ubuntu/+source/glibc:debian/stretch

Last commit made on 2019-02-16
Get this branch:
git clone -b debian/stretch https://git.launchpad.net/ubuntu/+source/glibc
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
debian/stretch
Repository:
lp:ubuntu/+source/glibc

Recent commits

42e0d5f... by Aurelien Jarno on 2019-02-06

Import patches-unapplied version 2.24-11+deb9u4 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 65b3d18287f3d9e7890c23e335152a688d5ddc0e

New changelog entries:
  [ Aurelien Jarno ]
  * debian/patches/git-updates.diff: update from upstream stable branch:
    - Fix buffer overflow in glob with GLOB_TILDE (CVE-2017-15670). Closes:
      #879501.
    - Fix memory leak in glob with GLOB_TILDE (CVE-2017-15671). Closes:
      #879500.
    - Fix a buffer overflow in glob with GLOB_TILDE in unescaping
      (CVE-2017-15804). Closes: #879955.
    - Fix a memory leak in ld.so (CVE-2017-1000408). Closes: #884132.
    - Fix a buffer overflow in ld.so (CVE-2017-1000409). Closes: #884133.
    - Fixes incorrect RPATH/RUNPATH handling for SUID binaries
      (CVE-2017-16997). Closes: #884615.
    - Fix a data corruption in SSE2-optimized memmove implementation for
      i386 (CVE-2017-18269).
    - Fix a stack-based buffer overflow in the realpath function
      (CVE-2018-11236). Closes: #899071.
    - Fix a buffer overflow in the AVX-512-optimized implementation of the
      mempcpy function (CVE-2018-11237). Closes: #899070.
    - Fix stack guard size accounting and reduce stack usage during
      unwinding to avoid segmentation faults on CPUs with AVX512-F. Closes:
      #903554.
    - Fix a use after free in pthread_create(). Closes: #916925.
  * debian/debhelper.in/libc.postinst, script.in/nsscheck.sh: check for
    postgresql in NSS check. Closes: #710275.
  [ Sebastian Andrzej Siewior ]
  * patches/any/local-condvar-do-not-use-requeue-for-pshared-condvars.patch:
    patch to fix pthread_cond_wait() in the pshared case on non-x86. Closes:
    #904158.

65b3d18... by Aurelien Jarno on 2018-01-14

Import patches-unapplied version 2.24-11+deb9u3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: cc3e4a1fe69421c5251070b76f5c96bc3e5a024b

New changelog entries:
  [ Aurelien Jarno ]
  * debian/rules.d/debhelper.mk: install the libc-otherbuild postinst and
    postrm in the libc6-i686 transitional package, to make sure
    /etc/ld.so.nohwcap is correctly removed after an upgrade. Closes:
    #883394.

cc3e4a1... by Aurelien Jarno on 2017-12-01

Import patches-unapplied version 2.24-11+deb9u2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6802365ef818f9e7da2912e25c7a3c04c333d1d4

New changelog entries:
  [ Aurelien Jarno ]
  * debian/control.in/x32: Add a gcc-multilib Recommends for libc6-dev-x32.
  * debian/patches/git-updates.diff: update from upstream stable branch:
    - debian/patches/any/submitted-perl-inc.diff: drop, merged upstream.
    - debian/patches/any/cvs-remove-pid-tid-cache-clone.diff: drop, merged
      upstream.
    - debian/patches/any/local-CVE-2017-1000366-rtld-LD_LIBRARY_PATH.diff:
      drop, merged upstream.
    - debian/patches/any/local-CVE-2017-1000366-rtld-LD_PRELOAD.diff: drop,
      merged upstream.
    - debian/patches/any/local-CVE-2017-1000366-rtld-LD_AUDIT.diff: drop,
      merged upstream.
    - debian/patches/any/cvs-vectorized-strcspn-guards.diff: drop, merged
      upstream.
    - debian/patches/any/cvs-hwcap-AT_SECURE.diff: drop, merged upstream.
    - Avoid use-after-free read access in clntudp_call (CVE-2017-12133).
      Closes: #870648.
    - Fix compatibility with Intel C++ __regcall calling convention. Closes:
      #881850.
    - Fix a buffer overrun in rpcgen.
    - Fix strlen on null pointer in nss_nisplus.
    - Fix invalid cast in group merging affecting ppc64 and s390x.
    - Define collation for Malayalam chillu characters.
    - Correct collation of U+0D36 and U+0D37 Malayalam characters.
  * debian/script.in/nohwcap.sh: always check for all optimized packages
    as multiarch allows one to install foreign architectures. Closes:
    #882272.
  [ Santiago Vila ]
  * debian/debhelper.in/libc-bin.postinst: do not update /etc/nsswitch.conf
    when its content already matches the default. Closes: #865144.

6802365... by Aurelien Jarno on 2017-06-15

Import patches-unapplied version 2.24-11+deb9u1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6a2a783c7a8b28c5f6cd1fd3c8d746a2eeee6a89

New changelog entries:
  * debian/patches/any/local-CVE-2017-1000366-rtld-LD_AUDIT.diff,
    debian/patches/any/local-CVE-2017-1000366-rtld-LD_LIBRARY_PATH.diff,
    debian/patches/any/local-CVE-2017-1000366-rtld-LD_PRELOAD.diff: add
    patches to protect the dynamic linker against stack clashes
    (CVE-2017-1000366).
  * debian/patches/any/cvs-vectorized-strcspn-guards.diff: patch backported
    from upstream to allow usage of strcspn in ld.so.
  * debian/patches/any/cvs-hwcap-AT_SECURE.diff: patch backported from
    upstream to disable HWCAP for AT_SECURE programs.

6a2a783... by Aurelien Jarno on 2017-05-28

Import patches-unapplied version 2.24-11 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 7477ca9baaf2aa61ff415051a8777d62c9a0738b

New changelog entries:
  [ Aurelien Jarno ]
  * debian/patches/git-updates.diff: update from upstream stable branch:
    - Improve memcpy/memset performance on Skylake server.
  * debian/patches/any/cvs-malloc-hardening.diff: patch backported from
    upstream to further harden glibc malloc metadata against 1-byte
    overflows. Closes: #862950.

7477ca9... by Aurelien Jarno on 2017-04-11

Import patches-unapplied version 2.24-10 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 4a452ca926de6944bbd888320196158a7b3fc386

New changelog entries:
  [ Samuel Thibault ]
  * hurd-i386/cvs-truncate64.diff: New patch to support 64bit truncate.
  * hurd-i386/cvs-send-recv-posix.diff: New patch to make send/recv more
    posix.
  [ Aurelien Jarno ]
  * debian/patches/git-updates.diff: update from upstream stable branch:
    - Fix readahead on mips64el.
    - Improve branch predication in _dl_runtime_resolve_avx512_opt;
    - Fix symbol redirect for fts_set on 32-bit architectures.
    - Fix AVX2/AVX512 optimized unaligned memset.
    - Don't use PLT nor GOT in static archives on amd64.
    - Drop GLIBC_TUNABLES in setxid processes.
    - Fix write-after-destroy in lock elision on powerpc/ppc64el.
  * Drop patches/any/cvs-resolv-internal-qtype.diff, merged upstream.
  * any/cvs-remove-pid-tid-cache-clone.diff: patch from upstream to remove
    cached PID/TID in clone. Closes: #857909.
  * debian/rules.d/build.mk: do not fail the build in case of testsuite
    regressions when building a +debXuX version. That way changes in the
    environment (e.g.: kernel) do not prevent security or stable versions
    to be built.

4a452ca... by Aurelien Jarno on 2017-01-16

Import patches-unapplied version 2.24-9 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 1ee8a5d56ca4d8bb9eba16aec8dee76035488830

New changelog entries:
  [ Samuel Thibault ]
  * hurd-i386/tg-libpthread-gsync-mutex.diff: Update patch, fixes trylock
    error return.
  * hurd-i386/tg-magic-pid.diff: New patch, add support for /proc/self.
  * hurd-i386/tg-mlockall.diff: New patch, add support for mlockall.
    - control: Bump gnumach-dev build-depend accordingly.
  * hurd-i386/tg-gsync-libc.diff: Fix linking against built libmachuser
    instead of installed libmachuser.
  * libc0.3.symbols.hurd-i386: Add vm_wire_all symbols.
  [ Aurelien Jarno ]
  * debian/sysdeps/{amd64,i386,x32}.mk: disable lock elision (aka Intel TSX)
    on x86 architectures. This causes programs (wrongly) unlocking an already
    unlocked mutex to abort. More importantly most of the other distributions
    decided to disable it, so we don't want to be the only distribution left
    testing this code path. Closes: #850182.
  * debian/rules.d/build.mk: pass --no-recursion before -T in the call to tar
    to workaround or fix bug#829738. This reduces the size of the glibc-source
    package by 40%
  * debian/patches/localedata/supported.diff: rename the kk_KZ locale with the
    RK1048 charset to kk_KZ.RK1048 to avoid conflicting with the kk_KZ locale
    with the PT154 charset. Closes: #847596.
  * debian/patches/git-updates.diff: update from upstream stable branch:
    - debian/patches/alpha/submitted-math-fixes.diff: Drop, merged upstream.
  * patches/any/cvs-resolv-internal-qtype.diff: patch from upstream to fix a
    NULL pointer dereference in libresolv when receiving a T_UNSPEC internal
    QTYPE (CVE-2015-5180). Closes: #796106.
  * Make the package build reproducibly, thanks to Ximin Luo for the patch.
    Closes: #783210.
    - debian/rules: export SOURCE_DATE_EPOCH when not building with
      dpkg-buildpackage.
    - debian/rules.d/build.mk: use --clamp-mtime instead of touching the
      files.
    - debian/rules.d/debhelper.mk: do not chmod +x the shell script, call
      it with sh instead.
  * debian/rules.d/control.mk: Add the sh3 architecture to libc6_archs.
    Closes: #850565.

1ee8a5d... by Samuel Thibault <email address hidden> on 2016-12-04

Import patches-unapplied version 2.24-8 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9e72e95c87e691e3e5e9035d2dc9734a92e32c69

New changelog entries:
  [ Samuel Thibault ]
  * hurd-i386/tg-libc_rwlock_recursive.diff: New patch to work around
    fakeroot-tcp issue, see #845930.
  * hurd-i386/cvs-hurd_signal.h_c++.diff: New patch to fix building gdb.
  * hurd-i386/tg-poll_errors_fixes.diff: Fix port leak.

9e72e95... by Aurelien Jarno on 2016-11-25

Import patches-unapplied version 2.24-7 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 8f3ca682fc9775dabfb2a9709121df6c0a113913

New changelog entries:
  [ Samuel Thibault ]
  * hurd-i386/tg-hurdsig-SA_SIGINFO.diff: Fix passing address to legacy SIGBUS
    handlers.
  * hurd-i386/tg-libpthread-gsync-mutex.diff: New patch to make mutexes use
    gsync too.
  * hurd-i386/tg-NOFOLLOW.diff: New patch to fix O_NOFOLLOW errors.
  * hurd-i386/tg-NOFOLLOW-DIRECTORY.diff: New patch to fix O_NOFOLLOW |
    O_DIRECTORY errors.
  [ Aurelien Jarno ]
  * debian/patches/git-updates.diff: update from upstream stable branch.
  * debian/rules: build with -no-pie -fno-PIE. Closes: #845512, #845521.
  [ Matthias Klose ]
  * Allow to inject the libc-dev dependency on linux-libc-dev by the build
    environment.

8f3ca68... by Aurelien Jarno on 2016-11-21

Import patches-unapplied version 2.24-6 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 8077d8a8224c3e2f1befdc7350b2c9b68a5c1fce

New changelog entries:
  [ Samuel Thibault ]
  * libc0.3.symbols.hurd-i386: Drop removed RPCs.
  * hurd-i386/cvs-libpthread.diff: Update to latest upstream version.
    - hurd-i386/cvs-libpthread-static-weak.diff: Drop, merged upstream.
    - hurd-i386/cvs-pthread-atfork.diff: Drop, merged upstream.
    - hurd-i386/cvs-setcancelstate.diff: Drop, merged upstream.
  * hurd-i386/tg-libpthread-gsync-spin.diff: New patch to make spinlocks use
    gsync too. Thanks Svante Signell for investigating issues with the first
    version.
  * hurd-i386/tg-ONSTACK.diff: New patch to fix SS_ONSTACK support.
    Closes: #551470.
  * hurd-i386/tg-extern_inline.diff: Update to upstream.
    - hurd-i386/tg-sigstate_thread_reference.diff: Refresh.
    - hurd-i386/tg-gsync-libc.diff: Refresh.
  * hurd-i386/tg-hurdsig-SA_SIGINFO.diff: Update to upstream.
  * hurd-i386/tg-EGREGIOUS-fr.diff: New patch to fix grammar in french
    translation.
  [ Aurelien Jarno ]
  * debian/patches/git-updates.diff: update from upstream stable branch:
    - Fix pread/pwrite syscalls on SH4.
    - Fix build on powerpc/ppc64el with binutils from trunk. Closes: #843691.
    - Fix flexible array usage in gconv.h. Closes: #841304.
    - Fix linknamespace parallel test failures. Closes: #844132.
  * debian/patches/any/submitted-unicode-9.0.0.diff: proposed patch to update
    Unicode support to version 9.0.0. Closes: #842466.
  * debian/patches/localedata/locale-C.diff: update to Unicode 9.0.0.
  * debian/patches/localedata/submitted-en_AU-date_fmt.diff: improve date_fmt
    for en_AU locale. Closes: #841916.