A glibc security update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-312
2005-04-07
---------------------------------------------------------------------
Product : Fedora Core 3
Name : glibc
Version : 2.3.5
Release : 0.fc3.1
Summary : The GNU libc libraries.
Description :
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.
---------------------------------------------------------------------
* Thu Apr 7 2005 Roland McGrath <roland@redhat.com> 2.3.5-0.fc3.1
- update to glibc 2.3.5 release
- dlclose fixes merged (#145810, #150414, BZ#821)
- fix a typo in WINDOWS-31J charmap (#151739, BZ#823)
- fix NIS ypprot_err (#151469, BZ#822)
- update IA-64 libm from Intel 2005-04-05 (#142494, BZ#592)
- update tzcode to 2005h (BZ#825)
- fix initgroups when passed zero-size buffer (BZ#661)
* Sat Mar 19 2005 Jakub Jelinek <jakub@redhat.com> 2.3.4-2.fc3.5
- better fix for the dlclose bug (#145810, #150414)
* Thu Mar 3 2005 Jakub Jelinek <jakub@redhat.com> 2.3.4-2.fc3.4
- fix dlclose (#145810)
- clear padding in gconv-modules.cache (#146614, BZ#776)
* Mon Feb 28 2005 Roland McGrath <roland@redhat.com> 2.3.4-2.fc3.3
- update from CVS (glibc-2_3-branch)
- fix handling of hosts with ~ 1K or bigger info per answer
when using nscd (#140378, BZ#769)
- handle partial writes in nscd and partial reads in nscd client
code (#147478, BZ#768)
- fix a bug in execvp introduced in branch changes, add testcases
for the whole exec* family of functions
- fix TLS handling in statically linked programs (BZ#719)
- provide symlink/readlink prototypes with -D_POSIX_C_SOURCE
0112L (BZ#767)
* Thu Feb 17 2005 Roland McGrath <roland@redhat.com> 2.3.4-2.fc3.1
- update from CVS (glibc-2_3-branch)
- existing fix for -ansi vs -D_XOPEN_SOURCE merged upstream (BZ#284)
- fix initstate{,_r} (BZ#710)
- fix segfault if chrooted app attempts to dlopen a library
and no standard library directory exists at all (#147067, #144303, BZ#738)
- fix initgroups when nscd is running, but has group caching disabled
(#146588, BZ#741)
- fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
has not been called yet (#146710, BZ#739)
- fix ppc64 swapcontext and setcontext (#146736, BZ#700)
- service nscd cosmetic fixes (#146776, BZ#742)
- fix s390{,x} string.h (BZ#743)
- fix IA-32 and x86-64 stack alignment in DSO constructors (#145689, BZ#735)
- fix zdump -v segfaults on x86-64 (#146210, BZ#736)
- update IA-64 libm from Intel v2.1 (#142494, BZ#592)
- avoid calling sigaction (SIGPIPE, ...) inside syslog
(#146021, IT#56686, BZ#671)
- declare ftruncate for POSIX 2003 (BZ#640)
- fix errno values for futimes (BZ#633)
- unconditionally include <features.h> in malloc.h (BZ#650)
- change regex \B handling to match old GNU regex as well as perl/grep's dfa
(from empty string inside of word to empty string not at a word boundary,
BZ#693)
- slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
and allow building -mno-tls-direct-seg-refs glibc that is free of
direct TLS %gs access with negative offsets (BZ#737)
- fix addseverity (BZ#731)
- fix fmemopen (BZ#730)
- fix rewinddir (BZ#734)
- increase svc{tcp,unix}_create listen backlog (BZ#733)
- fix vDSO l_map_end/l_text_end computation (BZ#729)
- fix IA-32 stack alignment for LinuxThreads thread functions
and functions passed to clone(2) directly (BZ#723)
- fix ecvt{,_r} on denormals (#143279, BZ#725)
- fix __tls_get_addr typo (BZ#726)
- fix rounding in IA-64 alarm (#143710, BZ#626)
- don't reinitialize __environ in __libc_start_main, so that
effects of setenv/putenv done in DSO initializers are preserved
(#144037, IT#57403, BZ#727)
- fix ppc/ppc64 rint and other rounding functions (#144931, BZ#602)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
f8dfcb513a6c86e53db970fa1c4417fd SRPMS/glibc-2.3.5-0.fc3.1.src.rpm
7bcba32f5c01b6ec3130e1e8c6397626 x86_64/glibc-2.3.5-0.fc3.1.x86_64.rpm
af884e71ab2877755fb8f53b4a620c14 x86_64/glibc-devel-2.3.5-0.fc3.1.x86_64.rpm
ce1968365e6746484fb6254bad473a2a x86_64/glibc-headers-2.3.5-0.fc3.1.x86_64.rpm
a379437b78b8f091cee4391012228111 x86_64/nptl-devel-2.3.5-0.fc3.1.x86_64.rpm
aad491bb33201a4ff777bae8f6307279 x86_64/glibc-profile-2.3.5-0.fc3.1.x86_64.rpm
610b94e9cdfe910b6c3d628f7963049a x86_64/glibc-common-2.3.5-0.fc3.1.x86_64.rpm
facee7cfbf54d17851f344af3f19e51b x86_64/nscd-2.3.5-0.fc3.1.x86_64.rpm
53f2813f29b90c309d0d344aba921acd x86_64/glibc-utils-2.3.5-0.fc3.1.x86_64.rpm
e451175a2542f01ec5e9000b4b0294db x86_64/debug/glibc-debuginfo-2.3.5-0.fc3.1.x86_64.rpm
713811194125a7e10b51ab4dae397928 x86_64/glibc-2.3.5-0.fc3.1.i386.rpm
d06ac6e376174b3ab9d18558a976cc35 x86_64/glibc-devel-2.3.5-0.fc3.1.i386.rpm
fd9844b3cac39718106654c256a0f6b6 x86_64/glibc-2.3.5-0.fc3.1.i686.rpm
713811194125a7e10b51ab4dae397928 i386/glibc-2.3.5-0.fc3.1.i386.rpm
d06ac6e376174b3ab9d18558a976cc35 i386/glibc-devel-2.3.5-0.fc3.1.i386.rpm
471df61f1fa3cb28e729858362a2f744 i386/glibc-headers-2.3.5-0.fc3.1.i386.rpm
199471495e56160728c2956c8b1aaf59 i386/nptl-devel-2.3.5-0.fc3.1.i386.rpm
db72e6cb86db372079fb29f171e8fe12 i386/glibc-profile-2.3.5-0.fc3.1.i386.rpm
3e6784d33959e7a07cc2789995d823d0 i386/glibc-common-2.3.5-0.fc3.1.i386.rpm
1ca95fd7f8f6ee39e31a6da6cd1b433c i386/nscd-2.3.5-0.fc3.1.i386.rpm
046eca8fc03909ecadbfdc815395ba79 i386/glibc-utils-2.3.5-0.fc3.1.i386.rpm
a0a9eeed77220daeb944ba66dec2b877 i386/debug/glibc-debuginfo-2.3.5-0.fc3.1.i386.rpm
ea77a7e64c2f789ed8cc18b6b8d7c7bc i386/debug/glibc-debuginfo-common-2.3.5-0.fc3.1.i386.rpm
fd9844b3cac39718106654c256a0f6b6 i386/glibc-2.3.5-0.fc3.1.i686.rpm
4e61eac6265df4f09420e71f55b83fb2 i386/nptl-devel-2.3.5-0.fc3.1.i686.rpm
a4f163c77424f413a1510736fd4ed2e3 i386/debug/glibc-debuginfo-2.3.5-0.fc3.1.i686.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-312
2005-04-07
---------------------------------------------------------------------
Product : Fedora Core 3
Name : glibc
Version : 2.3.5
Release : 0.fc3.1
Summary : The GNU libc libraries.
Description :
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.
---------------------------------------------------------------------
* Thu Apr 7 2005 Roland McGrath <roland@redhat.com> 2.3.5-0.fc3.1
- update to glibc 2.3.5 release
- dlclose fixes merged (#145810, #150414, BZ#821)
- fix a typo in WINDOWS-31J charmap (#151739, BZ#823)
- fix NIS ypprot_err (#151469, BZ#822)
- update IA-64 libm from Intel 2005-04-05 (#142494, BZ#592)
- update tzcode to 2005h (BZ#825)
- fix initgroups when passed zero-size buffer (BZ#661)
* Sat Mar 19 2005 Jakub Jelinek <jakub@redhat.com> 2.3.4-2.fc3.5
- better fix for the dlclose bug (#145810, #150414)
* Thu Mar 3 2005 Jakub Jelinek <jakub@redhat.com> 2.3.4-2.fc3.4
- fix dlclose (#145810)
- clear padding in gconv-modules.cache (#146614, BZ#776)
* Mon Feb 28 2005 Roland McGrath <roland@redhat.com> 2.3.4-2.fc3.3
- update from CVS (glibc-2_3-branch)
- fix handling of hosts with ~ 1K or bigger info per answer
when using nscd (#140378, BZ#769)
- handle partial writes in nscd and partial reads in nscd client
code (#147478, BZ#768)
- fix a bug in execvp introduced in branch changes, add testcases
for the whole exec* family of functions
- fix TLS handling in statically linked programs (BZ#719)
- provide symlink/readlink prototypes with -D_POSIX_C_SOURCE
0112L (BZ#767)
* Thu Feb 17 2005 Roland McGrath <roland@redhat.com> 2.3.4-2.fc3.1
- update from CVS (glibc-2_3-branch)
- existing fix for -ansi vs -D_XOPEN_SOURCE merged upstream (BZ#284)
- fix initstate{,_r} (BZ#710)
- fix segfault if chrooted app attempts to dlopen a library
and no standard library directory exists at all (#147067, #144303, BZ#738)
- fix initgroups when nscd is running, but has group caching disabled
(#146588, BZ#741)
- fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
has not been called yet (#146710, BZ#739)
- fix ppc64 swapcontext and setcontext (#146736, BZ#700)
- service nscd cosmetic fixes (#146776, BZ#742)
- fix s390{,x} string.h (BZ#743)
- fix IA-32 and x86-64 stack alignment in DSO constructors (#145689, BZ#735)
- fix zdump -v segfaults on x86-64 (#146210, BZ#736)
- update IA-64 libm from Intel v2.1 (#142494, BZ#592)
- avoid calling sigaction (SIGPIPE, ...) inside syslog
(#146021, IT#56686, BZ#671)
- declare ftruncate for POSIX 2003 (BZ#640)
- fix errno values for futimes (BZ#633)
- unconditionally include <features.h> in malloc.h (BZ#650)
- change regex \B handling to match old GNU regex as well as perl/grep's dfa
(from empty string inside of word to empty string not at a word boundary,
BZ#693)
- slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
and allow building -mno-tls-direct-seg-refs glibc that is free of
direct TLS %gs access with negative offsets (BZ#737)
- fix addseverity (BZ#731)
- fix fmemopen (BZ#730)
- fix rewinddir (BZ#734)
- increase svc{tcp,unix}_create listen backlog (BZ#733)
- fix vDSO l_map_end/l_text_end computation (BZ#729)
- fix IA-32 stack alignment for LinuxThreads thread functions
and functions passed to clone(2) directly (BZ#723)
- fix ecvt{,_r} on denormals (#143279, BZ#725)
- fix __tls_get_addr typo (BZ#726)
- fix rounding in IA-64 alarm (#143710, BZ#626)
- don't reinitialize __environ in __libc_start_main, so that
effects of setenv/putenv done in DSO initializers are preserved
(#144037, IT#57403, BZ#727)
- fix ppc/ppc64 rint and other rounding functions (#144931, BZ#602)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
f8dfcb513a6c86e53db970fa1c4417fd SRPMS/glibc-2.3.5-0.fc3.1.src.rpm
7bcba32f5c01b6ec3130e1e8c6397626 x86_64/glibc-2.3.5-0.fc3.1.x86_64.rpm
af884e71ab2877755fb8f53b4a620c14 x86_64/glibc-devel-2.3.5-0.fc3.1.x86_64.rpm
ce1968365e6746484fb6254bad473a2a x86_64/glibc-headers-2.3.5-0.fc3.1.x86_64.rpm
a379437b78b8f091cee4391012228111 x86_64/nptl-devel-2.3.5-0.fc3.1.x86_64.rpm
aad491bb33201a4ff777bae8f6307279 x86_64/glibc-profile-2.3.5-0.fc3.1.x86_64.rpm
610b94e9cdfe910b6c3d628f7963049a x86_64/glibc-common-2.3.5-0.fc3.1.x86_64.rpm
facee7cfbf54d17851f344af3f19e51b x86_64/nscd-2.3.5-0.fc3.1.x86_64.rpm
53f2813f29b90c309d0d344aba921acd x86_64/glibc-utils-2.3.5-0.fc3.1.x86_64.rpm
e451175a2542f01ec5e9000b4b0294db x86_64/debug/glibc-debuginfo-2.3.5-0.fc3.1.x86_64.rpm
713811194125a7e10b51ab4dae397928 x86_64/glibc-2.3.5-0.fc3.1.i386.rpm
d06ac6e376174b3ab9d18558a976cc35 x86_64/glibc-devel-2.3.5-0.fc3.1.i386.rpm
fd9844b3cac39718106654c256a0f6b6 x86_64/glibc-2.3.5-0.fc3.1.i686.rpm
713811194125a7e10b51ab4dae397928 i386/glibc-2.3.5-0.fc3.1.i386.rpm
d06ac6e376174b3ab9d18558a976cc35 i386/glibc-devel-2.3.5-0.fc3.1.i386.rpm
471df61f1fa3cb28e729858362a2f744 i386/glibc-headers-2.3.5-0.fc3.1.i386.rpm
199471495e56160728c2956c8b1aaf59 i386/nptl-devel-2.3.5-0.fc3.1.i386.rpm
db72e6cb86db372079fb29f171e8fe12 i386/glibc-profile-2.3.5-0.fc3.1.i386.rpm
3e6784d33959e7a07cc2789995d823d0 i386/glibc-common-2.3.5-0.fc3.1.i386.rpm
1ca95fd7f8f6ee39e31a6da6cd1b433c i386/nscd-2.3.5-0.fc3.1.i386.rpm
046eca8fc03909ecadbfdc815395ba79 i386/glibc-utils-2.3.5-0.fc3.1.i386.rpm
a0a9eeed77220daeb944ba66dec2b877 i386/debug/glibc-debuginfo-2.3.5-0.fc3.1.i386.rpm
ea77a7e64c2f789ed8cc18b6b8d7c7bc i386/debug/glibc-debuginfo-common-2.3.5-0.fc3.1.i386.rpm
fd9844b3cac39718106654c256a0f6b6 i386/glibc-2.3.5-0.fc3.1.i686.rpm
4e61eac6265df4f09420e71f55b83fb2 i386/nptl-devel-2.3.5-0.fc3.1.i686.rpm
a4f163c77424f413a1510736fd4ed2e3 i386/debug/glibc-debuginfo-2.3.5-0.fc3.1.i686.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.