{"id":91038,"date":"2020-08-07T13:42:21","date_gmt":"2020-08-07T11:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemnoj-biblioteki-glibc-2-32"},"modified":"2020-08-07T13:42:21","modified_gmt":"2020-08-07T11:42:21","slug":"vypusk-sistemnoj-biblioteki-glibc-2-32","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","title":{"rendered":"Lansarea bibliotecii de sistem Glibc 2.32","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dup\u0103 \u0219ase luni de dezvoltare <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceware.org\/pipermail\/libc-announce\/2020\/000029.html\">publicat<\/a><\/noindex> lansarea bibliotecii de sistem <noindex><a rel=\"nofollow\" href=\"http:\/\/ftp.gnu.org\/gnu\/glibc\/\">GNU C Library<\/a><\/noindex> (glibc) <noindex><a rel=\"nofollow\" href=\"http:\/\/sourceware.org\/glibc\/wiki\/Release\/2.32\">2.32<\/a><\/noindex>, care respect\u0103 pe deplin standardele ISO C11 \u0219i POSIX.1-2017. Noul release include corecturi de la 67 de dezvoltatori. <\/p>\n<p>Printre modific\u0103rile implementate \u00een Glibc 2.32 <noindex><a rel=\"nofollow\" href=\"http:\/\/sourceware.org\/git\/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD\">\u00eembun\u0103t\u0103\u021biri<\/a><\/noindex> se pot men\u021biona:\n<\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suport pentru procesoarele Synopsys ARC HS (ARCv2 ISA). Portarea necesit\u0103 cel pu\u021bin binutils 2.32, gcc 8.3 \u0219i kernel Linux 5.1. Sunt acceptate trei variante ABI arc-linux-gnu, arc-linux-gnuhf \u0219i arceb-linux-gnu (big-endian);\n<li class=\"l\"> A fost implementat\u0103 \u00eenc\u0103rcarea modulelor de audit, specificate \u00een sec\u021biunile DT_AUDIT \u0219i<br \/>\n  DT_DEPAUDIT ale fi\u0219ierului executabil.<\/p>\n<li class=\"l\"> Pentru arhitectura powerpc64le a fost ad\u0103ugat suport pentru tipul IEEE128 long double, activat la compilare cu op\u021biunea &#171;-mabi=ieeelongdouble&#187;.\n<li class=\"l\"> Unele API-uri sunt annotate folosind atributul GCC &#8216;access&#8217;, care permite generarea unor avertiz\u0103ri de calitate superioar\u0103 \u00een timpul compil\u0103rii \u00een GCC 10 pentru a identifica posibilele dep\u0103\u0219iri ale bufferelor \u0219i alte variante de dep\u0103\u0219ire a limitelor admise.\n<li class=\"l\"> Pentru sistemele Linux au fost implementate func\u021biile pthread_attr_setsigmask_np \u0219i<br \/>\n  pthread_attr_getsigmask_np, care permit aplica\u021biei s\u0103 specifice o masc\u0103 de semnal pentru thread-urile create cu pthread_create.<\/p>\n<li class=\"l\"> Datele de codare, informa\u021biile despre tipurile de caractere \u0219i tabelele de transliterare au fost actualizate pentru a sus\u021bine specifica\u021bia Unicode 13.0.0;\n<li class=\"l\"> A fost ad\u0103ugat un nou fi\u0219ier de antet &lt;sys\/single_threaded.h&gt;, care define\u0219te variabila __libc_single_threaded, care poate fi folosit\u0103 \u00een aplica\u021bii pentru optimiz\u0103ri monothreading.\n<li class=\"l\"> Au fost ad\u0103ugate func\u021biile sigabbrev_np \u0219i sigdescr_np, care returneaz\u0103 denumirea abreviat\u0103 \u0219i descrierea semnalului (de exemplu, &#171;HUP&#187; \u0219i Hangup&#187; pentru SIGHUP).\n<li class=\"l\"> Au fost ad\u0103ugate func\u021biile strerrorname_np \u0219i strerrordesc_np, care returneaz\u0103 numele \u0219i descrierea erorii (de exemplu, &#171;EINVAL&#187; \u0219i &#171;Argument invalid&#187; pentru EINVAL).\n<li class=\"l\"> Pentru platforma ARM64 a fost ad\u0103ugat flag-ul &#171;&#8212;enable-standard-branch-protection&#187; (sau -mbranch-protection=standard \u00een GCC), activ\u00e2nd mecanismul ARMv8.5-BTI (Branch Target Indicator) pentru a proteja execu\u021bia seturilor de instruc\u021biuni, la care nu ar trebui s\u0103 se efectueze salturi \u00een cadrul ramific\u0103rii. Bloca\u021bi salturile c\u0103tre zone arbitrare de cod pentru a contracara generarea gadget-urilor \u00een exploitatele care folosesc tehnici de programare orientate pe returnare (ROP &#8212; Return-Oriented Programming, atacatorul nu \u00eencearc\u0103 s\u0103 \u00ee\u0219i plaseze codul \u00een memorie, ci lucreaz\u0103 cu por\u021bii existente de instruc\u021biuni de ma\u0219in\u0103, care se termin\u0103 cu instruc\u021biunea de returnare, din care se creeaz\u0103 o succesiune de apeluri pentru a ob\u021bine func\u021bionalitatea dorit\u0103).\n<li class=\"l\"> A fost realizat\u0103 o cur\u0103\u021bare extensiv\u0103 a func\u021bionalit\u0103\u021bilor \u00eenvechite, inclusiv op\u021biunile &#171;&#8212;enable-obsolete-rpc&#187; \u0219i &#171;&#8212;enable-obsolete-nsl&#187;, fi\u0219ierul header &lt;sys\/sysctl.h&gt;. Au fost declarate \u00eenvechite func\u021biile sstk, siginterrupt, sigpause, sighold, sigrelse, sigignore \u0219i sigset, array-urile sys_siglist, _sys_siglist \u0219i sys_sigabbrev, simbolurile sys_errlist, _sys_errlist, sys_nerr \u0219i _sys_nerr, modulul NSS hesiod.\n<li class=\"l\"> ldconfig, \u00een mod implicit, a fost mutat s\u0103 foloseasc\u0103 noul format ld.so.cache, care este suportat \u00een glibc de aproape 20 de ani.\n<li class=\"l\"> S-au remediat vulnerabilit\u0103\u021bile:\n<ul>\n<li class=\"l\"> CVE-2016-10228 &#8212; bucl\u0103 infinit\u0103 \u00een utilitarul iconv, care apare c\u00e2nd este executat cu op\u021biunea &#171;-c&#187;, \u00een cazul proces\u0103rii unor date multibayt incorecte.\n<li class=\"l\"> CVE-2020-10029 &#8212; deteriorarea stivei la apelarea func\u021biilor trigonometrice cu un argument pseudo-zero.\n<li class=\"l\"> CVE-2020-1752 &#8212; accesarea unei zone de memorie dup\u0103 ce a fost eliberat\u0103 (use-after-free) \u00een func\u021bia glob c\u00e2nd se dezv\u0103luie o referin\u021b\u0103 c\u0103tre directorul home (&#171;~user&#187;) \u00een c\u0103i.\n<li class=\"l\"> CVE-2020-6096 &#8212; procesare incorect\u0103 pe platforma ARMv7 a valorilor negative ale parametrului \u00een memcpy() \u0219i memmove(), care determin\u0103 dimensiunea zonei copiate. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53003\">Permite<\/a><\/noindex> organizarea execut\u0103rii codului \u00een cadrul func\u021biilor memcpy() \u0219i memmove() pentru datele prezentate \u00eentr-un anumit mod. Este remarcabil c\u0103 problema <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53371\">a r\u0103mas<\/a><\/noindex>  nerezolvat\u0103 aproape dou\u0103 luni de la publicarea informa\u021biilor \u0219i cinci luni de la notificarea dezvoltatorilor Glibc.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53504\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 GNU C Library (glibc) 2.32, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 ISO C11 \u0438 POSIX.1-2017. \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 67 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0418\u0437 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 Glibc 2.32 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c: \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Synopsys ARC HS (ARCv2 ISA). \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u0440\u0442\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c binutils 2.32, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91038","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Glibc 2.32 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-07T11:42:21+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-07T11:42:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea bibliotecii de sistem Glibc 2.32 | ProHoster","description":"Dup\u0103 \u0219ase luni de dezvoltare, a fost publicat release-ul bibliotecii de sistem","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Glibc 2.32 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemnoj-biblioteki-glibc-2-32","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-07T11:42:21+00:00","article:modified_time":"2020-08-07T11:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91038","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:35:24","updated":"2022-09-29 18:50:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=91038"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91038\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=91038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=91038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=91038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}