lp://staging/ubuntu/utopic-security/glibc

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17. By Marc Deslauriers on 2015-02-25

* SECURITY UPDATE: denial of service via endless loop in getaddr_r
  - debian/patches/any/cvs-getnetbyname.diff: iterate over alias names in
    resolv/nss_dns/dns-network.c.
  - CVE-2014-9402
* SECURITY UPDATE: buffer overflow in wscanf
  - debian/patches/any/cvs-wscanf.diff: calculate correct size in
    stdio-common/vfscanf.c, added test to stdio-common/tst-sscanf.c.
  - CVE-2015-1472
  - CVE-2015-1473

16. By Marc Deslauriers on 2014-11-28

* SECURITY UPDATE: denial of service in IBM gconv modules
  - debian/patches/any/cvs-CVE-2014-6040.diff: fix checks in
    iconvdata/ibm*.c.
  - CVE-2014-6040
* SECURITY UPDATE: arbitrary command execution via wordexp (LP: #1396471)
  - debian/patches/any/CVE-2014-7817.diff: properly handle WRDE_NOCMD in
    posix/wordexp.c, added tests to posix/wordexp-test.c.
  - CVE-2014-7817

15. By Colin Watson on 2014-09-30

Add patches/ubuntu/unsubmitted-increase-dtv-surplus.diff from Fedora to
allow up to 32 dlopened modules to use static TLS (LP: #1375555).

14. By Adam Conrad on 2014-08-27

* Merge with Debian unstable, bringing in several CVE fixes (LP: #1362409)
* Enable systemtap support for Ubuntu which was dropped in Debian for now.
* Move MIN_KERNEL_SUPPORTED to 2.6.32 on x86 now that hardy PPAs are dead.
* libc-dev no longer Recommends 'gcc | c-compiler' (LP: #990982, #1005097)

13. By Adam Conrad on 2014-07-10

debian/sysdeps/linux.mk: Adjust for the change to sdt.h location.

12. By Adam Conrad on 2014-06-19

* Merge with Debian unstable, switching us to glibc and fixing bugs:
  - Fix invalid fd reuse while sending DNS queries (LP: #1328975)
  - Avoid Freescale 8xx dcbz workaround on ppc64el (LP: #1333499)
  - Remove wrong ibm long double assembly routines (LP: #1294588)
  - Fix incorrect frexpl results with long doubles (LP: #1333506)
* debian/patches/powerpc/local-tune-power8.diff: When configured for
  --with-cpu=power7, adjust -mtune for power8 instead (LP: #1333524)

11. By Aurelien Jarno on 2009-04-28

mips/cvs-context.diff: add missing part from upstream.

10. By Aurelien Jarno on 2009-04-27

[ Aurelien Jarno ]
* Update Swedish debconf translation, by Martin Bagger. Closes: #522982.
* mips/cvs-context.diff: new patch from upstream to add getcontext,
  setcontext, makecontext, swapcontext.
* any/submitted-mount_h.diff: new patch to add MNT_DETACH and MNT_EXPIRE to
  sys/mount.h. Closes: #523952.
* arm/submitted-fpu_control_h.diff: new patch to disable macros from
  <fpu_control.h> on EABI. Closes: #525261.
* any/cvs-iconv-utf16.diff: new patch from upstream to reject UTF-8-encoded
  UTF-16 surrogates in iconv. Closes: #525299.
* any/local-getaddrinfo-interface.diff: ignore addresses with no interface
  assigned while sorting with rule 7. Closes: #521439.
* any/cvs-broken_dns.diff: new patch from CVS to provide a fallback for
  broken DNS server while doing unified IPv4/IPv6 requests. The first lookup
  will be slow, but subsequent requests will fallback to the previous
  behaviour. This can be enabled by default by setting 'single-request' in
  /etc/resolv.conf.
* debhelper.in/libc.NEWS: add entry explaining the new behaviour and the new
  option.
* any/local-disable-gethostbyname4.diff: disabled this patch to re-enable
  unified IPv4/IPv6 requests. Closes: bug#343140, bug#435646.
* localedata/cvs-el_CY-el_GR-frac_digits.diff: new patch from CVS to fix
  frac_digits and int_frac_digits on el_CY ad el_GR locales. Closes:
  bug#511621.
* mips_asm_unistd.h, sysdeps/mipsel.mk, sysdeps/mips.mk: use our own version
  of unistd.h corresponding to the one of a 2.6.24 kernel to workaround kernel
  bugs on the build daemons.
* any/cvs-binutils_2.20.diff: new patch from upstream to fix build failure
  with binutils 2.20.

[ Petr Salinger ]
* kfreebsd/local-sysdeps.diff: update to revision 2482 (from glibc-bsd).
  Closes: #522686. Thanks to Jan Christoph Nordholz.

[ Samuel Thibault ]
* hurd-i386/cvs-rtld.diff: new patch, fixes boot of glibc built with
  binutils >= 2.19.

9. By Aurelien Jarno on 2009-04-07

[ Aurelien Jarno ]
* Update German debconf translation, by Helge Kreutzman. Closes: #519992.
* Update testsuite results on alpha, tst-timer.out exits with SIGILL on
  some machines, it was already the case with glibc 2.7 on the same
  machines.
* Update testsuite results on hppa, tst-posix_fallocate.out and
  tst-makecontext.out are known to fail with a 32-bit kernel.
* debian/script.in/nsscheck.sh: fix a typo. Closes: #520455.
* kfreebsd/local-sysdeps.diff: update to revision 2390 (from glibc-bsd).
* libc6.1.symbols.alpha: fix package name for private symbols.

[ Samuel Thibault ]
* debian/rules.d/debhelper.mk: let grep libpthread.so fail because on
  hurd-i386 glibc does not provide it.

8. By Aurelien Jarno on 2009-03-15

[ Samuel Thibault ]
* debian/patches/hurd-i386/local-tls-support.diff: fix typo in tlsdesc.sym.

[ Aurelien Jarno ]
* debian/po/de.po: fix German translation. Closes: bug#519612.
* Update French debconf translation, by Christian Perrier. Closes: #519662.
* any/local-disable-gethostbyname4.diff: disable unified lookup for
  getaddrinfo(). While unified lookup fix the problem of DNS servers simply
  dropping AAAA requests, it breaks lookup with even more broken DNS servers
  only returning a broken AAAA answer. As it seems the second type of broken
  DNS concerns more users, let's revert to the old behaviour. Closes:
  #516218.
* any/submitted-getaddrinfo-lo.diff: correctly handle the lo interface and
  associated addresses when checking for native connection. Closes:
  bug#519545.
* debian/control.in/libc: change -dbg packages to section debug.
* debian/control.in/main: update Standards-Version to 3.8.1:
  - debian/local/etc_init.d/glibc.sh: move set -e out from the shebang line.
  - debian/debhelper.in/nscd.init: exit successfully if the daemon was
    already running.
* debian/debhelper.in/nscd.dirs: remove /var/run/nscd directory.