Glibc 2.35 System Library Tso tawm

Tom qab rau lub hlis ntawm txoj kev loj hlob, GNU C Library (glibc) 2.35 system tsev qiv ntawv tau raug tso tawm, uas ua raws li cov kev cai ntawm ISO C11 thiab POSIX.1-2017 cov qauv. Qhov kev tso tawm tshiab suav nrog kho los ntawm 66 tus tsim tawm.

Qee qhov kev txhim kho tau siv hauv Glibc 2.35 suav nrog:

  • Ntxiv kev txhawb nqa rau "C.UTF-8" thaj chaw, uas suav nrog cov cai sib sau ua ke rau txhua tus lej Unicode, tab sis kom txuag tau qhov chaw tsuas yog siv ASCII ntau yam hauv fnmatch, regexec thiab regcomp functions. Lub zos yog hais txog 400 KB, ntawm uas 346 KB yog LC_CTYPE cov ntaub ntawv rau Unicode, thiab yuav tsum tau ib tug cais installation (tsis ua rau Glibc).
  • Cov ntaub ntawv encoding, cov ntaub ntawv hom cim, thiab cov lus txhais lus tau hloov kho los txhawb Unicode 14.0.0 specification.
  • IN Thiab kev ua haujlwm thiab macros raug siv los ua kom pom qhov tshwm sim rau hom nqaim: fsqrt, fsqrtl, dsqrtl, ffma, ffmal, dfmal, fMsqrtfN, fMsqrtfNx, fMxsqrtfN, fMxsqrtfNx, fMfmafN, fMfMfxmf Cov haujlwm tau piav qhia hauv qhov tshwj xeeb TS 18661-1: 2014, TS 18661-3: 2015 thiab ntxiv rau daim qauv ntawm ISO C2X C tus qauv yav tom ntej.
  • IN Thiab Kev ua haujlwm thiab macro rau kev nrhiav qhov tsawg kawg nkaus thiab siab tshaj plaws ntawm cov lej ntab nrog cov hom ntab, ntev ob npaug, _FloatN thiab _FloatNx, tau piav qhia hauv IEEE 754-2019 specification thiab ntxiv rau cov qauv ntawm yav tom ntej ISO C2X C tus qauv: fmaximum, fmaximum_num , fmaximum_mag, fmaximum_mag_num, fminimum, fminimum_num, fminimum_mag, fminimum_mag_num.
  • IN Ntxiv qhov tsis tu ncua rau ib tus lej ntsuas ntab ntab: M_Ef, M_LOG2Ef, M_LOG10Ef, M_LN2f, M_LN10f, M_PIf, M_PI_2f, M_PI_4f, M_1_PIf, M_2_PIf, M_2_SQRTPIf, M_SQRT2f, M_SQRT1f
  • Rau kev ua haujlwm exp10 hauv cov ntaub ntawv header Ntxiv cov macros sib raug zoo uas tsis khi rau qee hom.
  • IN ntxiv rau _PRINTF_NAN_LEN_MAX macro tau npaj tseg hauv daim qauv ISO C2X.
  • Ntxiv "%b" thiab "%B" hom ntawv tshwj xeeb rau cov tsev neeg printf ntawm kev ua haujlwm los luam cov lej hauv binary sawv cev.
  • Lub dynamic linking system siv ib tug tshiab DSO sorting algorithm uas siv qhov tob-thawj nrhiav (DFS) los daws teeb meem kev ua tau zoo thaum tuav looped dependencies. Txhawm rau xaiv DSO sorting algorithm, glibc.rtld.dynamic_sort parameter yog npaj, uas tuaj yeem teem rau "1" kom rov qab mus rau qhov qub algorithm.
  • ABI tau ntxiv kev txhawb nqa rau txoj haujlwm tshiab '__memcmpeq', siv los ntawm compilers los txhim kho kev siv 'memcmp' yog tias tus nqi xa rov qab los ntawm txoj haujlwm no tsuas yog siv los txheeb xyuas qhov ua tiav ntawm kev ua haujlwm.
  • Ntxiv kev txhawb nqa rau kev sau npe cov xov uas siv rseq (restartable sequences) system hu tau muab txij li Linux ntsiav 4.18. rseq system hu tso cai rau koj los npaj cov kev ua tiav tas mus li ntawm ib pawg ntawm cov lus qhia uas tsis cuam tshuam thiab lees paub qhov tshwm sim los ntawm cov lus qhia kawg hauv pab pawg. Qhov tseem ceeb, nws muab txoj hauv kev rau kev ua kom nrawm nrawm ntawm kev ua haujlwm uas, yog tias cuam tshuam los ntawm lwm cov xov, raug ntxuav thiab sim dua.
  • Ntxiv symlink /usr/bin/ld.so.
  • Lub neej ntawd los ua ke ntawm tag nrho cov executable cov ntaub ntawv ntawm embedded cov kev pab cuam thiab cov kev xeem teev nyob rau hauv PIE (txoj hauj lwm ywj siab executable) hom yog muab. Txhawm rau lov tes taw tus cwj pwm no, qhov kev xaiv "--disable-default-pie" yog muab.
  • Rau Linux, qhov teeb tsa glibc.malloc.hugetlb tau ntxiv kom tso cai rau kev siv malloc hloov mus siv madvise system hu nrog MADV_HUGEPAGE chij rau mmap thiab sbrk, lossis ncaj qha siv cov nplooj ntawv nco loj los ntawm kev qhia MAP_HUGETLB chij hauv mmap hu. Hauv thawj kis, qhov kev ua tau zoo tuaj yeem ua tiav yog tias Transparent Huge Pages tau siv rau hauv hom madvise, thiab nyob rau hauv rooj plaub thib ob, muaj peev xwm siv cov nplooj ntawv loj-tso tseg.
  • Ntxiv _dl_find_object muaj nuj nqi uas tuaj yeem siv los ntxiv hu rau pawg unwind cov ntaub ntawv.
  • Ntxiv kev txhawb nqa rau OpenRISC architecture (lossis 1k-linux-gnu) hauv hom mos-float. Qhov chaw nres nkoj xav tau binutils 2.35, GCC 11, thiab Linux ntsiav 5.4.
  • Ntxiv ib tus chij tsim "--with-rtld-early-cflags", uas tuaj yeem siv los qhia cov chij ntxiv uas siv thaum tsim cov cai pib rau kev sib txuas.
  • Rau Linux platform, epoll_pwait2 muaj nuj nqi tau ntxiv, uas txawv ntawm epoll_wait los ntawm kev qhia lub sijhawm nrog nanosecond precision.
  • Ntxiv posix_spawn_file_actions_addtcsetpgrp_np muaj nuj nqi kom tshem tawm haiv neeg tej yam kev mob thaum teeb tsa lub davhlau ya nyob twg rau cov txheej txheem tshiab.
  • Rau cov ntawv sau ua ke nrog Glibc thiab GCC 12+, "_FORTIFY_SOURCE = 3" hom kev tiv thaiv yog siv, uas pom tau tias muaj peev xwm tsis dhau thaum ua haujlwm txoj hlua uas tau teev tseg hauv cov ntaub ntawv string.h header. Qhov txawv ntawm "_FORTIFY_SOURCE = 2" hom los mus rau kev kuaj ntxiv, uas tuaj yeem ua rau txo qis kev ua haujlwm.
  • Kev them nyiaj yug rau Intel MPX (Kev Tiv Thaiv Kev Tiv Thaiv Txuas Ntxiv), siv los txheeb xyuas cov cim cim cim cia, tau raug txiav tawm (cov thev naus laus zis no tsis tau nthuav dav thiab twb tau raug tshem tawm ntawm GCC thiab LLVM).
  • Lub tshuab txuas ua ntej thiab nws qhov cuam tshuam ib puag ncig hloov pauv LD_TRACE_PRELINKING thiab LD_USE_LOAD_BIAS tau raug tshem tawm thiab yuav raug tshem tawm yav tom ntej.

    Vulnerabilities fixed:

    • CVE-2022-23218, CVE-2022-23219 - Tsis pub dhau hauv cov haujlwm svcunix_create thiab clnt_create, tshwm sim los ntawm kev luam cov ntsiab lus ntawm lub npe filename parameter mus rau pawg yam tsis tau kuaj xyuas qhov loj ntawm cov ntaub ntawv theej. Rau cov ntawv thov tsim tsis muaj kev tiv thaiv pawg thiab siv "unix" raws tu qauv, qhov muaj qhov tsis zoo tuaj yeem ua rau kev ua txhaum cai ntawm tus neeg tawm tsam thaum ua cov npe ntev heev.
    • CVE-2021-3998 yog qhov tsis zoo hauv realpath() ua haujlwm vim qhov rov qab los, raws li qee qhov xwm txheej, ntawm tus nqi tsis raug uas muaj cov ntaub ntawv tsis huv los ntawm pawg. Rau qhov kev pab cuam SUID-root fusermount, qhov tsis zoo tuaj yeem siv tau kom tau txais cov ntaub ntawv rhiab los ntawm cov txheej txheem nco, piv txwv li, kom tau txais cov ntaub ntawv hais txog tus taw tes.
    • CVE-2021-3999 - Ib leeg-byte tsis muaj kev cuam tshuam hauv getcwd() muaj nuj nqi. Qhov teeb meem yog tshwm sim los ntawm kab laum uas muaj txij li xyoo 1995. Txhawm rau ua kom dhau, tsuas yog hu rau chdir() ntawm "/" directory nyob rau hauv ib qho chaw tshwj xeeb mount point namespace.

    Tau qhov twg los: opennet.ru

Ntxiv ib saib