Glibc 2.34 System Library Tso tawm

Tom qab rau lub hlis ntawm txoj kev loj hlob, GNU C Library (glibc) 2.34 system tsev qiv ntawv tau raug tso tawm, uas ua raws li cov kev cai ntawm ISO C11 thiab POSIX.1-2017 cov qauv. Qhov kev tso tawm tshiab suav nrog kho los ntawm 66 tus tsim tawm.

Qee qhov kev txhim kho tau siv hauv Glibc 2.34 suav nrog:

  • Lub libpthread, libdl, libutil thiab libanl cov tsev qiv ntawv tau muab tso rau hauv cov qauv libc tseem ceeb, kev siv lawv cov kev ua haujlwm hauv cov ntawv thov tsis tas yuav txuas ntxiv siv cov chij -lpthread, -ldl, -lutil thiab -lanl. Kev npaj tau npaj rau kev sib koom ua ke ntawm libresolv rau hauv libc. Kev koom ua ke yuav tso cai rau cov txheej txheem hloov tshiab glibc tsis sib haum thiab yuav ua kom yooj yim rau kev siv sijhawm. Stub cov tsev qiv ntawv yog muab los muab rov qab sib raug zoo nrog cov ntawv thov tsim nrog cov laus dua ntawm glibc. Vim muaj kev nthuav dav ntawm cov qauv thiab kev ua haujlwm tau muab hauv glibc, teeb meem tuaj yeem tshwm sim hauv cov ntawv thov uas muaj kev sib tshuam ntawm cov npe nrog cov tsev qiv ntawv uas tsis tau siv yav dhau los libpthread, libdl, libutil, libresolv thiab libanl.
  • Muab lub peev xwm los siv 64-ntsis time_t hom hauv kev teeb tsa uas ib txwm siv hom 32-ntsis time_t. Hauv cov kev teeb tsa zoo li no, piv txwv li ntawm x86 systems, lub neej ntawd tseem yog 32-ntsis time_t, tab sis tam sim no tus cwj pwm no tuaj yeem hloov pauv siv "_TIME_BITS" macro. Cov yam ntxwv no tsuas yog muaj nyob rau hauv cov tshuab nrog tsawg kawg Linux ntsiav version 5.1.
  • Ntxiv rau _Fork muaj nuj nqi, hloov pauv rau txoj haujlwm nkhaus uas ua tau raws li qhov yuav tsum tau ua ntawm "async-signal-safe", i.e. tso cai rau kev hu xov tooj muaj kev nyab xeeb los ntawm cov teeb liab handlers. Thaum lub sijhawm ua tiav ntawm _Fork, ib puag ncig tsawg yog tsim uas txaus los hu rau cov haujlwm hauv cov teeb liab tuav xws li nce thiab execve yam tsis muaj cov yam ntxwv uas yuav hloov cov xauv lossis lub xeev sab hauv. Lub _Fork hu yuav raug txhais nyob rau hauv ib tug yav tom ntej version ntawm tus qauv POSIX, tab sis rau tam sim no nws yog suav nrog GNU extension.
  • Rau Linux platform, execveat muaj nuj nqi tau siv, uas tso cai rau koj los khiav cov ntaub ntawv executable los ntawm qhib cov ntaub ntawv piav qhia. Txoj haujlwm tshiab kuj tseem siv tau rau hauv kev ua raws li fexecve hu, uas tsis tas yuav tsum tau mounted pseudo-FS / proc thaum pib.
  • Ntxiv cov timespec_getres muaj nuj nqi, txhais hauv cov qauv ISO C2X tus qauv, uas txuas ntxiv rau timespec_get muaj nuj nqi nrog lub peev xwm zoo ib yam li POSIX clock_getres muaj nuj nqi.
  • Ntxiv close_range() muaj nuj nqi, uas tso cai rau ib tug txheej txheem kaw ib tug tag nrho ntau yam ntawm qhib cov ntaub ntawv descriptors ib zaug. Cov haujlwm muaj nyob rau ntawm cov tshuab nrog Linux ntsiav ntawm tsawg kawg version 5.9.
  • Ntxiv functions closefrom thiab posix_spawn_file_actions_addclosefrom_np, tso cai rau koj kaw tag nrho cov ntaub ntawv descriptors ib zaug, tus naj npawb ntawm uas ntau dua los yog sib npaug rau tus nqi teev.
  • Hauv "_DYNAMIC_STACK_SIZE_SOURCE" thiab "_GNU_SOURCE" hom, PTHREAD_STACK_MIN, MINSIGSTKSZ, thiab SIGSTKSZ tsis tas li lawm, tso cai rau kev txhawb nqa rau dynamically sized register sets xws li cov uas tau muab rau hauv ARM SVE extension.
  • Tus linker siv qhov kev xaiv "--list-diagnostics" los tso saib cov ntaub ntawv ntsig txog IFUNC (indirect function) txhais cov haujlwm thiab glibc-hwcaps subdirectory xaiv.
  • Lub macro __STDC_WANT_IEC_60559_EXT__ tau raug coj los siv, tsim los xyuas qhov muaj cov haujlwm tau teev tseg hauv Annex F ntawm ISO C2X specification.
  • Rau powerpc64 * systems, qhov "--disable-scv" kev xaiv tau raug siv, uas tso cai rau koj los tsim glibc yam tsis tau txhawb nqa cov lus qhia scv.
  • Tsuas yog qhov tsawg kawg nkaus ntawm cov tub ntxhais gconv modules tshuav nyob rau hauv cov ntaub ntawv gconv-modules, thiab tus so yog tsiv mus rau ib qho ntaub ntawv ntxiv gconv-modules-extra.conf, nyob rau hauv gconv-modules.d directory.
  • Rau Linux platform, glibc.pthread.stack_cache_size parameter yog siv, uas tuaj yeem siv los teeb tsa qhov loj ntawm pthread pawg cache.
  • Lub inet_neta muaj nuj nqi los ntawm cov ntaub ntawv header tau raug deprecated , nrog rau ntau yam tsis tshua siv zog los ntawm (dn_count_labels, fp_nquery, fp_query, fp_resstat, hostalias, loc_aton, loc_ntoa, p_cdname, p_cdnname, p_class, p_fqname, p_fqnname, p_option, p_query, p_rcode, p_time, put_namesourt, resquerias, resume, resume, resume, p_host, resume, resume, rcode, rcode, p_time, put_namesourt, resume , res_queriesmatch, rov_randomid, sym_ntop, sym_ntos, sym_ston) and (ns_datetosecs, ns_format_ttl, ns_makecanon, ns_parse_ttl, ns_samedomain, ns_samename, ns_sprintrr, ns_sprintrrf, ns_subdomain). Hloov chaw ntawm cov haujlwm no, nws raug nquahu kom siv cov tsev qiv ntawv cais rau kev ua haujlwm nrog DNS.
  • The functions pthread_mutex_consistent_np, thread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np thiab pthread_yield tau raug deprecated thiab pthread_mutex_consistent, thread_mutexattr_getrobust, hread_mutexattr thiab yuav tsum tau siv.
  • Tsis siv cov cim txuas los khi cov khoom sib koom ua ke rau Glibc version. Cov khoom zoo li no tau teeb tsa tam sim no raws li yog (xws li libc.so.6 tam sim no yog cov ntaub ntawv es tsis yog qhov txuas rau libc-2.34.so).
  • Los ntawm lub neej ntawd, debugging nta hauv malloc yog neeg xiam, xws li MALLOC_CHECK_ (glibc.malloc.check), mtrace() thiab mcheck(), uas tau tsiv mus rau ib lub tsev qiv ntawv cais libc_malloc_debug.so, rau hauv uas cov haujlwm tsis siv lawm malloc_get_state thiab malloc_set_state kuj muaj. tau tsiv.
  • Ntawm Linux, ua haujlwm zoo li shm_open thiab sem_open tam sim no xav tau cov khoom siv / dev / shm ua haujlwm.
  • Vulnerabilities fixed:
    • CVE-2021-27645: Cov txheej txheem nscd (nameserver caching daemon) poob vim muaj kev hu ob npaug rau cov haujlwm pub dawb thaum ua tshwj xeeb crafted netgroup thov.
    • CVE-2021-33574: Nkag mus rau thaj chaw nco tau tso tseg (siv-tom qab-dawb) hauv mq_notify muaj nuj nqi thaum siv SIGEV_THREAD cov ntawv ceeb toom hom nrog cov xov xov uas muaj lwm qhov CPU affinity npog tau teeb tsa. Qhov teeb meem tuaj yeem ua rau muaj kev sib tsoo, tab sis lwm txoj kev tawm tsam tsis tuaj yeem txiav tawm.
    • CVE-2021-35942: Ib qho parameter loj dhau hauv wordexp muaj nuj nqi tuaj yeem ua rau daim ntawv thov poob.

Tau qhov twg los: opennet.ru

Ntxiv ib saib