{"id":91038,"date":"2020-08-07T13:42:21","date_gmt":"2020-08-07T11:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemnoj-biblioteki-glibc-2-32"},"modified":"2020-08-07T13:42:21","modified_gmt":"2020-08-07T11:42:21","slug":"vypusk-sistemnoj-biblioteki-glibc-2-32","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","title":{"rendered":"Udgivelsen af systembiblioteket Glibc 2.32","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Efter seks m\u00e5neders udvikling <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceware.org\/pipermail\/libc-announce\/2020\/000029.html\">udgivet<\/a><\/noindex> udgivelse af systembibliotek <noindex><a rel=\"nofollow\" href=\"http:\/\/ftp.gnu.org\/gnu\/glibc\/\">GNU C-bibliotek<\/a><\/noindex> (glibc) <noindex><a rel=\"nofollow\" href=\"http:\/\/sourceware.org\/glibc\/wiki\/Release\/2.32\">2.32<\/a><\/noindex>, der fuldt lever op til kravene i standarderne ISO C11 og POSIX.1-2017. Den nye udgave inkluderer rettelser fra 67 udviklere. <\/p>\n<p>Implementeret i Glibc 2.32 <noindex><a rel=\"nofollow\" href=\"http:\/\/sourceware.org\/git\/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD\">kan n\u00e6vnes:<\/a><\/noindex> Der er tilf\u00f8jet makro _ISOC2X_SOURCE for at inkludere funktioner defineret i udkastet til den fremtidige ISO-standard\n<\/p>\n<ul>\n<li class=\"l\"> Tilf\u00f8jet support for Synopsys ARC HS (ARCv2 ISA) processorer. Porten kr\u00e6ver mindst binutils 2.32, gcc 8.3 og Linux-kernen 5.1. Tre varianter af ABI underst\u00f8ttes: arc-linux-gnu, arc-linux-gnuhf og arceb-linux-gnu (big-endian);\n<li class=\"l\"> Implementeret indl\u00e6sning af revisionsmoduler, der er angivet i sektionerne DT_AUDIT og<br \/>\n  DT_DEPAUDIT i den udf\u00f8rbare fil.<\/p>\n<li class=\"l\"> Der er implementeret st\u00f8tte til IEEE128 long double formatet for powerpc64le arkitekturen, som kan aktiveres under bygning med indstillingen &#171;-mabi=ieeolongdouble&#187;.\n<li class=\"l\"> Nogle API'er er annoteret med GCC-attributten &#8216;access&#8217;, som tillader generering af mere pr\u00e6cise advarsler ved kompilering med GCC 10, n\u00e5r der er risiko for buffer overflow og andre gr\u00e6nseoverskridende scenarier.\n<li class=\"l\"> For Linux-systemer er funktionerne pthread_attr_setsigmask_np og<br \/>\n  pthread_attr_getsigmask_np implementeret, hvilket giver applikationen mulighed for at angive signalmasken for tr\u00e5de, der oprettes med pthread_create.<\/p>\n<li class=\"l\"> Encodingdata, information om tegns typer og translitterations tabeller er blevet opdateret for at st\u00f8tte Unicode-specifikationen 13.0.0;\n<li class=\"l\"> Tilf\u00f8jet en ny headerfil , der definerer variablen __libc_single_threaded, som kan bruges i applikationer til enkelttr\u00e5det optimering.\n<li class=\"l\"> Funktionerne sigabbrev_np og sigdescr_np er tilf\u00f8jet, som returnerer det forkortede navn og beskrivelsen af et signal (for eksempel &#171;HUP&#187; og Hangup&#187; for SIGHUP).\n<li class=\"l\"> Funktionerne strerrorname_np og strerrordesc_np er tilf\u00f8jet, som returnerer navnet og beskrivelsen af en fejl (for eksempel &#171;EINVAL&#187; og &#171;Invalid argument&#187; for EINVAL).\n<li class=\"l\"> For ARM64-platformen er flaget &#171;&#8212;enable-standard-branch-protection&#187; (eller -mbranch-protection=standard i GCC) tilf\u00f8jet, som aktiverer ARMv8.5-BTI mekanismen (Branch Target Indicator) til at beskytte eksekveringen af instruktionss\u00e6t, som ikke b\u00f8r have spring under branchering. Blokering af spring til vilk\u00e5rlige kodeomr\u00e5der er implementeret for at forhindre oprettelsen af gadgets i exploits, der anvender return-oriented programming (ROP &#8212; Return-Oriented Programming, angrebet fors\u00f8ger ikke at placere sin egen kode i hukommelsen, men opererer med eksisterende stykker maskinkode, der slutter med en return-instruktion, hvorfra der opbygges en k\u00e6de af opkald for at opn\u00e5 den \u00f8nskede funktionalitet).\n<li class=\"l\"> Der er foretaget en st\u00f8rre oprydning af for\u00e6ldede funktioner, herunder fjernelse af indstillingerne &#171;&#8212;enable-obsolete-rpc&#187; og &#171;&#8212;enable-obsolete-nsl&#187;, samt header-filen &lt;sys\/sysctl.h&gt;. Funktionerne sstk, siginterrupt, sigpause, sighold, sigrelse, sigignore og sigset er deklareret som for\u00e6ldede, ligesom array'ene sys_siglist, _sys_siglist og sys_sigabbrev, samt symbolerne sys_errlist, _sys_errlist, sys_nerr og _sys_nerr, og NSS-modulet hesiod.\n<li class=\"l\"> ldconfig er som standard blevet \u00e6ndret til at bruge det nye format ld.so.cache, som har v\u00e6ret underst\u00f8ttet i glibc i n\u00e6sten 20 \u00e5r.\n<li class=\"l\"> S\u00e5rbarheder udbedret:\n<ul>\n<li class=\"l\"> CVE-2016-10228 &#8212; uendeligt loop i iconv-nyttig, som viser sig n\u00e5r den k\u00f8res med indstillingen &#171;-c&#187;, n\u00e5r den behandler ugyldige multibyte data.\n<li class=\"l\"> CVE-2020-10029 &#8212; stakskade ved kald af trigonometriske funktioner med pseudo-nul argument.\n<li class=\"l\"> CVE-2020-1752 &#8212; adgang til et hukommelsesomr\u00e5de efter det er frigivet (use-after-free) i funktionen glob, n\u00e5r der refereres til hjemmemappen (&#171;~user&#187;) i stier.\n<li class=\"l\"> CVE-2020-6096 &#8212; ukorrekt behandling p\u00e5 ARMv7-platformen af negative v\u00e6rdier i memcpy() og memmove(), som bestemmer st\u00f8rrelsen af det kopierede omr\u00e5de. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53003\">Muligg\u00f8r<\/a><\/noindex> udf\u00f8relse af kode ved behandling af p\u00e5 en s\u00e6rlig m\u00e5de udformede data i funktionerne memcpy() og memmove(). Det er bem\u00e6rkelsesv\u00e6rdigt, at problemet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53371\">forblev<\/a><\/noindex>  uoprettet i n\u00e6sten to m\u00e5neder efter offentligg\u00f8relsen af oplysningerne og fem m\u00e5neder efter meddelelsen til udviklerne af Glibc.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Kilde: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53504\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 GNU C Library (glibc) 2.32, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 ISO C11 \u0438 POSIX.1-2017. \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 67 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0418\u0437 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 Glibc 2.32 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c: \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Synopsys ARC HS (ARCv2 ISA). \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u0440\u0442\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c binutils 2.32, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91038","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Glibc 2.32 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-07T11:42:21+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-07T11:42:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af systembiblioteket Glibc 2.32 | ProHoster","description":"Efter seks m\u00e5neders udvikling er udgivelsen af systembiblioteket offentliggjort","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Glibc 2.32 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-07T11:42:21+00:00","article:modified_time":"2020-08-07T11:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91038","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:35:24","updated":"2022-09-29 18:50:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/91038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=91038"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/91038\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=91038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=91038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=91038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}