-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8dd7cc3306 2026-10-01 01:11:24.198714+00:00 --------------------------------------------------------------------------------
Name : glibc Product : Fedora 44 Version : 2.43 Release : 9.fc44 URL : http://www.gnu.org/software/glibc/ Summary : The GNU libc libraries Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function. -------------------------------------------------------------------------------- Update Information: Auto-sync with upstream branch release/2.43/master Upstream commit: 9cda6fc96abd035d9cbe68482138d4a78a51a7d5 stdlib: Don't call clearenv from __libc_setenv_freemem (Mark Wielaard) resolv: Fix assertion failure on search list truncation [BZ 31026, CVE-2026-8674] (Adhemerval Zanella) zic: keep needed last transition to new type (bug 34618) (Paul Eggert) nptl: Skip pretty-printer tests without python3 [BZ #34507] (Hemanth Kumar M D) hesiod: use booleans in parser macro calls (Adhemerval Zanella) hesiod: fix swapped arguments in service parser (Adhemerval Zanella) nss_files: use booleans in parser macro calls (Andreas Schwab) nss_files: fix swapped arguments in service parser (Andreas Schwab) libio: Add test for fopen with an empty ", ccs=" value [BZ #34574] (Shamil Abdulaev) libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling (Dongkyun Son) alpha: expect test-float32x-float64-div to fail (Matt Turner) alpha: add the denormal trap enable bit to FE_NOMASK_ENV (Matt Turner) alpha: Fix stack alignment in makecontext (Magnus Lindholm) alpha: fix setrlimit compat symbol for negative rlim values besides -1 (Matt Turner) iconvdata: Test case for bug 34556, bug 34568 (Florian Weimer) iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) (Florian Weimer) iconvdata: SHIFT_JISX0213 decoding lacks pending character reset (CVE-2026-77117) (Florian Weimer) stdlib: Fix right-justification in strfmon (bug 34510, CVE-2026-19499) (Florian Weimer) posix: Remove unnecessary overflow check in wordexp (BZ 34090) (Adhemerval Zanella) m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c (bug 34559) (Andreas Schwab) misc: Fix out-of-bounds array write in tdelete (bug 34506) (Florian Weimer) malloc: Show hugetlb tunable default in --list-tunables (Wilco Dijkstra) m68k: Fix fmod/fmodf infinite recursion (BZ 34508) (Adhemerval Zanella) posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368) (Adhemerval Zanella) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Frédéric Bérat <[email protected]> - 2.43-9 - Auto-sync with upstream branch release/2.43/master, commit 9cda6fc96abd035d9cbe68482138d4a78a51a7d5: - stdlib: Don't call clearenv from __libc_setenv_freemem (Mark Wielaard) - resolv: Fix assertion failure on search list truncation [BZ 31026, CVE-2026-8674] (Adhemerval Zanella) - zic: keep needed last transition to new type (bug 34618) (Paul Eggert) - nptl: Skip pretty-printer tests without python3 [BZ #34507] (Hemanth Kumar M D) - hesiod: use booleans in parser macro calls (Adhemerval Zanella) - hesiod: fix swapped arguments in service parser (Adhemerval Zanella) - nss_files: use booleans in parser macro calls (Andreas Schwab) - nss_files: fix swapped arguments in service parser (Andreas Schwab) - libio: Add test for fopen with an empty ", ccs=" value [BZ #34574] (Shamil Abdulaev) - libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling (Dongkyun Son) - alpha: expect test-float32x-float64-div to fail (Matt Turner) - alpha: add the denormal trap enable bit to FE_NOMASK_ENV (Matt Turner) - alpha: Fix stack alignment in makecontext (Magnus Lindholm) - alpha: fix setrlimit compat symbol for negative rlim values besides -1 (Matt Turner) - iconvdata: Test case for bug 34556, bug 34568 (Florian Weimer) - iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489) (Florian Weimer) - iconvdata: SHIFT_JISX0213 decoding lacks pending character reset (CVE-2026-77117) (Florian Weimer) - stdlib: Fix right-justification in strfmon (bug 34510, CVE-2026-19499) (Florian Weimer) - posix: Remove unnecessary overflow check in wordexp (BZ 34090) (Adhemerval Zanella) - m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c (bug 34559) (Andreas Schwab) - misc: Fix out-of-bounds array write in tdelete (bug 34506) (Florian Weimer) - malloc: Show hugetlb tunable default in --list-tunables (Wilco Dijkstra) - m68k: Fix fmod/fmodf infinite recursion (BZ 34508) (Adhemerval Zanella) - posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368) (Adhemerval Zanella) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8dd7cc3306' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
-- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
