Core 11.0.2

[billchenchina]

Topic Description

Apply glibc upstream patch, fixes CVE-2023-4911.

Package(s) Affected

glibc aosc-aaa

Security Update?

Yes

Test Build(s) Done

Primary Architectures

• AMD64 amd64
• AArch64 arm64

Secondary Architectures

Architectural progress for "secondary," or experimental ports does not impede on merging of this topic.

• Loongson 3 loongson3
• MIPS R6 64-bit (Little Endian) mips64r6el
• PowerPC 64-bit (Little Endian) ppc64el
• RISC-V 64-bit riscv64

Update(s) Uploaded to Stable

Primary Architectures

• AMD64 amd64
• AArch64 arm64

Secondary Architectures

Architectural progress for "secondary," or experimental ports does not impede on merging of this topic.

• Loongson 3 loongson3
• MIPS R6 64-bit (Little Endian) mips64r6el
• PowerPC 64-bit (Little Endian) ppc64el
• RISC-V 64-bit riscv64

[billchenchina]

Confirmed not affected.

# env -i "GLIBC_TUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=`printf '%08192x' 1`" /usr/bin/su --help
Usage: su [options] [-] [username [args]]

Options:
  -c, --command COMMAND         pass COMMAND to the invoked shell
  -h, --help                    display this help message and exit
  -, -l, --login                make the shell a login shell
  -m, -p,
  --preserve-environment        do not reset environment variables, and
                                keep the same shell
  -s, --shell SHELL             use SHELL instead of the default in passwd

If no username is given, assume root.

# /lib/ld-linux-x86-64.so.2 --list-tunables
/lib/ld-linux-x86-64.so.2: unrecognized option '--list-tunables'
Try '/lib/ld-linux-x86-64.so.2 --help' for more information.

tunable disabled by https://github.com/AOSC-Dev/aosc-os-abbs/blame/460c589e13d8e05c5847939025c2abcdef629ae2/core-libs/glibc/autobuild/defines#L33

[MingcongBai]

That's good news (?). Closing.