract with applications, as well as various library and application software that could and should be fixed, but hasn't been. A number of related issues in synchronization between `fork`, `abort`, async IO, `posix_spawn`, `pthread_exit`, and other components have been fixed as part of this change. The `realpath` function has been rewritten to do its own path traversal, rather than depending on procfs magic symlink contents for `O_PATH` file descriptors. This makes it work prior to mount of `/proc` and in container or chroot environments where `/proc` contents may not accurately reflect the pathname as visible to the calling process. The C versions of the square root functions, used on archs without a native FPU instruction for square root, have also been rewritten with significant improvements to performance, especially on archs that lack FPU entirely. This rewrite also fixes the lack of accurate `sqrtl` on archs with quad-precision `long double`. New functions added include the aforementioned `_Fork`, `reallocarray` from OpenBSD, `gettid` along with `SIGEV_THREAD_ID` timer notification support, and `tcgetwinsize`/`tcsetwinsize` from POSIX-future. A buffer overflow (CVE-2020-28928) in `wcsnrtombs` has been fixed with the function essentially rewritten. This function is not widely used and the bug is not relevant to software that does not use it directly (it's not used by other libc components), but it may be serious for software that does. An assortment of lesser bugs have also been fixed. ------------------------------------------------------------------------------- - ChangeLog:
* Sun May 30 2021 Neal Gompa <ngompa13@gmail.com> - 1.2.2-1 - Update to 1.2.2 ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #1900056 - CVE-2020-28928 musl: infinite loop in wcsnrtombs function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1900056 [ 2 ] Bug #1916568 - musl-1.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1916568 ------------------------------------------------------------------------------- -
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-0cf36f9134' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
|