-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-1e4a05f40b 2023-04-30 01:31:39.965766 --------------------------------------------------------------------------------

Name : glibc Product : Fedora 38 Version : 2.37 Release : 4.fc38 URL : http://www.gnu.org/software/glibc/ Summary : The GNU libc libraries Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.

-------------------------------------------------------------------------------- Update Information:

This update provides `/sbin/ldconfig` and `/usr/sbin/ldconfig` in addition to `ldconfig` as RPM dependencies, for DNF5 compatibility (RHBZ#2188550). It also includes updates from the upstream 2.37 branch: * gmon: fix memory corruption issues [BZ# 30101] * gmon: improve mcount overflow handling [BZ# 27576] * gmon: Fix allocated buffer overflow (bug 29444) * posix: Fix system blocks SIGCHLD erroneously [BZ #30163] * x86_64: Fix asm constraints in feraiseexcept (bug 30305) * gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (bug 30151) * stdio-common: tests: don't double-define _FORTIFY_SOURCE * elf: Restore ldconfig libc6 implicit soname logic [BZ #30125] * stdlib: Undo post review change to 16adc58e73f3 [BZ #27749] * Use 64-bit time_t interfaces in strftime and strptime (bug 30053) * cdefs: Limit definition of fortification macros -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Florian Weimer fweimer@redhat.com - 2.37-4 - Auto-sync with upstream branch release/2.37/master, commit 7c32cb7dd88cf100b0b412163896e30aa2ee671a: - gmon: Revert addition of tunables to the manual - gmon: Revert addition of tunables to preserve GLIBC_PRIVATE ABI * Fri Apr 28 2023 Florian Weimer fweimer@redhat.com - 2.37-3 - Drop glibc-printf-grouping-swbz30068.patch, applied upstream. - Auto-sync with upstream branch release/2.37/master, commit ff3a71ec1fc02757b38c9c3209118d14dd10c7b6: - gmon: fix memory corruption issues [BZ# 30101] - gmon: improve mcount overflow handling [BZ# 27576] - gmon: Fix allocated buffer overflow (bug 29444) - posix: Fix system blocks SIGCHLD erroneously [BZ #30163] - x86_64: Fix asm constraints in feraiseexcept (bug 30305) - gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (bug 30151) - stdio-common: tests: don't double-define _FORTIFY_SOURCE - elf: Restore ldconfig libc6 implicit soname logic [BZ #30125] - stdlib: Undo post review change to 16adc58e73f3 [BZ #27749] - elf: Smoke-test ldconfig -p against system /etc/ld.so.cache - NEWS: Document CVE-2023-25139. - Account for grouping in printf width (bug 30068) - Use 64-bit time_t interfaces in strftime and strptime (bug 30053) - LoongArch: Add new relocation types. - cdefs: Limit definition of fortification macros * Fri Apr 28 2023 Florian Weimer fweimer@redhat.com - 2.37-2 - Explicitly provide ldconfig paths (#2188550) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2188550 - Explicitly provide /sbin/ldconfig, /usr/sbin/ldconfig https://bugzilla.redhat.com/show_bug.cgi?id=2188550 --------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-1e4a05f40b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------