ELSA-2016-2573

ELSA-2016-2573 - glibc security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2016-11-09

Description

[2.17-157]
- Rebuild with updated binutils (#1268008)

[2.17-156]
- malloc arena free free list management fix (#1276753)

[2.17-155]
- Basic validity check for locale-archive.tmpl (#1350733)

[2.17-153]
- Add Intel AVX-512 optimized routines (#1298526).

[2.17-151]
- Improve malloc peformance in low-memory situations (#1255822).

[2.17-150]
- Improve performance on Intel Knights Landing/Silvermont (#1292018).

[2.17-149]
- Improve performance on Intel Purley (#1335286).

[2.17-148]
- Support upstream build infrastrucutre changes (#1256317).

[2.17-147]
- CVE-2016-3075: Stack overflow in nss_dns_getnetbyname_r (#1321993)

[2.17-146]
- s390: Restore signal mask on setcontext/swapcontext (#1249114).
- s390: Fix backtrace in the presence of makecontext (#1249115).

[2.17-145]
- Fix times() handling of EFAULT when buf is NULL (#1308728).

[2.17-144]
- Fix sem_post/sem_wait race causing sem_post to return EINVAL (#1027348).

[2.17-143]
- Support installing only those locales specified by the RPM macro
%_install_langs (#1296297).

[2.17-142]
- Fix Linux kernel UAPI header synchronization for IPv6 (#1268050).

[2.17-141]
- Update BIG5-HKSCS charmap to HKSCS-2008 (#1211823)

[2.17-140]
- Remove printf from signal handler in tst-longjump_chk2 (#1346397)

[2.17-139]
- Improve libm performance AArch64 (#1302086)

[2.17-138]
- Search locale archive again after alias expansion (#971416)

[2.17-137]
- Revert IPv6 name server management changes (#1305132)

[2.17-136]
- aarch64: Fix bits/stat.h FTM guards (#1221046)

[2.17-135]
- aarch64: Fix various minor ABI incompatibilities (#1335925)

[2.17-134]
- aarch64: Correct definition of MINSIGSTKSZ/SIGSTKSZ (#1335629)

[2.17-133]
- Require libselinux for nscd in non-bootstrap configuration (#1255847).

[2.17-132]
- Fix a number of long-standing issues in the TZ parser (#1234449).

[2.17-131]
- Remove PER_THREAD preprocessor macro from malloc
- Use final upstream patch for arena free list fix (#1276753)

[2.17-130]
- Prevent the compiler from clobbering floating point and vector
registers in S390 symbol resolution functions (#1324427).
- Improve posix_fallocate behavior with NFS file descriptors (#1140250).

[2.17-129]
- Remove a race condition from tst-mqueue5.c test to prevent spurious
failures (#1064063).

[2.17-128]
- Prevent a deadlock in gethostbyname_r (#1288613).

[2.17-127]
- Use test-skeleton.c in tests (#1298354).

[2.17-126]
- Fix inconsistent passwd compensation in nss/bug17079.c (#1293433).

[2.17-125]
- Backport tst-getpw enhancement to limit the time the test takes up
(#1298349).

[2.17-124]
- Log system information during build (#1307028).

[2.17-123]
- Avoid appending duplicate shift sequences in iconv (#1293916).

[2.17-122]
- Reorganize POWER7 and POWER8 support (#1213267).
- Only build POWER7 runtime for ppc64p7.
- Only build POWER8 runtime for ppc64le.
- Configure with --with-cpu=power8 for ppc64le.
- Configure with --with-cpu=power8 for ppc.
- Configure with --with-cpu=power7 for ppc64 default runtime.

[2.17-121]
- Build require gcc-c++ for the C++ tests.
- Add --with/--without controls for building glibc (#1255847)
- Support --without testsuite option to disable testing after build.
- Support --without benchtests option to disable microbenchmarks
(placeholder for upstream compatibility only)
- Update --with bootstrap to disable valgrind, documentation,
selinux, and nss-crypt during bootstrap.
- Support --without werror to disable building with -Werror.
- Support --without docs to disable build requirement on texinfo.
- Support --with valgrind to enable testing with valgrind.

[2.17-120]
- Make minor compatibility adjustments in headers (#1268050).

[2.17-119]
- Avoid aliasing issue in tst-rec-dlopen (#1292224)

[2.17-118]
- Suppress expected backtrace in tst-malloc-backtrace (#1276631).

[2.17-117]
- Avoid ld.so crash when audit modules provide path (#1211100)

[2.17-116]
- Avoid 'monstartup: out of memory' error on powerpc64le (#1249102).

[2.17-115]
- Configure --with-cpu=power8 on powerpc64 to generate POWER8
instructions for POWER8 runtime (#1183088, #1213267).

[2.17-114]
- Add enhanced and optimized support for IBM z13 systems (#1268008).

[2.17-113]
- Prevent the malloc arena free list form turning cyclic (#1276753).

[2.17-112]
- Backported POWER8 optimizations for math and string functions (#1240351).

[2.17-111]
- Fix NULL pointer dereference in stub resolver with unconnectable name
server addresses (#1320596).

[2.17-110]
- Fix memory leak in ftell for wide-oriented streams (#1310530).

[2.17-109]
- Avoid race condition in _int_free involving fastbins (#1305406).

[2.17-108]
- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296031).
- Fix madvise performance issues (#1284959).
- Avoid 'monstartup: out of memory' error on powerpc64le (#1249102).
- Update malloc testing for 32-bit POWER (#1293976).

[2.17-107]
- Fix CVE-2015-5229: calloc() may return non-zero memory (#1293976).

Related CVEs

CVE-2016-3075

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	glibc-2.17-157.el7.src.rpm	625bc3afd4b4ec3f40a6fae3ab63a0edad49f86ffec4b25761e212018c05443c	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-2.17-157.el7.src.rpm	625bc3afd4b4ec3f40a6fae3ab63a0edad49f86ffec4b25761e212018c05443c	ELSA-2024-12444	ol7_x86_64_optional_archive
	glibc-2.17-157.el7.src.rpm	625bc3afd4b4ec3f40a6fae3ab63a0edad49f86ffec4b25761e212018c05443c	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-2.17-157.el7.i686.rpm	a876a5f19bdc4fb41a98e571f38e45be86befe0d96a83e9c504e995e35251599	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-2.17-157.el7.i686.rpm	a876a5f19bdc4fb41a98e571f38e45be86befe0d96a83e9c504e995e35251599	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-2.17-157.el7.x86_64.rpm	4910ed6f0294b363f71728cac1e2dd22a668ee673c9f2f7c830b493b7bc50c58	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-2.17-157.el7.x86_64.rpm	4910ed6f0294b363f71728cac1e2dd22a668ee673c9f2f7c830b493b7bc50c58	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-common-2.17-157.el7.x86_64.rpm	74a12edc0695473114821034256f5d3a693ac9a4eea382194f81057811b8ce8a	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-common-2.17-157.el7.x86_64.rpm	74a12edc0695473114821034256f5d3a693ac9a4eea382194f81057811b8ce8a	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-devel-2.17-157.el7.i686.rpm	d25ca92097e719cf2f42a43845ca9fc98f6998a42ac553567a48fa103c71b284	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-devel-2.17-157.el7.i686.rpm	d25ca92097e719cf2f42a43845ca9fc98f6998a42ac553567a48fa103c71b284	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-devel-2.17-157.el7.x86_64.rpm	2a5f3ec1802a5c1c90d1e7b378a17b8268e53c305f12bd93c50570159bf60e1f	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-devel-2.17-157.el7.x86_64.rpm	2a5f3ec1802a5c1c90d1e7b378a17b8268e53c305f12bd93c50570159bf60e1f	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-headers-2.17-157.el7.x86_64.rpm	627f4e25d71b68e5526ecc52fbbc253eef72f5e242426f06abe7d948f2313f1e	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-headers-2.17-157.el7.x86_64.rpm	627f4e25d71b68e5526ecc52fbbc253eef72f5e242426f06abe7d948f2313f1e	ELSA-2024-12444	ol7_x86_64_u3_base
	glibc-static-2.17-157.el7.i686.rpm	95f9311e3ad843a93a5a8020e06a15c670e3388fe03c87634a2d1073ab0b7bd2	ELSA-2024-12444	ol7_x86_64_optional_archive
	glibc-static-2.17-157.el7.x86_64.rpm	145b728ca986c4ab44616890362d5be704c5d25caa18aec615be373b8c08d05f	ELSA-2024-12444	ol7_x86_64_optional_archive
	glibc-utils-2.17-157.el7.x86_64.rpm	25cfeb078a929be90ba29b3188f02047902e11738da9909511c6aaec13debe07	ELSA-2024-12444	ol7_x86_64_latest_archive
	glibc-utils-2.17-157.el7.x86_64.rpm	25cfeb078a929be90ba29b3188f02047902e11738da9909511c6aaec13debe07	ELSA-2024-12444	ol7_x86_64_u3_base
	nscd-2.17-157.el7.x86_64.rpm	4061f2340e7b6a4765b1651112a4572e25c0b8af5aa77edd999bf0a3b0f02ac8	ELSA-2024-12444	ol7_x86_64_latest_archive
	nscd-2.17-157.el7.x86_64.rpm	4061f2340e7b6a4765b1651112a4572e25c0b8af5aa77edd999bf0a3b0f02ac8	ELSA-2024-12444	ol7_x86_64_u3_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team