Sakin Laburaren Tsarin Glibc 2.30

Bayan watanni shida na ci gaba buga saki tsarin ɗakin karatu GNU C Library (glibc) 2.30, wanda ya cika cika ka'idodin ISO C11 da POSIX.1-2008. Sabuwar sakin ya haɗa da gyarawa daga masu haɓakawa 48.

Daga waɗanda aka aiwatar a cikin Glibc 2.30 ingantawa zaku iya lura:

  • Mai haɗawa mai ƙarfi yana ba da goyan baya ga zaɓin "--preload" don ƙaddamar da abubuwan da aka raba (mai kama da yanayin yanayin LD_PRELOAD);
  • Ƙara aikin twalk_r, mai kama da aikin tafiyar da ya riga ya kasance, amma yana ba ku damar ƙaddamar da ƙarin hujja zuwa aikin da aka bayar;
  • Sabbin ayyuka getdents64, gettid da tgkill an ƙara su don Linux;
  • Tabbatar cewa sarrafa ƙwaƙwalwar ajiya yana aiki malloc, calloc, realloc, reallocarray, valloc, pvalloc, memalign, da posix_memalign fita tare da lambar kuskure lokacin da girman abu ya wuce ƙimar PTRDIFF_MAX. Wannan canjin yana guje wa halayen da ba a bayyana ba yayin da sakamakon magudin manuniya ya haifar da ambaliya na nau'in ptrdiff_t;
  • Ƙara ayyukan POSIX pthread_cond_clockwait, pthread_mutex_clocklock,
    pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock da sem_clockwait, kwatankwacin “lokacin da aka yi” daidai, amma kuma da karɓar ma'aunin clockid_t don zaɓar mai ƙidayar lokaci;

  • An sabunta bayanan ɓoye, bayanin nau'in hali, da teburan tarjama don tallafawa ƙayyadaddun Unicode 12.1.0;
  • Laburaren librt ba ya ba da clock_gettime, clock_getres, clock_settime, clock_getcpuclockid, da clock_nanosleep ayyuka don sababbin aikace-aikace, amma a maimakon haka ta atomatik yana amfani da ma'anar a libc;
  • An cire zaɓin "inet6" daga /etc/resolv.conf. An cire tutocin RES_USE_INET6, RES_INSECURE1 da RES_INSECURE2 daga resolv.h;
  • Lokacin zayyana zaɓin "--enable-bind-now", an ɗaure shirye-shiryen da aka shigar yanzu ta amfani da tutar BIND_NOW;
  • Fayil na musamman na Linux-sys/sysctl.h da aikin sysctl an soke su, kuma aikace-aikace yakamata suyi amfani da /proc pseudo-FS maimakon;
  • Gina Glibc yanzu yana buƙatar GCC 6.2 ko sabo (kowane mai tarawa ana iya amfani da shi don gina aikace-aikace);
  • Kafaffen rauni CVE-2019-7309 a cikin aiwatar da aikin memcmp don m x32 subarchitecture (kada a rikita batun tare da x86 IA-32), sakamakon abin da aikin zai iya mayar da darajar 0 ba daidai ba don igiyoyin da ba su dace ba;
  • Kafaffen rauni CVE-2019-9169, wanda zai iya sa a karanta bayanai daga wani yanki a waje da iyakokin buffer lokacin da aka sarrafa wasu maganganu na yau da kullum.

source: budenet.ru

Add a comment