{"id":118103,"date":"2024-07-22T21:43:01","date_gmt":"2024-07-22T19:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemnoj-biblioteki-glibc-2-40"},"modified":"2024-07-22T21:43:01","modified_gmt":"2024-07-22T19:43:01","slug":"vypusk-sistemnoj-biblioteki-glibc-2-40","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-40","title":{"rendered":"Release of the Glibc 2.40 system library","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
After six months of development, the release of the GNU C Library (glibc) 2.40 has been published, fully adhering to the ISO C11 and POSIX.1-2017 standards. The new release includes patches from 68 developers. <\/p>\n
Notable improvements implemented in Glibc 2.40 include: <\/p>\n
\n
New exponential and logarithmic functions defined in the C23 standard have been added to the header file math.h: exp2m1, exp10m1, log2p1, log10p1, and logp1. These functions are available in variants for float, double, long double, _FloatN, and _FloatNx types.\n
The _ISOC23_SOURCE macro has been added to define the use of features proposed in the C23 standard (currently, only some features of C23 are implemented in Glibc). The use of C23 can also be enabled at compilation through GCC options -std=c23, -std=gnu23, -std=c2x, or -std=gnu2x.\n
A new configuration option «glibc.rtld.enable_secure» has been added, allowing the program to run during testing as if it had the setuid flag.\n
On the Linux platform, the epoll.h header has been updated to support new ioctl commands and epoll structures introduced in the Linux 6.9 kernel.\n
The functionality for detecting potential buffer overflows and related security errors during string processing and memory management functions («_FORTIFY_SOURCE») has been adapted for Glibc builds using the Clang compiler.\n
In the mathematical vector functions library (libmvec), implementations of the functions acosh, asinh, atanh, cbrt, cosh, erf, erfc, hypot, pow, sinh, and tanh for the Aarch64 architecture have been proposed.\n
On x86 systems, the ability to disable the use of temporary buffers in the memset function has been provided to speed up writing large data sets. This optimization is activated by the «x86_memset_non_temporal_threshold» setting.\n
Macros in the stdbit.h header that work with various types (type-generic) have been changed to use the built-in functions __builtin_stdc_bit_ceil for supporting operands with types __int128 and _BitInt(N) when using GCC 14.\n
Fields with epoch timestamp counters in the lastlog, utmp, and utmpx structures have been switched from using a 32-bit signed type to an unsigned type, extending the maximum addressable time by the counter from the year 2038 to 2106.\n
Fixed vulnerabilities:\n
\n
CVE-2024-2961 — buffer overflow when converting specially crafted strings in ISO-2022-CN-EXT encoding using the iconv() function. In practice, this vulnerability can lead to remote attacks on PHP applications, resulting in code execution.\n
CVE-2024-33599 — buffer overflow in the netgroup cache handling code in the nscd (Name Service Cache Daemon) process. This vulnerability can be exploited by a client sending a specially crafted request.\n
CVE-2024-33600 — null pointer dereference in the nscd process, which can lead to a crash when handling certain requests.\n
CVE-2024-33601 — an error in netgroup cache handling may cause the nscd process to crash due to memory allocation failure.\n
CVE-2024-33602 — memory corruption when working with the netgroup cache in the nscd process. <\/ul>\n