Lucene search

K
oraclelinuxOracleLinuxELSA-2019-2118
HistoryAug 13, 2019 - 12:00 a.m.

glibc security and bug fix update

2019-08-1300:00:00
linux.oracle.com
40

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.0%

aarch64:
[2.17-292.0.2]

  • CR29749550 [armv5] build failure
  • Add 3 arm patches to aarch64 tree to avoid future build/merge failures.
  • Rebase aarch64 patches at 30000 to avoid future conflicts.
  • Reviewed-by: Jose E. Marchesi
  • EL Errata
  • Add BUS_MCEERR_AR, BUS_MCEERR_AO to sysdeps/unix/sysv/linux/bits/siginfo.h
  • Add MAP_SHARED_VALIDATE to sysdeps/unix/sysv/linux/bits/mman-linux.h and
  • sysdeps/unix/sysv/linux/aarch64/bits/mman-linux.h
  • Add MAP_SYNC to sysdeps/unix/sysv/linux/aarch64/bits/mman.h
  • Add RTEXT_FILTER_SKIP_STATS
  • Reviewed-by: Jose E. Marchesi
    Orabug: <29495283>
  • add Ampere emag to tunable cpu list
  • add optimized memset for emag
  • add an ASIMD variant of strlen for falkor
  • Reviewed-by: Jose E. Marchesi
    Orabug: <2700101>
  • Reviewed-by: Jose E. Marchesi
  • bundle of 71 upstream commits to improve malloc correctness and performance
  • upstream commit 4b5b548c9fedd5e6d920639e42ea8e5f473c4de3
  • Fix BZ #15089: malloc_trim always trim for large padding.
  • upstream commit 51a7380b8968251a49a4c5b0bc7ed1af5b0512c6
  • malloc/malloc.c: Avoid calling sbrk unnecessarily with zero
  • upstream commit 8a35c3fe122d49ba76dff815b3537affb5a50b45
  • Use alignment macros, pagesize and powerof2.
  • upstream commit eab55bfb14f5e1ea6f522d81632ce5a1b8a8c942
  • Add missing includes to sysdeps/generic/malloc-sysdep.h.
  • upstream commit 987c02692a88b8c9024cb99187434aad02c3c047
  • Remove mi_arena nested function.
  • upstream commit 62a5881678b725cdabb27225ebae208a6e4b3f90
  • Fix formatting in malloc_info
  • upstream commit 9fa76613d0df2a23e2b979e2303b12d617d6729d
  • Fix format specifier for n_mmaps
  • upstream commit bb2ce416563a61bb065f92e022dfd231097d90b6
  • malloc: fix comment typo
  • upstream commit c52ff39e8ee052e4a57676d65a27f09bd0a859ad
  • Fix malloc_info namespace (bug 17570).
  • upstream commit fc56e970934d9e936108240f3dc05e5e131f5772
    • malloc/malloc.c: Fix powerof2 check.
  • upstream commit af102d9529faee5810fde80dac6337b6148789ad
  • Remove explicit inline on malloc perturb functions.
  • upstream commit ca6be1655bd357bf6ac8857fba9b9dce928edbdc
  • Use ALIGN_DOWN in systrim.
  • upstream commit 8ba14398e629c1f63b9c91a59a47a713b3cce8bc
  • Do not macro-expand failed assertion expression [BZ #18604]
  • upstream commit 400e12265d99964f8445bb6d717321eb73152cc5
  • Replace MUTEX_INITIALIZER with _LIBC_LOCK_INITIALIZER in generic code
  • upstream commit 00d4e2ea3503e6de0f198cd65343f287a51f04db
  • malloc: Remove arena_mem variable
  • upstream commit ca135f824b1dbaf43e4a673de7725db76a51b714
  • malloc: Remove max_total_mem member from struct malloc_par
  • upstream commit 59eda029a8a35e5f4e5cd7be0f84c6629e48ec6e
  • malloc: Remove NO_THREADS
  • upstream commit b43f552a8a23c0e405ab13a268bee12ada3b7841
  • Fix type of parameter passed by malloc_consolidate
  • upstream commit 8a727af925be63aa6ea0f5f90e16751fd541626b
  • malloc: Remove malloc hooks from fork handler
  • upstream commit 4cf6c72fd2a482e7499c29162349810029632c3f
  • malloc: Rewrite dumped heap for compatibility in __malloc_set_state
  • upstream commit dea39b13e2958a7f0e75b5594a06d97d61cc439f
  • malloc: Correct malloc alignment on 32-bit architectures [BZ #6527]
  • upstream commit 1e8a8875d69e36d2890b223ffe8853a8ff0c9512
  • malloc: Correct size computation in realloc for dumped fake mmapped chunks
  • upstream commit 073f82140c7dbd7af387153c29ac7ac3e882c4ef
  • malloc_usable_size: Use correct size for dumped fake mapped chunks
  • upstream commit f88aab5d508c13ae4a88124e65773d7d827cd47b
  • malloc: Preserve arena free list/thread count invariant [BZ #20370]
  • upstream commit 5bc17330eb7667b96fee8baf3729c3310fa28b40
  • elf: dl-minimal malloc needs to respect fundamental alignment
  • upstream commit 4bf5f2224baa1590f92f7a26930928fe9f7e4b57
  • malloc: Automated part of conversion to __libc_lock
  • upstream commit c1234e60f975da09764683cddff4ef7e2a21ce78
  • Document the M_ARENA_* mallopt parameters
  • upstream commit 68fc2ccc1aebc15b92e596b2bdc5605da1e25f3c
  • Remove redundant definitions of M_ARENA_* macros
  • upstream commit aceb22c1f59231909777f7d0a6b955adbf7096a2
  • Remove references to sbrk to grow/shrink arenas
  • upstream commit e863cce57bff6cb795e6aad745ddf6235bca21ce
  • malloc: Remove malloc_get_state, malloc_set_state [BZ #19473]
  • upstream commit 681421f3cac665a82d000d854ae6df1fb3b561a5
  • sysmalloc: Initialize previous size field of mmaped chunks
  • upstream commit e9c4fe93b3855239752819303ca377dff0ed0553
  • malloc: Use accessors for chunk metadata access
  • upstream commit ae9166f2b8936304ea347a98519372804963447f
  • malloc: Update comments about chunk layout
  • upstream commit 3d7229c2507be1daf0c3e15e1f134076fa8b9025
  • Fix malloc/ tests for GCC 7 -Walloc-size-larger-than=.
  • upstream commit 17f487b7afa7cd6c316040f3e6c86dc96b2eec30
  • Further harden glibc malloc metadata against 1-byte overflows.
  • upstream commit e4e26210c3bdb5dcdce7a3def3b90fa45d3e2c89
  • Fix failing test malloc/tst-interpose-nothread with GCC 7.
  • upstream commit 622222846a2e6ffbcd02cb46cb5f29c48fe4a466
  • Call the right helper function when setting mallopt M_ARENA_MAX (BZ #21338)
  • upstream commit 44e4b889ab0e0497567c8983ad25a78798a3ab51
  • manual: Document replacing malloc [BZ #20424
  • upstream commit 3b5f801ddb838311b5b05c218caac3bdb00d7c95
  • Tweak realloc/MREMAP comment to be more accurate.
  • upstream commit 4e61a6be446026c327aa70cef221c9082bf0085d
  • i386: Increase MALLOC_ALIGNMENT to 16 [BZ #21120]
  • upstream commit d5c3fafc4307c9b7a4c7d5cb381fcdbfad340bcc
  • Add per-thread cache to malloc
  • upstream commit be8aa923a70da16ebabe85e912abc6b815bbdcb4
    • manual/tunables.texi: Add missing @end deftp.
  • upstream commit ed421fca42fd9b4cab7c66e77894b8dd7ca57ed0
  • Avoid backtrace from __stack_chk_fail [BZ #12189]
  • upstream commit eac43cbb8d808a40004aa0a4a286f5c5155beccb
  • malloc: Avoid optimizer warning with GCC 7 and -O3
  • upstream commit ec2c1fcefb200c6cb7e09553f3c6af8815013d83
  • malloc: Abort on heap corruption, without a backtrace [BZ #21754]
  • upstream commit ac3ed168d0c0b2b702319ac0db72c9b475a8c72e
  • malloc: Remove check_action variable [BZ #21754]
  • upstream commit a9da0bb2667ab20f1dbcd0a9ae6846db02fbc96a
  • malloc: Remove corrupt arena flag
  • upstream commit 5129873a8e913e207e5f7b4b521c72f41a1bbf6d
  • malloc: Change top_check return type to void
  • upstream commit 24cffce7366c4070d8f823702a4fcec2cb732595
  • malloc: Resolve compilation failure in NDEBUG mode
  • upstream commit 0c71122c0cee483a4e6abcdbe78a1595eefe86e2
  • malloc: Remove the internal_function attribute
  • upstream commit 1e26d35193efbb29239c710a4c46a64708643320
  • malloc: Fix tcache leak after thread destruction [BZ #22111]
  • upstream Oct 15, 2017 commit 8e57c9432a2b68c8a1e7f4df28f0e8c7acc04753
  • Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 [BZ #22052]
  • upstream Oct 17, 2017 commit e4dd4ace56880d2f1064cd787e2bdb96ddacc3c4
  • Inline tcache functions
  • upstream Oct 17, 2017 commit e956075a5a2044d05ce48b905b10270ed4a63e87
  • Use relaxed atomics for malloc have_fastchunks
  • upstream Oct 17, 2017 commit 3381be5cdef2e43949db12f66a5a3ec23b2c4c90
  • Improve malloc initialization sequence
  • upstream Oct 18, 2017 commit 2c2245b92ccf6344b324d17d8f94ccd3b8c559c6
  • Fix build failure on tilepro due to unsupported atomics
  • upstream Oct 19, 2017 commit d74e6f6c0de55fc588b1ac09c88eb0fb8b8600af
  • Fix deadlock in _int_free consistency check
  • upstream Oct 20, 2017 commit a15d53e2de4c7d83bda251469d92a3c7b49a90db
  • Add single-threaded path to _int_free
  • upstream Oct 20, 2017 commit 6d43de4b85b11d26a19bebe4f55f31be16e3d419
  • Fix build issue with SINGLE_THREAD_P
  • upstream Oct 24, 2017 commit 3f6bb8a32e5f5efd78ac08c41e623651cc242a89
  • Add single-threaded path to malloc/realloc/calloc/memalloc
  • upstream Oct 24, 2017 commit 905a7725e9157ea522d8ab97b4c8b96aeb23df54
  • Add single-threaded path to _int_malloc
  • upstream Nov 15, 2017 commit 7a9368a1174cb15b9f1d6342e0e10dd90dae238d
  • malloc: Add missing arena lock in malloc_info [BZ #22408]
  • upstream Nov 15, 2017 commit 34eb41579c6c34fa60ec6f1aac7b70ba6e1bebcc
  • malloc: Account for all heaps in an arena in malloc_info [BZ #22439]
  • upstream Nov 23, 2017 commit 0a947e061d47c9710838f210506215bd9533324b
  • malloc: Call tcache destructor in arena_thread_freeres
  • upstream Nov 30, 2017 commit 34697694e8a93b325b18f25f7dcded55d6baeaf6
  • Fix integer overflow in malloc when tcache is enabled [BZ #22375]
  • upstream Jan 12, 2018 commit 249a5895f120b13290a372a49bb4b499e749806f
  • malloc: Ensure that the consolidated fast chunk has a sane size.
  • upstream Jan 29, 2018 commit 406e7a0a47110adbf79326c8a0bda5ffac3e0f10
  • malloc: Use assert.h assert macro
  • upstream Feb 10, 2018 commit 402ecba487804e9196769f39a8d157847d3b3104
  • [BZ #22830] malloc_stats: restore cancellation for stderr correctly.
  • upstream Mar 9, 2018 commit 229855e5983881812b21b215346cb990722c6023
  • malloc: Revert sense of prev_inuse in comments
  • upstream Mar 14, 2018 commit bdc3009b8ff0effdbbfb05eb6b10966753cbf9b8
  • malloc: harden removal from unsorted list
  • malloc: fix merge regressions in previous bundle of patches.
    Orabug: <29139332>
  • Reviewed-by: Jose E. Marchesi
  • Modified patches to avoid duplication of patch2754 (added in 2.17-260.0.16)
  • and patch10134.
    OraBug 29319671.
  • Reviewed-by: Egeyar Bagcioglu
  • Regenerate intl/plural.c
    OraBug 28806294.
  • Reviewed-by: Jose E. Marchesi
  • intl: Port to Bison 3.0
  • Backport of upstream gettext commit 19f23e290a5e4a82b9edf9f5a4f8ab6192871be9
    OraBug 28806294.
  • Reviewed-by: Patrick McGehearty
  • Fix dbl-64/wordsize-64 remquo (bug 17569).
  • Backport of upstream d9afe48d55a412e76b0dcb28335fd4b390fe07ae
    OraBug 19570749.
  • Reviewed-by: Jose E. Marchesi
  • libio: Disable vtable validation in case of interposition.
  • Backport of upstream c402355dfa7807b8e0adb27c009135a7e2b9f1b0.
    OraBug 28641867.
  • Reviewed-by: Egeyar Bagcioglu
  • merged bundle of 142 upstream commits for aarch64 support with glibc rhel7 update 6.
  • upstream commit 75eff3fe90f96783f31f58fa84af1b77e57d1ae4
  • trimmed to only add bzero.S, memcmp.S memcpy.S, memmove.S, memset.S,
  • strcmp.S, strlen.S, strncmp.S and strnlen.S into sysdeps/aarch64.
    Orabug: <28003847>
  • upstream commit 08325735c2efb0257b8c07ac0ff91e44c27ecbf8
  • Lazy TLSDESC relocation data race fix
  • upstream commit c71c89e5c72baf43fd44d08dda8ab846eec5b1d6
  • fix cfi annotations which used incorrect sign.
  • upstream commit f008c71455a8f23c2a24c451e61b12ddfca9a54f
  • fix uninitialized warning for math_private.h
  • upstream commit d2e4346a30683cc42c57bd1bfd457897d78c6d7e
  • fix internal asm profiling code
  • upstream commit efbe665c3a2d344b0d64456cf29499ba53c2965a
  • add ifunc support for aarch64
  • upstream commit d6fc3f6516cd20f195758086fbbbe3f17a8a6d95
  • add ChangeLog for ifunc support patch
  • upstream commit 6cd380dd366d728da9f579eeb9f7f4c47f48e474
  • avoid-literals-in-start.S
  • upstream commit f124cb381116b5809de198327690ad0bd8d1478e
  • Fix nearbyint arithmetic moved before feholdexcept (bug 22225).
  • upstream commit db4f87bad48ed93ae14f61121367a7cb94fa46ed
  • do not use MIN for dl-machine.h
  • upstream commit a2e0a7f12ba57a49d1380c7ba1ff4b1f51d67347
  • Guess L1 cache linesize
  • upstream commit 58a813bf6e732211af53e690c92c14a50bb06e0e
  • fix f-max-min for gcc
  • upstream commit e7df6c5c79458dc042a8c967bafa6e8eca88ae0d
  • HWCAP additions
  • upstream commit 14d886edbd3d80b771e1c42fbd9217f9074de9c6
  • fix start code for static pie
  • upstream commit afce1991f6f61514172696ec3edf93331cb0e04f
  • clean up HWCAP updates
  • upstream commit 953c49cc3bb1041090281042148197ad3537c551
  • more HWCAP additions
  • upstream commit 3f8d9d58c59fdbe27301d0e18bfd426a5f2edf19
  • use builtins for fpcr/fpsr
  • upstream commit 4f5b921eb9b775aa3549a9bcd684c3013132f04b
  • add include for fpcr/fpsr fix
  • upstream commit 0c8a67a5737b4b6dd74bd24219fc642c8d244bee
  • fix include for fpcr/fpsr fix
    Orabug: <28036322>
  • upstream commit 2fee269248c6ef303569d9ac8fec3a27676520e0
  • Enable _STRING_ARCH_unaligned on AArch64.
  • upstream commit 16396c41deab45f715ffd813280d9d685b3b281e
  • Add _STRING_INLINE_unaligned and string_private.h
  • upstream commit a8c5a2a9521e105da6e96eaf4029b8e4d595e4f5
  • This is an optimized memset for AArch64.
  • upstream commit b998e16e71c8617746b7c39500e925d28ff22ed8
  • This is an optimized memcpy/memmove for AArch64.
  • upstream commit c435989f52204703d524f467c830dc363439e532
  • Optimize the strlen implementation.
  • upstream commit 58ec4fb881719d0b69989f9a4955290fca531831
  • Add a simple rawmemchr implementation.
  • upstream commit a024b39a4e31a049391b459234f6b3575c9fc107
  • This patch further tunes memcpy
  • upstream commit 95e431cc73c2df3bc606107d6f79c4683bd61102
  • An optimized memchr was missing for AArch64.
  • upstream commit 922369032c604b4dcfd535e1bcddd4687e7126a5
  • [AArch64] Optimized memcmp.
  • upstream commit 4c1d801a5956f049126ef6cbe22ed23693e77a8c
  • aarch64: Avoid hidden symbols for memcpy/memmove into static binaries
  • upstream commit 2bce01ebbaf8db52ba4a5635eb5744f989cdbf69
  • aarch64: Improve strcmp unaligned performance
  • upstream commit 84c94d2fd90d84ae7e67657ee8e22c2d1b796f63
  • aarch64: Use the L() macro for labels in memcmp
  • upstream commit 6ca24c43481e2c93a6eec362b04c3e77a35b28e3
  • aarch64/strcmp: fix misaligned loop jump target
  • upstream commit 30a81dae5b752f8aa5f96e7f7c341ec57cba3585
  • aarch64: Optimized memcmp for medium to large sizes
  • upstream commit 4e54d918630ea53e29dd70d3bdffcb00d29ed3d4
  • aarch64: Fix branch target to loop16
  • upstream commit 7108f1f944792ac68332967015d5e6418c5ccc88
  • aarch64: Improve strncmp for mutually misaligned inputs
  • upstream commit d46f84de745db8f3f06a37048261f4e5ceacf0a3
  • aarch64/strncmp: Unbreak builds with old binutils
  • upstream commit b47c3e7637efb77818cbef55dcd0ed1f0ea0ddf1
  • aarch64/strncmp: Use lsr instead of mov+lsr
    Orabug: <28077661>
  • upstream commit 3a7ac8a0f596bb73093212cd1109c1413777e1f8
  • Remove bp-start.h and INIT_ARGV_and_ENVIRON.
  • upstream commit 10ad46bc6526edc5c7afcc57112da96917ff3629
  • Consolidate valloc/pvalloc code.
  • upstream commit 520d437b9455560d099fe6bd9664be1f9f76868b
  • Fix build warnings from systemtap probes in non-systemtap configurations
  • upstream commit f3eeb3fc560ccc4ce51dc605e4703c5016b07244
  • Replace malloc force_reg by atomic_forced_read.
  • upstream commit 6c8dbf00f536d78b1937b5af6f57be47fd376344
  • Reformat malloc to gnu style.
  • upstream commit bdfe308a166b433a841d5c9ae256560c18bce640
  • Remove THREAD_STATS.
  • upstream commit e0db65176fa88b9497cbd6362b24e3225382bfb6
  • Clean up __exit_thread.
  • upstream commit 79520f4bd611602f5bdb2b50979cf75bb5ac2968
  • Use existing makefile variables for dependencies on
  • upstream commit 75f11331f98ebf3873e887a683add944a1aec0fd
  • correct alignment of TLS_TCB_ALIGN (BZ #16796)
  • upstream commit 94c5a52a841f807a23dbdd19a5ddeb505cc1d543
  • Consolidate arena_lookup and arena_lock into a single arena_get
  • upstream commit c26efef9798914e208329c0e8c3c73bb1135d9e3
  • malloc: Consistently apply trim_threshold to all heaps [BZ #17195]
  • upstream commit 92a9b22d70b85b7edd0484db8bf2465a969fb09e
  • Drop unused first argument from arena_get2
  • upstream commit c3b9ef8dfc83e9d17da5adc73709d2f7dfbbaf13
  • Do not use the main arena in retry path if it is corrupt
  • upstream commit 90b2517115a56ca9f5625f3e16c2629deeac55a9
  • include/stap-probe.h: Fix formatting.
  • upstream commit 6782806d8f6664d87d17bb30f8ce4e0c7c931e17
  • malloc: Rewrite with explicit TLS access using __thread
  • upstream commit a62719ba90e2fa1728890ae7dc8df9e32a622e7b
  • malloc: Prevent arena free_list from turning cyclic [BZ #19048]
  • upstream commit 730bbab2c39dd615c31c924041b4d16d7f107ae0
  • Mark internal unistd functions hidden in ld.so
  • upstream commit cbb47fa1c6476af73f393a81cd62fc926e1b8f6e
  • malloc: Manual part of conversion to __libc_lock
  • upstream commit e33a23fbe8c2dba04fe05678c584d3efcb6c9951
  • Add INTERNAL_SYSCALL_CALL
  • upstream commit be7991c0705e35b4d70a419d117addcd6c627319
  • Static inline functions for mallopt helpers
  • upstream commit afcf3cd8ebff8fed79238a2d1b95338c4606b1ee
  • New internal function __access_noerrno
  • upstream commit 67e58f39412ecd4467034761f3f074283c90f3c8
  • Add framework for tunables
  • upstream commit 3c589b1a8a4401e258ba23a03fcbcc79b82393ab
  • tunables: Use correct unused attribute (fixed build error in 67e58f)
  • upstream commit 9dd409a5f4a7a053cc962f8371dad0fe5cc22597
  • Initialize tunable list with the GLIBC_TUNABLES environment variable
  • upstream commit 6765d5d34d126b26d55e2d73dac4dfec5e6d6241
  • Enhance --enable-tunables to select tunables frontend at build time
  • upstream commit b31b4d6ae50b0d332207754327598fdce5b51015
  • User manual documentation for tunables
  • upstream commit 34a63b097335d3411080b5b6e5b164ab36563847
  • malloc: Run tunables tests only if tunables are enabled
  • upstream commit d054a81ab3a2515a45d28e6c26d2b190ff74e8ec
  • tunables: Avoid getenv calls and disable glibc.malloc.check by default
  • upstream commit 41389c40499a083c59e68ba281ec87be567f2871
  • Fix environment traversal when an envvar value is empty
  • upstream commit f3bef6a748097d02d196df247f7b292c7b83744c
    • elf/dl-tunables.c (tunable_set_val_if_valid_range): Split into …
  • upstream commit 8b9e9c3c0bae497ad5e2d0ae2f333f62feddcc12
  • tunables: Fix environment variable processing for setuid binaries (bz #21073)
  • upstream commit ed8d5ffd0a14e84298a15ae2ec9b799010166b28
  • Drop GLIBC_TUNABLES for setxid programs when tunables is disabled (bz #21073)
  • upstream commit 53aa04a86c10f49b7481e73d2ca045ecd6ed2df7
  • tunables: Fail tests correctly when setgid does not work
  • upstream commit 43ce02c6ec27d4e2d8f0ae327bbbeaba84060964
  • Fix typo in manual
  • upstream commit 8cbc826c37c0221ada65a7a622fe079b4e89a4b0
  • Fix getting tunable values on big-endian (BZ #21109
  • upstream commit 1c1243b6fc33c029488add276e56570a07803bfd
  • Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (bug #21209)
  • upstream commit 65eff7fbdbddad8c1f9af7cb48cd3b5dca3c5c9d
  • Update old tunables framework document/script.
  • upstream commit 17284d650ebe5c736c9730ee16401008f26128c3
  • tunables: Make tunable_list relro
  • upstream commit d13103074ab5c7614eeb94f88a61803ed8f3e878
  • tunables: Specify a default value for tunables
  • upstream commit ad2f35cb396d24391150675fb55311c98d1e1592
  • tunables: Add support for tunables of uint64_t type
  • upstream commit ce79740bdbccea312df6cfcf70689efb57792fc9
  • Reduce value of LD_HWCAP_MASK for tst-env-setuid test case
  • upstream commit ee8015b9ea084d5727ce477fdd8d935f1de7f7f6
  • Support dl-tunables.list in subdirectories
  • upstream commit 81efada5287c3215307623e57d3bbbeefa0c1250
  • Make __tunables_init hidden and avoid PLT
  • upstream commit 4158ba082c641f407009363b186b4c85f8a01a35
  • Delay initialization of CPU features struct in static binaries
  • upstream commit 44330b6d32904fdc8b6835a112e0ba0aee9f4ef3
  • tunables: Clean up hooks to get and set tunables
  • upstream commit ea9b0ecbf0e7b6e8281047624efbe1b2cbb6d487
  • tunables: Add LD_HWCAP_MASK to tunables
  • upstream commit ff08fc59e36e02074eba8ab39b0d9001363970f0
  • tunables: Use glibc.tune.hwcap_mask tunable instead of _dl_hwcap_mask
  • upstream commit f82e9672ad89ea1ef40bbe1af71478e255e87c5e
  • aarch64: Allow overriding HWCAP_CPUID feature check using HWCAP_MASK
  • upstream commit 511c5a1087991108118c6e9c9546e83e992bf39c
  • Make LD_HWCAP_MASK usable for static binaries
  • upstream commit ea01a4da219011f4a4db97eef3c5bfc2f6e8fc6b
  • aarch64: Add hwcap string routines
  • upstream commit 6c85cc2852367ea2db91ff6a1fc0f6fc0653788d
  • aarch64: Fix undefined behavior in _dl_procinfo
  • upstream commit 2c0b90ab443abc967cbf75add4f7fde84978cb95
  • Enable tunables by default
  • upstream commit 95a73392580761abc62fc9b1386d232cd55878e9
  • tunables: Use direct syscall for access (BZ#21744)
  • upstream commit a4de0a9008d6f15e1509c9818ba6e50d78bb83f3
  • Fix gen-tunables.awk to work with older awk
    Orabug: <28121777>
  • upstream commit ddcf6798d35beca3c4eec80ea448b57fd45558f4
  • Replace C implementation of bzero with direct call to memset.
  • upstream commit af96be34825586536ebcfbf5c675e795ddd3c8fa
  • Replace C implementation of bcopy with a direct call to memmove.
  • upstream commit 6a2c695266fab34cc057256d1b33d2268183f00e
  • aarch64: Thunderx specific memcpy and memmove
  • upstream commit 512d245bc30cca893db6979f42f058e734f345c3
  • Add HWCAP_ macros from Linux 4.12 to AArch64 bits/hwcap.h.
  • upstream commit 738a9914a066a31750925543a8c6d2661bd61345
  • benchtests: Print string array elements, int and uint in json
  • upstream commit 5ee1e3cebc47495a36d17a0066c241978ca6f502
  • benchtests: Make memcpy benchmarks print results in json
  • upstream commit 25d5247277760e669a69618ce99ce6065e92362c
  • benchtests: New script to parse memcpy results
  • upstream commit ab85da15301c552e3ea4577a6432aa028bee9295
  • aarch64: Call all string function implementations in tests
  • upstream commit 28cfa3a48e59f9c6b9bc25a003a4ede435841382
  • tunables, aarch64: New tunable to override cpu
  • upstream commit 47ea614b9afcdaef80e09d58afcdad4f96ba3f15
  • fix typo
  • upstream commit 82e06600505cc26810d263a964d9eca6f3cdfe91
  • [AArch64] Update dl-procinfo for new HWCAP flags in Linux 4.12
  • upstream commit 36ada5f681d86d4abe7b3b47d653d69e5ab2a6fd
  • aarch64: Optimized memcpy for Qualcomm Falkor processor
  • upstream commit 61c982910da9b60f7ac48eb1caaac1f4b013dbb1
  • benchtests: Remove verification runs from benchmark tests
  • upstream commit 86c6519ee77d241575653206f33dbe1d4c8436cf
  • benchtests: Print json in memmove benchmark
  • upstream 9eee633b68649c94b2404f65d5c9a00c3ed1f068
  • Change argument type passed to ifunc resolvers
  • upstream commit 9c9ec58197d1e18db6f7b39f7dc08b0f5f61df4e
  • Add thunderx2t99 and thunderx2t99p1 CPU names to tunables list
  • upstream commit f00bce744e12996a30b7ac5851b001b1dd7beaa9
  • Fix glibc.tune.cpu tunable handling
  • upstream commit 29c933fb35b7bf872f57dc6977c879832983ab6c
  • benchtests: Make memset benchmarks print json
  • upstream commit 503c92c37a95f769762e65aff9383b302178c2bc
  • benchtests: Reallocate buffers for memset
  • upstream commit dd5bc7f1b385b29d0f90aefe4d9756b35011709b
  • aarch64: Optimized implementation of memmove for Qualcomm Falkor
  • upstream commit edbbc86c3a6624dcc0316a4cd78fe1adfb383405
    • sysdeps/aarch64/bzero.S (__bzero): Remove.
  • upstream commit 4d7632ff687dc60fb9ed38bae682d395017b61a8
  • benchtests: Fix walking sizes and directions for *-walk benchmarks
  • upstream commit eb332f9feb7637eeefed037a683d2a6130d058b1
  • benchtests: Bump start size since smaller sizes are noisy
  • upstream commit 5a67c4fa010abb27e704aa4ea3896f3aa2b39ed7
  • aarch64: Optimized memset for falkor
  • upstream commit 5f1603c331d9e2194170762b7e5e80a5571e4b4e
  • Convert strcmp benchmark output to json format
  • upstream commit 4e00196912e63bd44f9a62a88a0f5c5fde25ad86
  • aarch64: fix memset with --disable-multi-arch
  • upstream commit 3dfcbfa1a4bfa39344e8d945ed1bd697c4c9fe96
  • benchtests: Reallocate buffers for every test run
  • upstream commit 96e6a7167e127d5e65000f2724e074f1c026e1f1
  • benchtests: Make bench-memcmp print json
  • upstream commit e9537dddc7c7c7b60b55ed845542c8d586164488
    Orabug: <28121801>
  • upstream commit 9dbebe1a67bbedfcb39c6b739f15bc639e8d40a2
  • [AArch64] Save and restore q0-q7 on entry to dynamic linker.
  • upstream commit 1670e207c57513da84462c2a018f01653e7d1cc6
  • aarch64: Rely on syscalls preserving registers
  • upstream commit f940b96522d6ac67915186dfaa71b43f3e7f5404
  • [AArch64] Add optimized strchr.
  • upstream commit be9d4ccc7fe62751db1a5fdcb31958561dbbda9a
  • [AArch64] Add optimized strchrnul.
  • upstream commit 80085defb83e4f2ce098c8bc00c82d1e14998c71
  • [AArch64] End frame record chain correctly. [??Bug 17522], release 2.21
  • upstream commit aa76a5c7010e98c737d79f37aa6ae668f60f7a00
  • [AArch64] Fix strchrnul clobbering v15
  • upstream commit ec582ca0f30c963a1c27f405b6732ca8507271d5
  • AArch64 optimized implementation of strrchr.
  • upstream commit dc400d7b735c47086a001ed051723e376230cf01
  • AArch64: Optimized implementations of strcpy and stpcpy.
  • upstream commit d3496c9f4f27d3009b71be87f6108b4fed7314bd
  • Improve generic strcspn performance
  • upstream commit 91f3b75f47c9eca3299098c3dcc2f5d9dad320b1
  • Improve generic strspn performance
  • upstream commit 282b71f07eb5e24ddf1308f92c37cb42f7c7d86b
  • Improve generic strpbrk performance
  • upstream commit 2e51bc3813ca3fe72fd197d08d79496e46669f43
  • Use PTR_ALIGN_DOWN on strcspn and strspn
  • upstream commit f6a191a6ee0313d61dffa70d86b033c5a598f907
  • Consolidate Linux read syscall - Fixes BZ#21428
  • upstream commit ed0257f7d3378ec4a72e297f0dcba5159f2dd138
  • [AArch64] Adjust elf_machine_dynamic to use GLOBAL_OFFSET_TABLE
  • upstream commit e535ce250143b9c1600b306911710c0de73e2a5e
  • [ARM] add missing -funwind-tables to test case (bug 19529)
  • upstream commit a68ba2f3cd3cbe32c1f31e13c20ed13487727b32
  • [AARCH64] Rewrite elf_machine_load_address using _DYNAMIC symbol
  • upstream commit db9bab09a51188bf57afeb47040ce6837b878367
  • Document cache information sysconf variables
  • upstream commit a2e0a7f12ba57a49d1380c7ba1ff4b1f51d67347
  • aarch64: Document _SC_LEVEL1_DCACHE_LINESIZE caveat
  • upstream commit 659ca267360e1c1f64eea9205bb81cb5e9049908
  • aarch64: optimize _dl_tlsdesc_dynamic fast path
  • upstream commit 3d1d79283e6de4f7c434cb67fb53a4fd28359669
  • aarch64: fix static pie enabled libc when main is in a shared library
  • upstream commit c9e613a728b9eaf0713b5a5970bb9ad4984fc688
  • Add NT_ARM_SVE to elf.h
    Orabug: <28336148>
  • Rebase of the aarch64 OL 7.4 patches.
  • Enable ifunc support. (Egeyar Bagcioglu 2.17-196.0.2.el7_4.2)
    Orabug: <26894372>
    x86_64:
    [2.17-292.0.1.7]
  • Remove glibc-ora28641867.patch as duplicate of glibc-rh1705899-4.patch
  • Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
    Both should test
    if ((stream->_flags & _IO_USER_LOCK) == 0)
    _IO_lock_lock (*stream->_lock);
    OraBug 28481550.
    Reviewed-by: Jose E. Marchesi
  • Modify glibc-ora28849085.patch so it works with RHCK kernels.
    Orabug 28849085.
  • Reviewed-by: Egeyar Bagcioglu
  • Use NLM_F_SKIP_STATS in uek2 and RTEXT_FILTER_SKIP_STATS in uek4 in getifaddrs.
  • Orabug 28849085
  • Reviewed-by: Patrick McGehearty
  • Mention CVE numbers in the .spec file for CVE-2015-8983 and CVE-2015-8984.
  • Orabug 25558067.
  • Reviewed-by: Egeyar Bagcioglu
  • Regenerate plural.c
  • OraBug 28806294.
  • Reviewed-by: Jose E. Marchesi
  • intl: Port to Bison 3.0
  • Backport of upstream gettext commit 19f23e290a5e4a82b9edf9f5a4f8ab6192871be9
  • OraBug 28806294.
  • Reviewed-by: Patrick McGehearty
  • Fix dbl-64/wordsize-64 remquo (bug 17569).
  • Backport of upstream d9afe48d55a412e76b0dcb28335fd4b390fe07ae
  • OraBug 19570749.
  • Reviewed-by: Jose E. Marchesi
  • libio: Disable vtable validation in case of interposition.
  • Backport of upstream c402355dfa7807b8e0adb27c009135a7e2b9f1b0.
  • OraBug 28641867.
  • Reviewed-by: Egeyar Bagcioglu
  • Include-linux-falloc.h-in-bits-fcntl-linux.h
  • Defines FALLOC_FL_PUNSH_HOLE, FALLOC_FL_KEEP_SIZE,
    FALLOC_FL_COLLAPSE_RANGE, and FALLOC_FL_ZERO_RANGE
  • OraBug 28483336
  • Add MAP_SHARED_VALIDATE and MAP_SYNC flags to
  • sysdeps/unix/sysv/linux/x86/bits/mman.h
  • OraBug 28389572
  • Update bits/siginfo.h with Linux hwpoison SIGBUS changes.
  • Adds new SIGBUS error codes for hardware poison signals, syncing with
    the current kernel headers (v3.9).
  • It also adds si_trapno field for alpha.
  • New values: BUS_MCEERR_AR, BUS_MCEERR_AO
  • OraBug 28124569
    aarch64 & x86_64:
    [2.17-292]
  • Avoid iconv hang on invalid multi-byte sequences (#1427734)
    [2.17-291]
  • Use versioned Obsoletes: for nss_db (#1703565)
    [2.17-290]
  • Adjust to find-debuginfo.sh changes (#1661508)
    [2.17-289]
  • ja_JP: Add new Japanese Era name (#1555189)
    [2.17-288]
  • Unify and improve pthread_once implementation for all architectures (#1163509)
    [2.17.287]
  • malloc: Always call memcpy in _int_realloc (#1662842)
    [2.17-286]
  • Update comments in nscd.conf and nsswitch.conf (#1488370)
    [2.17-285]
  • intl: Ensure plural.c is current to prevent regenerating it (#1640764)
    [2.17-284]
  • Update
    to include IP*_PMTUDISC_OMIT and others (#1684874)
    [2.17-283]
  • elf: Adjust the big PT_NOTE test to exercise the bug in more cases (#1579739)
    [2.17-282]
  • x86: Fix incorrect selection of string functions (#1641981)
    [2.17-281]
  • elf: Avoid stack overflow with large PT_NOTE segments (#1579739)
    [2.17-280]
  • resolv: Fully initialize sendmmsg argument data (#1579354)
    [2.17-279]
  • Improve formatting of Netlink error messages (#1443872)
    [2.17-278]
  • Run resolv/tst-inet_aton_exact test (#1673465)
    [2.17-277]
  • getifaddrs could return interfaces with ifa_name set to NULL (#1472832)
    [2.17-276]
  • Terminate process on invalid netlink response from kernel (#1443872)
    [2.17-275]
  • resolv: Support host names with trailing dashes (#1039304)
    [2.17-274]
  • CVE-2016-10739: Reject trailing characters in getaddrinfo (#1673465)
    [2.17-273]
  • Update syscall list for Linux 4.20 (#1657015)
    [2.17-272]
  • glibc-headers: Add ipc STAT_ANY constants (#1592475)
    [2.17-271]
  • localedata: Make IBM273 compatible with ISO-8859-1 (#1591268)
    [2.17-270]
  • Fix pldd race condition that may leave the process stopped after
    detaching. (#1609067)
    [2.17-269]
  • libanl: properly cleanup if first helper thread creation failed (#1646373)
    [2.17-268]
  • Add note about missing test case for BZ1457479 (#1635325)
    [2.17-267]
  • elf: Fix data race in _dl_profile_fixup (#1630440)
    [2.17-266]
  • Fix i386 sigaction sa_restorer initialization (#1579730)
    [2.17-265]
  • Fix compilation error in stdlib/tst-strtod-overflow.c (#1647490)
    [2.17-264]
  • aarch64: Disable lazy symbol binding of TLSDESC (#1639524)
    [2.17-263]
  • Reduce RAM requirements for stdlib/test-bz22786 (#1647490)
    [2.17-262]
  • libio vtable validation improvements (#1595191)
    [2.17-261]
  • Update support/ to the most recent upstream version (#1595191)

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.0%