-
Notifications
You must be signed in to change notification settings - Fork 4
/
NEWS
4417 lines (3554 loc) · 194 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
GNU C Library NEWS -- history of user-visible changes.
Copyright (C) 1992-2018 Free Software Foundation, Inc.
See the end for copying conditions.
Please send GNU C library bug reports via <https://sourceware.org/bugzilla/>
using `glibc' in the "product" field.
Version 2.27
Major new features:
* The GNU C Library can now be compiled with support for building static
PIE executables (See --enable-static-pie in INSTALL). These static PIE
executables are like static executables but can be loaded at any address
and provide additional security hardening benefits at the cost of some
memory and performance. When the library is built with --enable-static-pie
the resulting libc.a is usable with GCC 8 and above to create static PIE
executables using the GCC option '-static-pie'. This feature is currently
supported on i386, x86_64 and x32 with binutils 2.29 or later, and on
aarch64 with binutils 2.30 or later.
* Optimized x86-64 asin, atan2, exp, expf, log, pow, atan, sin, cosf,
sinf, sincosf and tan with FMA, contributed by Arjan van de Ven and
H.J. Lu from Intel.
* Optimized x86-64 trunc and truncf for processors with SSE4.1.
* Optimized generic expf, exp2f, logf, log2f, powf, sinf, cosf and sincosf.
* In order to support faster and safer process termination the malloc API
family of functions will no longer print a failure address and stack
backtrace after detecting heap corruption. The goal is to minimize the
amount of work done after corruption is detected and to avoid potential
security issues in continued process execution. Reducing shutdown time
leads to lower overall process restart latency, so there is benefit both
from a security and performance perspective.
* The abort function terminates the process immediately, without flushing
stdio streams. Previous glibc versions used to flush streams, resulting
in deadlocks and further data corruption. This change also affects
process aborts as the result of assertion failures.
* On platforms where long double has the IEEE binary128 format (aarch64,
alpha, mips64, s390 and sparc), the math library now implements _Float128
interfaces for that type, as defined by ISO/IEC TS 18661-3:2015. These
are the same interfaces added in version 2.26 for some platforms where
this format is supported but is not the format of long double.
* On platforms with support for _Float64x (aarch64, alpha, i386, ia64,
mips64, powerpc64le, s390, sparc and x86_64), the math library now
implements interfaces for that type, as defined by ISO/IEC TS
18661-3:2015. These are corresponding interfaces to those supported for
_Float128.
* The math library now implements interfaces for the _Float32, _Float64 and
_Float32x types, as defined by ISO/IEC TS 18661-3:2015. These are
corresponding interfaces to those supported for _Float128.
* glibc now implements the memfd_create and mlock2 functions on Linux.
* Support for memory protection keys was added. The <sys/mman.h> header now
declares the functions pkey_alloc, pkey_free, pkey_mprotect, pkey_set,
pkey_get.
* The copy_file_range function was added.
* Optimized memcpy, mempcpy, memmove, and memset for sparc M7.
* The ldconfig utility now processes `include' directives using the C/POSIX
collation ordering. Previous glibc versions used locale-specific
ordering, the change might break systems that relied on that.
* Support for two grammatical forms of month names has been added.
In a call to strftime, the "%B" and "%b" format specifiers will now
produce the grammatical form required when the month is used as part
of a complete date. New "%OB" and "%Ob" specifiers produce the form
required when the month is named by itself. For instance, in Greek
and in many Slavic and Baltic languages, "%B" will produce the month
in genitive case, and "%OB" will produce the month in nominative case.
In a call to strptime, "%B", "%b", "%h", "%OB", "%Ob", and "%Oh"
are all valid and will all accept any known form of month
name---standalone or complete, abbreviated or full. In a call to
nl_langinfo, the query constants MON_1..12 and ABMON_1..12 return
the strings used by "%B" and "%b", respectively. New query
constants ALTMON_1..12 and _NL_ABALTMON_1..12 return the strings
used by "%OB" and "%Ob", respectively.
In a locale definition file, use "alt_mon" and "ab_alt_mon" to
define the strings for %OB and %Ob, respectively; these have the
same syntax as "mon" and "ab_mon".
This feature is currently a GNU extension, but it is expected to
be added to the next revision of POSIX, and it is also already
available on some BSD-derived operating systems.
This feature will cause existing statically compiled applications
to fail to load locales and fall back to the builtin C/POSIX locales.
See notes below for other changes affecting compatibility.
Deprecated and removed features, and other changes affecting compatibility:
* Statically compiled applications attempting to load locales compiled for the
GNU C Library version 2.27 will fail and fall back to the builtin C/POSIX
locale. The reason for this is that the addition of the new "%OB" and "%Ob",
support for two grammatical forms of the month names, also extends the locale
data binary format. Static applications needing locale support must be
recompiled to match the runtime and data they are deployed with. In some
distributions there is an upgrade window where dynamically linked applications
may use a new library but the old locale data and also fall back to the
builtin C/POSIX locales; restarting the application process is sufficient to
fix this.
* Support for statically linked applications which call dlopen is deprecated
and will be removed in a future version of glibc. Applications which call
dlopen need to be linked dynamically instead.
* Support for old programs which use internal stdio data structures and
functions is deprecated. This includes programs which use the C++ streams
provided by libstdc++ in GCC 2.95. Programs which use the internal
symbols _IO_adjust_wcolumn, _IO_default_doallocate, _IO_default_finish,
_IO_default_pbackfail, _IO_default_uflow, _IO_default_xsgetn,
_IO_default_xsputn, _IO_doallocbuf, _IO_do_write, _IO_file_attach,
_IO_file_close, _IO_file_close_it, _IO_file_doallocate, _IO_file_fopen,
_IO_file_init, _IO_file_jumps, _IO_fileno, _IO_file_open,
_IO_file_overflow, _IO_file_read, _IO_file_seek, _IO_file_seekoff,
_IO_file_setbuf, _IO_file_stat, _IO_file_sync, _IO_file_underflow,
_IO_file_write, _IO_file_xsputn, _IO_flockfile, _IO_flush_all,
_IO_flush_all_linebuffered, _IO_free_backup_area, _IO_free_wbackup_area,
_IO_init, _IO_init_marker, _IO_init_wmarker, _IO_iter_begin, _IO_iter_end,
_IO_iter_file, _IO_iter_next, _IO_least_wmarker, _IO_link_in,
_IO_list_all, _IO_list_lock, _IO_list_resetlock, _IO_list_unlock,
_IO_marker_delta, _IO_marker_difference, _IO_remove_marker, _IO_seekmark,
_IO_seekwmark, _IO_str_init_readonly, _IO_str_init_static,
_IO_str_overflow, _IO_str_pbackfail, _IO_str_seekoff, _IO_str_underflow,
_IO_switch_to_main_wget_area, _IO_switch_to_wget_mode,
_IO_unsave_wmarkers, _IO_wdefault_doallocate, _IO_wdefault_finish,
_IO_wdefault_pbackfail, _IO_wdefault_setbuf, _IO_wdefault_uflow,
_IO_wdefault_xsgetn, _IO_wdefault_xsputn, _IO_wdoallocbuf, _IO_wdo_write,
_IO_wfile_jumps, _IO_wfile_overflow, _IO_wfile_sync, _IO_wfile_underflow,
_IO_wfile_xsputn, _IO_wmarker_delta, or _IO_wsetb may stop working with a
future version of glibc. Unlike other symbol removals, these old
applications will not be supported using compatibility symbols.
* On GNU/Linux, the obsolete Linux constant PTRACE_SEIZE_DEVEL is no longer
defined by <sys/ptrace.h>.
* libm no longer supports SVID error handling (calling a user-provided
matherr function on error) or the _LIB_VERSION variable to control error
handling. (SVID error handling and the _LIB_VERSION variable still work
for binaries linked against older versions of the GNU C Library.) The
libieee.a library is no longer provided. math.h no longer defines struct
exception, or the macros X_TLOSS, DOMAIN, SING, OVERFLOW, UNDERFLOW,
TLOSS, PLOSS and HUGE.
* The libm functions pow10, pow10f and pow10l are no longer supported for
new programs. Programs should use the standard names exp10, exp10f and
exp10l for these functions instead.
* The mcontext_t type is no longer the same as struct sigcontext. On
platforms where it was previously the same, this changes the C++ name
mangling for interfaces involving this type.
* The add-ons mechanism for building additional packages at the same time as
glibc has been removed. The --enable-add-ons configure option is now
ignored.
* The --without-fp configure option is now ignored. Whether hardware
floating-point instructions are used is now configured based on whether
the compiler used at configure time (without any options implied by a
--with-cpu= configure option) uses such instructions.
* The res_hnok, res_dnok, res_mailok and res_ownok functions now check that
the specified string can be parsed as a domain name.
* In the malloc_info output, the <heap> element may contain another <aspace>
element, "subheaps", which contains the number of sub-heaps.
* The libresolv function p_secstodate is no longer supported for new
programs.
* The tilepro-*-linux-gnu configuration is no longer supported.
* The nonstandard header files <libio.h> and <_G_config.h> are deprecated
and will be removed in a future release. Software that is still using
either header should be updated to use standard <stdio.h> interfaces
instead.
libio.h was originally the header for a set of supported GNU extensions,
but they have not been maintained as such in many years, they are now
standing in the way of improvements to stdio, and we don't think there are
any remaining external users. _G_config.h was never intended for public
use, but predates the bits convention.
Changes to build and runtime requirements:
* bison version 2.7 or later is required to generate code in the 'intl'
subdirectory.
Security related changes:
CVE-2009-5064: The ldd script would sometimes run the program under
examination directly, without preventing code execution through the
dynamic linker. (The glibc project disputes that this is a security
vulnerability; only trusted binaries must be examined using the ldd
script.)
CVE-2017-15670: The glob function, when invoked with GLOB_TILDE,
suffered from a one-byte overflow during ~ operator processing (either
on the stack or the heap, depending on the length of the user name).
Reported by Tim Rühsen.
CVE-2017-15671: The glob function, when invoked with GLOB_TILDE,
would sometimes fail to free memory allocated during ~ operator
processing, leading to a memory leak and, potentially, to a denial
of service.
CVE-2017-15804: The glob function, when invoked with GLOB_TILDE and
without GLOB_NOESCAPE, could write past the end of a buffer while
unescaping user names. Reported by Tim Rühsen.
CVE-2017-17426: The malloc function, when called with an object size near
the value SIZE_MAX, would return a pointer to a buffer which is too small,
instead of NULL. This was a regression introduced with the new malloc
thread cache in glibc 2.26. Reported by Iain Buclaw.
CVE-2017-1000408: Incorrect array size computation in _dl_init_paths leads
to the allocation of too much memory. (This is not a security bug per se,
it is mentioned here only because of the CVE assignment.) Reported by
Qualys.
CVE-2017-1000409: Buffer overflow in _dl_init_paths due to miscomputation
of the number of search path components. (This is not a security
vulnerability per se because no trust boundary is crossed if the fix for
CVE-2017-1000366 has been applied, but it is mentioned here only because
of the CVE assignment.) Reported by Qualys.
CVE-2017-16997: Incorrect handling of RPATH or RUNPATH containing $ORIGIN
for AT_SECURE or SUID binaries could be used to load libraries from the
current directory.
CVE-2018-1000001: Buffer underflow in realpath function when getcwd function
succeeds without returning an absolute path due to unexpected behaviour
of the Linux kernel getcwd syscall. Reported by halfdog.
The following bugs are resolved with this release:
[The release manager will add the list generated by
scripts/list-fixed-bugs.py just before the release.]
Version 2.26
Major new features:
* A per-thread cache has been added to malloc. Access to the cache requires
no locks and therefore significantly accelerates the fast path to allocate
and free small amounts of memory. Refilling an empty cache requires locking
the underlying arena. Performance measurements show significant gains in a
wide variety of user workloads. Workloads were captured using a special
instrumented malloc and analyzed with a malloc simulator. Contributed by
DJ Delorie with the help of Florian Weimer, and Carlos O'Donell.
* Unicode 10.0.0 Support: Character encoding, character type info, and
transliteration tables are all updated to Unicode 10.0.0, using
generator scripts contributed by Mike FABIAN (Red Hat).
These updates cause user visible changes, especially the changes in
wcwidth for many emoji characters cause problems when emoji sequences
are rendered with pango, see for example:
https://bugzilla.gnome.org/show_bug.cgi?id=780669#c5
* Collation of Hungarian has been overhauled and is now consistent with "The
Rules of Hungarian Orthography, 12th edition" (Bug 18934). Contributed by
Egmont Koblinger.
* Improvements to the DNS stub resolver, contributed by Florian Weimer:
- The GNU C Library will now detect when /etc/resolv.conf has been
modified and reload the changed configuration. The new resolver option
“no-reload” (RES_NORELOAD) disables this behavior.
- The GNU C Library now supports an arbitrary number of search domains
(configured using the “search” directive in /etc/resolv.conf);
previously, there was a hard limit of six domains. For backward
compatibility, applications that directly modify the ‘_res’ global
object are still limited to six search domains.
- When the “rotate” (RES_ROTATE) resolver option is active, the GNU C
Library will now randomly pick a name server from the configuration as a
starting point. (Previously, the second name server was always used.)
* The tunables feature is now enabled by default. This allows users to tweak
behavior of the GNU C Library using the GLIBC_TUNABLES environment variable.
* New function reallocarray, which resizes an allocated block (like realloc)
to the product of two sizes, with a guaranteed clean failure upon integer
overflow in the multiplication. Originally from OpenBSD, contributed by
Dennis Wölfing and Rüdiger Sonderfeld.
* New wrappers for the Linux-specific system calls preadv2 and pwritev2.
These are extended versions of preadv and pwritev, respectively, taking an
additional flags argument. The set of supported flags depends on the
running kernel; full support currently requires kernel 4.7 or later.
* posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to
create a new session ID for the spawned process. This feature is
scheduled to be added to the next major revision of POSIX; for the time
being, it is available under _GNU_SOURCE.
* errno.h is now safe to use from C-preprocessed assembly language on all
supported operating systems. In this context, it will only define the
Exxxx constants, as preprocessor macros expanding to integer literals.
* On ia64, powerpc64le, x86-32, and x86-64, the math library now implements
128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE
754-2008) and ISO/IEC TS 18661-3:2015. Contributed by Paul E. Murphy,
Gabriel F. T. Gomes, Tulio Magno Quites Machado Filho, and Joseph Myers.
To compile programs that use this feature, the compiler must support
128-bit floating point with the type name _Float128 (as defined by TS
18661-3) or __float128 (the nonstandard name used by GCC for C++, and for
C prior to version 7). _GNU_SOURCE or __STDC_WANT_IEC_60559_TYPES_EXT__
must be defined to make the new interfaces visible.
The new functions and macros correspond to those present for other
floating-point types (except for a few obsolescent interfaces not
supported for the new type), with F128 or f128 suffixes; for example,
strtof128, HUGE_VAL_F128 and cosf128. Following TS 18661-3, there are no
printf or scanf formats for the new type; the strfromf128 and strtof128
interfaces should be used instead.
Deprecated and removed features, and other changes affecting compatibility:
* The synchronization that pthread_spin_unlock performs has been changed to
now be equivalent to a C11 atomic store with release memory order to the
spin lock's memory location. Previously, several (but not all)
architectures used stronger synchronization (e.g., containing what is
often called a full barrier). This change can improve performance, but
may affect odd fringe uses of spin locks that depend on the previous
behavior (e.g., using spin locks as atomic variables to try to implement
Dekker's mutual exclusion algorithm).
* The port to Native Client running on ARMv7-A (--host=arm-nacl) has been
removed.
* Sun RPC is deprecated. The rpcgen program, librpcsvc, and Sun RPC headers
will only be built and installed when the GNU C Library is configured with
--enable-obsolete-rpc. This allows alternative RPC implementations, such
as TIRPC or rpcsvc-proto, to be used.
* The NIS(+) name service modules, libnss_nis, libnss_nisplus, and
libnss_compat, are deprecated, and will not be built or installed by
default.
The NIS(+) support library, libnsl, is also deprecated. By default, a
compatibility shared library will be built and installed, but not headers
or development libraries. Only a few NIS-related programs require this
library. (In particular, the GNU C Library has never required programs
that use 'gethostbyname' to be linked with libnsl.)
Replacement implementations based on TIRPC, which additionally support
IPv6, are available from <https://github.com/thkukuk/>. The configure
option --enable-obsolete-nsl will cause libnsl's headers, and the NIS(+)
name service modules, to be built and installed.
* The DNS stub resolver no longer performs EDNS fallback. If EDNS or DNSSEC
support is enabled, the configured recursive resolver must support EDNS.
(Responding to EDNS-enabled queries with responses which are not
EDNS-enabled is fine, but FORMERR responses are not.)
* res_mkquery and res_nmkquery no longer support the IQUERY opcode. DNS
servers have not supported this opcode for a long time.
* The _res_opcodes variable has been removed from libresolv. It had been
exported by accident.
* <string.h> no longer includes inline versions of any string functions,
as this kind of optimization is better done by the compiler. The macros
__USE_STRING_INLINES and __NO_STRING_INLINES no longer have any effect.
* The nonstandard header <xlocale.h> has been removed. Most programs should
use <locale.h> instead. If you have a specific need for the definition of
locale_t with no other declarations, please contact
[email protected] and explain.
* The obsolete header <sys/ultrasound.h> has been removed.
* The obsolete signal constant SIGUNUSED is no longer defined by <signal.h>.
* The obsolete function cfree has been removed. Applications should use
free instead.
* The stack_t type no longer has the name struct sigaltstack. This changes
the C++ name mangling for interfaces involving this type.
* The ucontext_t type no longer has the name struct ucontext. This changes
the C++ name mangling for interfaces involving this type.
* On M68k GNU/Linux and MIPS GNU/Linux, the fpregset_t type no longer has
the name struct fpregset. On Nios II GNU/Linux, the mcontext_t type no
longer has the name struct mcontext. On SPARC GNU/Linux, the struct
mc_fq, struct rwindow, struct fpq and struct fq types are no longer
defined in sys/ucontext.h, the mc_fpu_t type no longer has the name struct
mc_fpu, the gwindows_t type no longer has the name struct gwindows and the
fpregset_t type no longer has the name struct fpu. This changes the C++
name mangling for interfaces involving those types.
* On S/390 GNU/Linux, the constants defined by <sys/ptrace.h> have been
synced with the kernel:
- PTRACE_GETREGS, PTRACE_SETREGS, PTRACE_GETFPREGS and PTRACE_SETFPREGS
are not supported on this architecture and have been removed.
- PTRACE_SINGLEBLOCK, PTRACE_SECCOMP_GET_FILTER, PTRACE_PEEKUSR_AREA,
PTRACE_POKEUSR_AREA, PTRACE_GET_LAST_BREAK, PTRACE_ENABLE_TE,
PTRACE_DISABLE_TE and PTRACE_TE_ABORT_RAND have been added.
Programs that assume the GET/SETREGS ptrace requests are universally
available will now fail to build, instead of malfunctioning at runtime.
Changes to build and runtime requirements:
* Linux kernel 3.2 or later is required at runtime, on all architectures
supported by that kernel. (This is a change from version 2.25 only for
x86-32 and x86-64.)
* GNU Binutils 2.25 or later is now required to build the GNU C Library.
* On most architectures, GCC 4.9 or later is required to build the GNU C
Library. On powerpc64le, GCC 6.2 or later is required.
Older GCC versions and non-GNU compilers are still supported when
compiling programs that use the GNU C Library. (We do not know exactly
how old, and some GNU extensions to C may be _de facto_ required. If you
are interested in helping us make this statement less vague, please
contact [email protected].)
Security related changes:
* The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes,
to avoid fragmentation-based spoofing attacks (CVE-2017-12132).
* LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE
mode to guard against local privilege escalation attacks (CVE-2017-1000366).
* Avoid printing a backtrace from the __stack_chk_fail function since it is
called on a corrupt stack and a backtrace is unreliable on a corrupt stack
(CVE-2010-3192).
* A use-after-free vulnerability in clntudp_call in the Sun RPC system has been
fixed (CVE-2017-12133).
The following bugs are resolved with this release:
[984] network: Respond to changed resolv.conf in gethostbyname
[5010] network: sunrpc service cleanup causes unwanted port mapper traffic
[12068] localedata: sc_IT: misspelled yesexpr/day/abday/mon/abmon/date_fmt
fields
[12189] libc: __stack_chk_fail should not attempt a backtrace
(CVE-2010-3192)
[14096] time: Race condition on timezone/tst-timezone.out
[14172] localedata: az_IR: new locale
[14995] build: glibc fails to build if gold is the default linker, even if
ld.bfd is available
[15998] build: [powerpc] Set arch_minimum_kernel for powerpc LE
[16637] network: inet_pton function is accepting IPv6 with bad format
[16640] string: string/strtok.c: undefined behaviour inconsistent between
x86 and other generic code
[16875] localedata: ko_KR: fix lang_name
[17225] localedata: ar_SY: localized month names for May and June are
incorrect
[17297] localedata: da_DK: wrong date_fmt string
[18907] stdio: Incorrect order of __wur __THROW in <printf.h>
[18934] localedata: hu_HU: collate: fix multiple bugs and add tests
[18988] nptl: pthread wastes memory with mlockall(MCL_FUTURE)
[19066] localedata: ar_SA abbreviated day and month names are in English
[19569] network: resolv: Support an arbitrary number of search domains
[19570] network: Implement random DNS server selection in the stub
resolver
[19838] locale: localedef fails on PA-RISC
[19919] localedata: iso14651_t1_common: Correct the Malayalam sorting
order of 0D36 and 0D37
[19922] localedata: iso14651_t1_common: Define collation for Malayalam
chillu characters
[20098] libc: FAIL: debug/backtrace-tst on hppa
[20257] network: sunrpc: clntudp_call does not enforce timeout when
receiving data
[20275] localedata: locale day/abday/mon/abmon should not have trailing
whitespace
[20313] localedata: Update locale data to Unicode 9.0
[20424] manual: Document how to provide a malloc replacement
[20496] localedata: agr_PE: new language locale Awajún / Aguaruna (agr)
for Peru
[20686] locale: Add el_GR@euro to SUPPORTED.
[20831] dynamic-link: _dl_map_segments does not test for __mprotect
failures consistently
[21015] dynamic-link: Document and fix --enable-bind-now
[21016] nptl: pthread_cond support is broken on hppa
[21029] libc: glibc-2.23 (and later) fails to compile with -fno-omit-
frame-pointer on i386
[21049] libc: segfault in longjmp_chk() due to clobbered processor
register
[21075] libc: unused assigment to %g4 in sparc/sparc{64,32}/clone.S
[21088] libc: Build fails with --enable-static-nss
[21094] math: cosf(1.57079697) has 3 ulp error on targets where the
generic c code is used
[21109] libc: Tunables broken on big-endian
[21112] math: powf has large ulp errors with base close to 1 and exponent
around 4000
[21115] network: sunrpc: Use-after-free in error path in clntudp_call
(CVE-2017-12133)
[21120] malloc: glibc malloc is incompatible with GCC 7
[21130] math: Incorrect return from y0l (-inf) and y1l (-inf) when linking
with -lieee
[21134] math: Exception (divide by zero) not set for y0/y1 (0.0) and y0/y1
(-0.0) when linking with -lieee
[21171] math: log10, log2 and lgamma return incorrect results
[21179] libc: handle R_SPARC_DISP64 and R_SPARC_REGISTER relocs
[21182] libc: __memchr_sse2: regression in glibc-2.25 on i686
[21207] localedata: ce_RU: update weekdays from CLDR
[21209] dynamic-link: LD_HWCAP_MASK read in setuid binaries
[21217] localedata: Update months from CLDR-31
[21232] libc: miss posix_fadvise64 on MIPS64 when static linking
[21243] libc: support_delete_temp_file should issue warning for failed
remove()
[21244] libc: support resolv_test_start() socket fd close should be
checked for errors.
[21253] libc: localedef randomly segfaults when using -fstack-check due to
new posix_spawn implementation
[21258] dynamic-link: Branch predication in _dl_runtime_resolve_avx512_opt
leads to lower CPU frequency
[21259] libc: [alpha] termios.h missing IXANY for POSIX
[21261] libc: [sparc64] bits/setjmp.h namespace
[21267] network: [mips] bits/socket.h IOC* namespace
[21268] libc: [alpha] termios.h NL2, NL3 namespace
[21270] libc: mmap64 silently truncates large offset values
[21275] libc: posix_spawn always crashes on ia64 now
[21277] libc: [alpha] termios.h missing IUCLC for UNIX98 and older
[21280] math: [powerpc] logbl for POWER7 return incorrect results
[21289] libc: Incorrect declaration for 32-bit platforms with
_FILE_OFFSET_BITS=64 causes build error
[21295] network: GETAI(AF_UNSPEC) drops IPv6 addresses if nss module does
not support gethostbyname4_r
[21298] nptl: rwlock can deadlock on frequent reader/writer phase
switching
[21338] malloc: mallopt M_ARENA_MAX doesn't set the maximum number of
arenas
[21340] libc: Support POSIX_SPAWN_SETSID
[21357] libc: unwind-dw2-fde deadlock when using AddressSanitizer
[21359] network: ns_name_pack needs additional byte in destination buffer
[21361] network: resolv: Reduce advertised EDNS0 buffer size to guard
against fragmentation attacks (CVE-2017-12132)
[21369] network: resolv: Remove EDNS fallback
[21371] libc: Missing timespec definition when compiled with _XOPEN_SOURCE
and _POSIX_C_SOURCE
[21386] nptl: Assertion in fork for distinct parent PID is incorrect
[21391] dynamic-link: x86: Set dl_platform and dl_hwcap from CPU features
[21393] stdio: Missing dup3 error check in freopen, freopen64
[21396] libc: Use AVX2 memcpy/memset on Skylake server
[21399] localedata: Bad description for U00EC in
localedata/charmaps/CP1254
[21411] malloc: realloc documentation error
[21426] network: sys/socket.h uio.h namespace
[21428] libc: [aarch64] tst-backtrace5 testsuite failure
[21445] libc: signal.h bsd_signal namespace
[21455] network: Network headers stdint.h namespace
[21474] network: resolv: res_init does not use RES_DFLRETRY (2) but 4 for
retry value
[21475] network: resolv: Overlong search path is truncated mid-label
[21511] libc: sigstack namespace
[21512] libc: clone() ends up calling exit_group() through _exit() wrapper
[21514] libc: sysdeps/unix/sysv/linux/sys/syscall.h:31:27: fatal error:
bits/syscall.h: No such file or directory
[21517] libc: struct sigaltstack namespace
[21528] dynamic-link: Duplicated minimal strtoul implementations in ld.so
[21533] localedata: Update locale data to Unicode 10.0
[21537] libc:
../sysdeps/unix/sysv/linux/s390/s390-32/__makecontext_ret.S:44: Error:
junk at end of line, first unrecognized character is `@'
[21538] libc: SIG_HOLD missing for XPG4
[21539] libc: S390: Mismatch between kernel and glibc ptrace.h with
request 12: PTRACE_SINGLEBLOCK vs PTRACE_GETREGS.
[21542] libc: Use conservative default for sysconf (_SC_NPROCESSORS_ONLN)
[21543] libc: sigevent namespace
[21548] libc: [mips] get/set/make/swap context for MIPS O32 assume wrong
size for general purpose registers in mcontext_t structure
[21550] libc: sigwait namespace
[21552] libc: XPG4 bsd_signal namespace
[21554] libc: sigpause namespace
[21560] libc: sys/wait.h signal.h namespace
[21561] libc: waitid namespace
[21573] nptl: GCC 7: /usr/bin/install: cannot remove
'/usr/include/stdlib.h': Permission denied
[21575] libc: sys/wait.h missing struct rusage definition
[21584] libc: sigaltstack etc namespace
[21597] libc: siginterrupt namespace
[21607] math: hppa: FAIL: math/test-tgmath
[21609] dynamic-link: Incomplete workaround for GCC __tls_get_addr ABI
issue on x86-64
[21622] libc: [tile] missing SA_* for POSIX.1:2008
[21624] dynamic-link: ld.so: Unsafe alloca allows local attackers to alias
stack and heap (CVE-2017-1000366)
[21625] libc: wait3 namespace
[21654] nss: Incorrect pointer alignment in NSS group merge result
construction
[21657] network: Parse interface zone id for node-local multicast
[21662] string: memcmp-avx2-movbe.S lacks saturating subtraction for
between_2_3
[21666] libc: .symver is used on common symbol
[21668] network: resolv: res_init cross-thread broadcast introduces race
conditions
[21687] math: tgmath.h totalorder, totalordermag return type
[21694] locale: Current Glibc Locale Does Not Support Tok-Pisin and Fiji
Hindi Locale
[21696] libc: Incorrect assumption of of __cpu_mask in
posix/sched_cpucount.c
[21697] libc: sysdeps/posix/spawni.c: 2 * suspicious condition ?
[21706] localedata: yesstr and nostr are missing for Breton [LC_MESSAGES]
locale
[21707] math: ppc64le: Invalid IFUNC resolver from libgcc calls getauxval,
leading to relocation crash
[21709] libc: resolv_conf.c:552: update_from_conf: Assertion
`resolv_conf_matches (resp, conf)' failed.
[21710] localedata: Added Samoan language locale for Samoa
[21711] localedata: Pashto yesstr/nostr locale are missing
[21715] nptl: sysdeps/nptl/bits/pthreadtypes.h: typedef guard
__have_pthread_attr_t can cause redefinition of typedef ‘pthread_attr_t’
[21721] localedata: Incorrect Full Weekday names for ks_IN@devanagari
[21723] localedata: yesstr/nostr missing for Chinese language locale
[21724] localedata: yesstr and nostr are missing for Xhosa [LC_MESSAGES]
locale
[21727] localedata: yesstr and nostr are missing for Tsonga [LC_MESSAGES]
locale
[21728] localedata: New Locale for Tongan language
[21729] localedata: incorrect LC_NAME fields for hi_IN
[21733] localedata: yesstr and nostr are missing for zh_HK
[21734] localedata: Missing yesstr and nostr are for kw_GB
[21738] libc: misc/tst-preadvwritev2 and misc/tst-preadvwritev64v2 fail
[21741] libc: Undefined __memmove_chk_XXX and __memset_chk_XXX in libc.a
[21742] libc: _dl_num_cache_relocations is undefined in libc.a
[21743] localedata: ks_IN@devanagari: abday strings mismatch the day
strings
[21744] libc: Tests failing on --enable-tunables --enable-stack-
protector=all
[21749] localedata: Wrong abbreviated day name (“abday”) for
ar_JO/ar_LB/ar_SY
[21756] localedata: missing yesstr, nostr for nds_DE and nds_NL
[21757] localedata: missing yesstr, nostr for pap_AW and pap_CW
[21759] localedata: missing yesstr and nostr for Tigrinya
[21760] localedata: Fix LC_MESSAGES and LC_ADDRESS for anp_IN
[21766] localedata: Wrong LC_MESSAGES for om_ET Locale
[21767] localedata: Missing Bislama locales
[21768] localedata: Missing yesstr and nostr for aa_ET
[21770] localedata: Missing Field in li_NL
[21778] nptl: Robust mutex may deadlock
[21779] libc: MicroBlaze segfaults when loading libpthread
[21783] localedata: Fix int_select international_call_prefixes
[21784] localedata: Inconsistency in country_isbn
[21788] localedata: Missing Country Postal Abbreviations
[21794] localedata: Added-country_isbn-for-Italy
[21795] localedata: Add/Fix country_isbn for France
[21796] localedata: Added country_isbn for Republic of Korea
[21797] localedata: Fix inconsistency in country_isbn and missing prefixes
[21799] localedata: Added int_select international_call_prefixes
[21801] localedata: Added int_select international_call_prefixes
[21804] nptl: Double semicolon in thread-shared-types.h
[21807] localedata: LC_ADDRESS fix for pap_CW
[21808] localedata: Fix LC_ADDRESS for pap_AW
[21821] localedata: Added country_name in mai_IN
[21822] localedata: Fix LC_TIME for mai_IN
[21823] localedata: missing yesstr, nostr for sa_IN
[21825] localedata: Fix name_mrs for mag_IN
[21828] localedata: 2.26 changelog should mention user visible changes
with unicode 9.0
[21835] localedata: Added Maithili language locale for Nepal
[21838] localedata: Removed redundant data for the_NP
[21839] localedata: Fix LC_MONETARY for ta_LK
[21844] localedata: Fix Latin characters and Months Sequence.
[21848] localedata: Fix mai_NP Title Name
Version 2.25
* The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR
24731-2:2010, is supported to enable declarations of functions from that
TR. Note that not all functions from that TR are supported by the GNU C
Library.
* The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS
18661-1:2014, is supported to enable declarations of functions and macros
from that TS. Note that not all features from that TS are supported by
the GNU C Library.
* The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS
18661-4:2015, is supported to enable declarations of functions and macros
from that TS. Note that most features from that TS are not supported by
the GNU C Library.
* The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are
now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L.
Since the GNU C Library defaults to a much newer revision of POSIX, this
will only affect programs that specifically request an old conformance
mode. For instance, a program compiled with -std=c89 -D_REENTRANT will
see a change in the visible declarations, but a program compiled with
just -D_REENTRANT, or -std=c99 -D_POSIX_C_SOURCE=200809L -D_REENTRANT,
will not.
Some C libraries once required _REENTRANT and/or _THREAD_SAFE to be
defined by all multithreaded code, but glibc has not required this for
many years.
* The inclusion of <sys/sysmacros.h> by <sys/types.h> is deprecated. This
means that in a future release, the macros “major”, “minor”, and “makedev”
will only be available from <sys/sysmacros.h>.
These macros are not part of POSIX nor XSI, and their names frequently
collide with user code; see for instance glibc bug 19239 and Red Hat bug
130601. <stdlib.h> includes <sys/types.h> under _GNU_SOURCE, and C++ code
presently cannot avoid being compiled under _GNU_SOURCE, exacerbating the
problem.
* New <fenv.h> features from TS 18661-1:2014 are added to libm: the
fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the
femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros.
* Integer width macros from TS 18661-1:2014 are added to <limits.h>:
CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH,
UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to
<stdint.h>: INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH,
INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH,
UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH,
INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH,
UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH,
UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH,
UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH,
UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH,
WINT_WIDTH.
* New <math.h> features are added from TS 18661-1:2014:
- Signaling NaN macros: SNANF, SNAN, SNANL.
- Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp,
fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf,
fromfpxl, ufromfpx, ufromfpxf, ufromfpxl.
- llogb functions: the llogb, llogbf and llogbl functions, and the
FP_LLOGB0 and FP_LLOGBNAN macros.
- Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag,
fminmagf, fminmagl.
- Comparison macros: iseqsig.
- Classification macros: iscanonical, issubnormal, iszero.
- Total order functions: totalorder, totalorderf, totalorderl,
totalordermag, totalordermagf, totalordermagl.
- Canonicalize functions: canonicalize, canonicalizef, canonicalizel.
- NaN functions: getpayload, getpayloadf, getpayloadl, setpayload,
setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl.
* The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014,
are added to libc. They convert a floating-point number into string.
* Most of glibc can now be built with the stack smashing protector enabled.
It is recommended to build glibc with --enable-stack-protector=strong.
Implemented by Nick Alcock (Oracle).
* The function explicit_bzero, from OpenBSD, has been added to libc. It is
intended to be used instead of memset() to erase sensitive data after use;
the compiler will not optimize out calls to explicit_bzero even if they
are "unnecessary" (in the sense that no _correct_ program can observe the
effects of the memory clear).
* On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined
to float instead of double. This does not affect the ABI of any libraries
that are part of the GNU C Library, but may affect the ABI of other
libraries that use this type in their interfaces.
* On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the
float_t and double_t types are now defined to long double instead of float
and double. These options are not the default, and this does not affect
the ABI of any libraries that are part of the GNU C Library, but it may
affect the ABI of other libraries that use this type in their interfaces,
if they are compiled or used with those options.
* The getentropy and getrandom functions, and the <sys/random.h> header file
have been added.
* The buffer size for byte-oriented stdio streams is now limited to 8192
bytes by default. Previously, on Linux, the default buffer size on most
file systems was 4096 bytes (and thus remains unchanged), except on
network file systems, where the buffer size was unpredictable and could be
as large as several megabytes.
* The <sys/quota.h> header now includes the <linux/quota.h> header. Support
for the Linux quota interface which predates kernel version 2.4.22 has
been removed.
* The malloc_get_state and malloc_set_state functions have been removed.
Already-existing binaries that dynamically link to these functions will
get a hidden implementation in which malloc_get_state is a stub. As far
as we know, these functions are used only by GNU Emacs and this change
will not adversely affect already-built Emacs executables. Any undumped
Emacs executables, which normally exist only during an Emacs build, should
be rebuilt by re-running “./configure; make” in the Emacs build tree.
* The “ip6-dotint” and “no-ip6-dotint” resolver options, and the
corresponding RES_NOIP6DOTINT flag from <resolv.h> have been removed.
“no-ip6-dotint” had already been the default, and support for the
“ip6-dotint” option was removed from the Internet in 2006.
* The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING
flag from <resolv.h> have been removed. The option relied on a
backwards-incompatible DNS extension which was never deployed on the
Internet.
* The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG,
RES_BLAST defined in the <resolv.h> header file have been deprecated.
They were already unimplemented.
* The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for
_res.flags are deprecated. The flag was standardized in RFC 2133, but
removed again from the IETF name lookup interface specification in RFC
2553. Applications should use getaddrinfo instead.
* DNSSEC-related declarations and definitions have been removed from the
<arpa/nameser.h> header file, and libresolv will no longer attempt to
decode the data part of DNSSEC record types. Previous versions of glibc
only implemented minimal support for the previous version of DNSSEC, which
is incompatible with the currently deployed version.
* The resource record type classification macros ns_t_qt_p, ns_t_mrr_p,
ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the
<arpa/nameser.h> header file because the distinction between RR types and
meta-RR types is not officially standardized, subject to revision, and
thus not suitable for encoding in a macro.
* The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook
and rhook members of the res_state type in <resolv.h> have been removed.
The glibc stub resolver did not support these hooks, but the header file
did not reflect that.
* For multi-arch support it is recommended to use a GCC which has
been built with support for GNU indirect functions. This ensures
that correct debugging information is generated for functions
selected by IFUNC resolvers. This support can either be enabled by
configuring GCC with '--enable-gnu-indirect-function', or by
enabling it by default by setting 'default_gnu_indirect_function'
variable for a particular architecture in the GCC source file
'gcc/config.gcc'.
* GDB pretty printers have been added for mutex and condition variable
structures in POSIX Threads. When installed and loaded in gdb these pretty
printers show various pthread variables in human-readable form when read
using the 'print' or 'display' commands in gdb.
* Tunables feature added to allow tweaking of the runtime for an application
program. This feature can be enabled with the '--enable-tunables' configure
flag. The GNU C Library manual has details on usage and README.tunables has
instructions on adding new tunables to the library.
* A new version of condition variables functions have been implemented in
the NPTL implementation of POSIX Threads to provide stronger ordering
guarantees.
* A new version of pthread_rwlock functions have been implemented to use a more
scalable algorithm primarily through not using a critical section anymore to
make state changes.
Security related changes:
* On ARM EABI (32-bit), generating a backtrace for execution contexts which
have been created with makecontext could fail to terminate due to a
missing .cantunwind annotation. This has been observed to lead to a hang
(denial of service) in some Go applications compiled with gccgo. Reported
by Andreas Schwab. (CVE-2016-6323)
* The DNS stub resolver functions would crash due to a NULL pointer
dereference when processing a query with a valid DNS question type which
was used internally in the implementation. The stub resolver now uses a
question type which is outside the range of valid question type values.
(CVE-2015-5180)
The following bugs are resolved with this release:
[4099] stdio: Overly agressive caching by stream i/o functions.
[7065] build: Support building glibc with -fstack-protector or -fstack-
protector-all
[9842] localedata: en_CA: incorrect date format
[13165] nptl: pthread_cond_wait() can consume a signal that was sent
before it started waiting
[14139] manual: Do not hardcode platform names in manual/libm-err-tab.pl
[15765] nptl: sem_open is wrongly a cancellation point
[16421] network: IN6_IS_ADDR_UNSPECIFIED can use undefined s6_addr32
[16458] libc: endian.h and netinet/in.h byte order macros return values of
wrong type
[16628] dynamic-link: Segfault after a binary without pthread dlopen()s a
library linked with pthread
[16630] nptl: Use SYSENTER for pthread_cond_broadcast/signal() (i.e. fix
"FIXME: Ingo" issue)
[16907] libc: <argp.h> compiled with --std=cXX disables __attribute__
[17252] libc: getrandom and getentropy syscall
[17730] malloc: thread-local storage is sometimes improperly free()'d
after being __libc_memalign()'d
[18241] stdio: failed fseek on memstream does not set errno and can fail
when it shouldnt
[18243] nptl: sem_wait, sem_timedwait are cancellation points shm_open is
not
[18463] nptl: pthread_cond_broadcast issue when surrounded by
PTHREAD_PRIO_INHERIT mutex on ARM
[18784] network: res_query and related function crash for special record
type queries (CVE-2015-5180)
[19380] math: strtod does not raise "inexact"
[19387] string: Integer overflow in memchr
[19390] string: Integer overflow in strncat
[19398] build: linknamespace tests fail with massively parallel build
[19402] nptl: Deadlock with robust shared mutex and asynchronous
termination
[19469] malloc: M_PERTURB in test-skeleton.c invalidates malloc tests
[19473] malloc: Turn malloc_get_state etc. in compatibility symbols
[19514] libc: [PATCH] Fix spelling errors in spelling
"implement"/"implementation" in several places
[19582] network: Deprecate RES_USE_INET6
[19673] manual: clog10 docs appear to be erroneous
[19810] dynamic-link: dlopen with both RTLD_NOLOAD and RTLD_NODELETE
causes a segmentation fault
[19826] libc: invalid pointer returned from __tls_get_addr with static
linking
[20016] network: resolv: Remove hooks support from the API
[20019] dynamic-link: NULL pointer dereference in libc.so.6 IFUNC due to
uninitialized GOT
[20033] math: [x86_64] vectorized math function don't call the __finite
versions
[20116] nptl: use after free in pthread_create
[20181] stdio: open_memstream(): writes not at end of stream corrupt data
[20292] dynamic-link: Comparison in elf/dl-open.c _dl_addr_inside_object
is always true.
[20311] nptl: please install proc_service.h
[20366] libc: Compilation errors in installed headers in strict-compliance
modes
[20370] malloc: malloc: Arena free list management is still racy
(incorrect fix in bug 19243)
[20386] libc: assert (X = 0) does not result in GCC warning
[20432] malloc: malloc: Minimize interface required for interposition
[20435] libc: Missing unwind info in __startcontext causes infinite loop
in _Unwind_Backtrace (CVE-2016-6323)
[20444] hurd: recvmsg: PF_LOCAL sockets and msg_name lead to SIGLOST
[20452] nptl: Addition of sysdep.o to libpthread.a breaks relinking
libpthread.a
[20455] math: [powerpc] fesetexceptflag fails to clear FE_INVALID
[20459] localedata: et_EE: locale has wrong {p,n}_cs_precedes value
[20477] network: resolv: incorrect double-checked locking related to
_res_hconf
[20478] libc: libc_ifunc macro and similar usages leads to false debug-
information.
[20495] math: x86_64 performance degradation due to AVX/SSE transition
penalty
[20497] localedata: lt_LT: LC_TIME d_fmt used is obsolete
[20508] dynamic-link: _dl_runtime_resolve_avx/_dl_runtime_profile_avx512
cause transition penalty
[20517] math: sparcv9 missing fdiml compat symbol
[20524] manual: strverscmp is inconsistent
[20525] libc: <sys/quota.h> should be based on kernel headers
[20539] math: GCC 7 -static -lm fails to link at -O3
[20554] libc: ld: bss-plt forced due to /usr/lib/libc_nonshared.a(ppc-
mcount.oS)
[20558] string: POSIX bcopy/bzero decls do not implement Object Size
Checking
[20591] network: Remove obsolete DNSSEC support
[20592] network: DNS resource record type classification macros in
<arpa/nameser.h> are incorrect
[20593] network: Update DNS RR type definitions
[20611] network: getaddrinfo accepts invalid numeric scope IDs
[20615] build: glibc build fails when using --with-cpu=power9 --enable-
multi-arch
[20629] network: libresolv: Remove support for bitstring labels
(RES_USEBSTRING)
[20647] libc: GLIBC quitting every program - glibc on Pentium-S leads to
assertion: "maxidx >= 2"
[20660] math: [arm] Use VSQRT
[20662] libc: checking whether x86_64-pc-linux-gnu-gcc implicitly enables
-fstack-protector no (32bit gcc 6.2.0 pie and ssp enable)
[20689] libc: Test for FMA should also check for AVX.
[20707] glob: gl_pathv entries not set to NULL with GLOB_DOOFFS
[20715] math: iszero macro breaks existing code
[20718] math: [powerpc] copysignl raises "invalid" for sNaN
[20728] libc: powerpc: Missing TOC stub in clone
[20729] build: glibc-2.24 fails to build for i486 with -Os
[20750] build: Build fails with default PIE enabled gcc-6.x
[20768] math: [alpha] sqrt fegetenv namespace
[20785] libc: binutils 2.28 fails to assemble power6/memset.S file in
glibc
[20787] math: float_t is defined as float incorrectly on x86_64 even if
__FLT_EVAL_METHOD__ is 2
[20790] network: rpcgen buffer overrun in get_prog_declaration
[20822] nptl: race condition in __lll_unlock_elision on powerpc