{"id":91038,"date":"2020-08-07T13:42:21","date_gmt":"2020-08-07T11:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemnoj-biblioteki-glibc-2-32"},"modified":"2020-08-07T13:42:21","modified_gmt":"2020-08-07T11:42:21","slug":"vypusk-sistemnoj-biblioteki-glibc-2-32","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","title":{"rendered":"Sortie de la biblioth\u00e8que syst\u00e8me Glibc 2.32","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Apr\u00e8s six mois de d\u00e9veloppement <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceware.org\/pipermail\/libc-announce\/2020\/000029.html\">publi\u00e9e<\/a><\/noindex> publication de la biblioth\u00e8que syst\u00e8me <noindex><a rel=\"nofollow\" href=\"http:\/\/ftp.gnu.org\/gnu\/glibc\/\">GNU C Library<\/a><\/noindex> (glibc) <noindex><a rel=\"nofollow\" href=\"http:\/\/sourceware.org\/glibc\/wiki\/Release\/2.32\">2.32<\/a><\/noindex>, qui respecte int\u00e9gralement les exigences des normes ISO C11 et POSIX.1-2017. La nouvelle version inclut des correctifs de 67 d\u00e9veloppeurs. <\/p>\n<p>Dans Glibc 2.32, les fonctionnalit\u00e9s mises en \u0153uvre incluent <noindex><a rel=\"nofollow\" href=\"http:\/\/sourceware.org\/git\/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD\">am\u00e9liorations<\/a><\/noindex> on peut noter :\n<\/p>\n<ul>\n<li class=\"l\"> Ajout de la prise en charge des processeurs Synopsys ARC HS (ARCv2 ISA). Pour que le port fonctionne, il n\u00e9cessite au minimum binutils 2.32, gcc 8.3 et le noyau Linux 5.1. Trois variantes ABI sont prises en charge : arc-linux-gnu, arc-linux-gnuhf et arceb-linux-gnu (big-endian);\n<li class=\"l\"> Chargement des modules d'audit sp\u00e9cifi\u00e9s dans les sections DT_AUDIT et<br \/>\n  DT_DEPAUDIT de l'ex\u00e9cutable.<\/p>\n<li class=\"l\"> La prise en charge du type IEEE128 long double a \u00e9t\u00e9 mise en \u0153uvre pour l'architecture powerpc64le, activ\u00e9e lors de la compilation avec l'option &#171;-mabi=ieeolongdouble&#187;.\n<li class=\"l\"> Certaines API sont annot\u00e9es avec l'attribut GCC &#8216;access&#8217;, permettant de g\u00e9n\u00e9rer des avertissements de meilleure qualit\u00e9 lors de la compilation sous GCC 10 pour d\u00e9tecter les d\u00e9bordements possibles de tampon et d'autres d\u00e9passements de limites.\n<li class=\"l\"> Pour les syst\u00e8mes Linux, les fonctions pthread_attr_setsigmask_np et<br \/>\n  pthread_attr_getsigmask_np ont \u00e9t\u00e9 mises en \u0153uvre, permettant \u00e0 l'application de sp\u00e9cifier un masque de signal pour les threads cr\u00e9\u00e9s avec pthread_create.<\/p>\n<li class=\"l\"> Les donn\u00e9es de codages, les informations sur les types de caract\u00e8res et les tables de translitt\u00e9ration ont \u00e9t\u00e9 mises \u00e0 jour pour prendre en charge la sp\u00e9cification Unicode 13.0.0;\n<li class=\"l\"> Ajout d'un nouveau fichier d'en-t\u00eate &lt;sys\/single_threaded.h&gt;, d\u00e9finissant la variable __libc_single_threaded, qui peut \u00eatre utilis\u00e9e dans les applications pour des optimisations mono-thread.\n<li class=\"l\"> Des fonctions sigabbrev_np et sigdescr_np ont \u00e9t\u00e9 ajout\u00e9es, retournant le nom abr\u00e9g\u00e9 et la description du signal (par exemple, &#171;HUP&#187; et Hangup&#187; pour SIGHUP).\n<li class=\"l\"> Des fonctions strerrorname_np et strerrordesc_np ont \u00e9t\u00e9 ajout\u00e9es, retournant le nom et la description d'erreur (par exemple, &#171;EINVAL&#187; et &#171;Argument invalide&#187; pour EINVAL).\n<li class=\"l\"> Pour la plateforme ARM64, le drapeau &#171;&#8212;enable-standard-branch-protection&#187; (ou -mbranch-protection=standard dans GCC) a \u00e9t\u00e9 ajout\u00e9, utilisant le m\u00e9canisme ARMv8.5-BTI (Branch Target Indicator) pour prot\u00e9ger l'ex\u00e9cution de jeux d'instructions qui ne doivent pas \u00eatre acc\u00e9d\u00e9s lors de la bifurcation. Le blocage des sauts vers des emplacements de code arbitraires a \u00e9t\u00e9 mis en \u0153uvre pour contrer la cr\u00e9ation de gadgets dans des exploits utilisant des techniques de programmation orient\u00e9e vers le retour (ROP &#8212; Return-Oriented Programming, o\u00f9 l'attaquant ne tente pas de placer son propre code en m\u00e9moire, mais utilise d\u00e9j\u00e0 des morceaux d'instructions machine, se terminant par une instruction de retour au contr\u00f4le, pour construire une cha\u00eene d'appels pour obtenir la fonctionnalit\u00e9 requise).\n<li class=\"l\"> Un grand nettoyage des fonctionnalit\u00e9s obsol\u00e8tes a \u00e9t\u00e9 effectu\u00e9, incluant la suppression des options &#171;&#8212;enable-obsolete-rpc&#187; et &#171;&#8212;enable-obsolete-nsl&#187;, et du fichier d'en-t\u00eate &lt;sys\/sysctl.h&gt;. Les fonctions sstk, siginterrupt, sigpause, sighold, sigrelse, sigignore et sigset, les tableaux sys_siglist, _sys_siglist et sys_sigabbrev, ainsi que les symboles sys_errlist, _sys_errlist, sys_nerr et _sys_nerr, ont \u00e9t\u00e9 d\u00e9clar\u00e9s obsol\u00e8tes, tout comme le module NSS hesiod.\n<li class=\"l\"> Par d\u00e9faut, ldconfig est d\u00e9sormais configur\u00e9 pour utiliser le nouveau format ld.so.cache, qui est pris en charge par glibc depuis presque 20 ans.\n<li class=\"l\"> Vuln\u00e9rabilit\u00e9s corrig\u00e9es :\n<ul>\n<li class=\"l\"> CVE-2016-10228 &#8212; boucle infinie dans l'utilitaire iconv, se manifestant lors de l'ex\u00e9cution avec l'option &#171;-c&#187;, lors du traitement de donn\u00e9es multibites non valides.\n<li class=\"l\"> CVE-2020-10029 &#8212; corruption de la pile lors de l'appel de fonctions trigonom\u00e9triques avec un argument pseudo-nul.\n<li class=\"l\"> CVE-2020-1752 &#8212; acc\u00e8s \u00e0 une zone m\u00e9moire apr\u00e8s sa lib\u00e9ration (use-after-free) dans la fonction glob lors de l'expansion d'un lien vers le r\u00e9pertoire personnel (&#171;~user&#187;) dans les chemins.\n<li class=\"l\"> CVE-2020-6096 &#8212; traitement incorrect sur la plateforme ARMv7 des valeurs n\u00e9gatives du param\u00e8tre dans memcpy() et memmove(), d\u00e9finissant la taille de la zone copi\u00e9e. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53003\">Permet de<\/a><\/noindex> ex\u00e9cuter du code lors du traitement de donn\u00e9es correctement format\u00e9es dans les fonctions memcpy() et memmove(). Il est remarquable que le probl\u00e8me <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53371\">est rest\u00e9<\/a><\/noindex>  non corrig\u00e9 pendant presque deux mois apr\u00e8s la divulgation publique et cinq mois apr\u00e8s l'avis aux d\u00e9veloppeurs de Glibc.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53504\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 GNU C Library (glibc) 2.32, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 ISO C11 \u0438 POSIX.1-2017. \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 67 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0418\u0437 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 Glibc 2.32 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c: \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Synopsys ARC HS (ARCv2 ISA). \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u0440\u0442\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c binutils 2.32, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91038","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Glibc 2.32 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-07T11:42:21+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-07T11:42:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Publication de la biblioth\u00e8que syst\u00e8me Glibc 2.32 | ProHoster","description":"Apr\u00e8s six mois de d\u00e9veloppement, la version de la biblioth\u00e8que syst\u00e8me a \u00e9t\u00e9 publi\u00e9e.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Glibc 2.32 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-07T11:42:21+00:00","article:modified_time":"2020-08-07T11:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91038","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:35:24","updated":"2022-09-29 18:50:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/91038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=91038"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/91038\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=91038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=91038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=91038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}