Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

glibc-2.38-150600.7.1 RPM for s390x

From OpenSuSE Leap 15.6 for s390x

Name: glibc Distribution: SUSE Linux Enterprise 15
Version: 2.38 Vendor: SUSE LLC <https://www.suse.com/>
Release: 150600.7.1 Build date: Fri Mar 15 22:18:55 2024
Group: System/Libraries Build host: s390zl35
Size: 5047693 Source RPM: glibc-2.38-150600.7.1.src.rpm
Packager: https://www.suse.com/
Url: https://www.gnu.org/software/libc/libc.html
Summary: Standard Shared Libraries (from the GNU C Library)
The GNU C Library provides the most important standard libraries used
by nearly all programs: the standard C library, the standard math
library, and the POSIX thread library. A system is not functional
without these libraries.

Provides

Requires

License

GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.1-or-later WITH GCC-exception-2.0

Changelog

* Mon Mar 11 2024 schwab@suse.de
  - duplocale-global-locale.patch: duplocale: protect use of global locale
    (bsc#1220441, BZ #23970)
* Mon Feb 26 2024 schwab@suse.de
  - s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
    [#31402])
* Wed Feb 07 2024 schwab@suse.de
  - Add libnsl1 to baselibs.conf (bsc#1219640)
* Wed Jan 31 2024 schwab@suse.de
  - syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
    __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
    bsc#1218863, bsc#1218867, bsc#1218868)
  - qsort-invalid-cmp.patch: qsort: handle degenerated compare function
    (bsc#1218866)
* Mon Jan 29 2024 schwab@suse.de
  - Change minimum GCC to 13
* Tue Jan 23 2024 schwab@suse.de
  - Split off libnsl.so.1 into a separate package
* Tue Jan 02 2024 schwab@suse.de
  - sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
    expected to exist (BZ #30789)
  - ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
    8ee878592c
  - tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
    (BZ #29039)
  - getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
    EAI_MEMORY (bsc#1217589, BZ #31163)
  - libio-wdo-write.patch: libio: Check remaining buffer size in
    _IO_wdo_write (BZ #31183)
* Tue Dec 05 2023 schwab@suse.de
  - aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
    (bsc#1217445, BZ #31113)
* Mon Dec 04 2023 schwab@suse.de
  - Remove systemd from shadow and gshadow lookups (bsc#1217220)
* Mon Oct 23 2023 schwab@suse.de
  - gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)
* Wed Oct 18 2023 schwab@suse.de
  - dtors-reverse-ctor-order.patch: Remove, has been reverted
* Tue Oct 17 2023 schwab@suse.de
  - Avoid use of SSE in i586 build
* Mon Oct 09 2023 schwab@suse.de
  - Add systemd also to gshadow lookups (jsc#PED-5188)
  - For SLE continue to use nsswitch.conf without systemd
* Wed Oct 04 2023 schwab@suse.de
  - setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in
    setxid binaries
  - tunables-string-parsing.patch: tunables: Terminate if end of input is
    reached (CVE-2023-4911, bsc#1215501)
* Wed Sep 27 2023 schwab@suse.de
  - fstat-implementation.patch: io: Do not implement fstat with fstatat
* Mon Sep 25 2023 schwab@suse.de
  - getaddrinfo-memory-leak.patch: Fix leak in getaddrinfo introduced by the
    fix for CVE-2023-4806 (CVE-2023-5156, bsc#1215714, BZ #30884)
* Mon Sep 18 2023 schwab@suse.de
  - getcanonname-use-after-free.patch: getaddrinfo: Fix use after free in
    getcanonname (CVE-2023-4806, bsc#1215281, BZ #30843)
  - Do not build any cross packages in SLES
* Wed Sep 13 2023 schwab@suse.de
  - no-aaaa-read-overflow.patch: Stack read overflow with large TCP
    responses in no-aaaa mode (CVE-2023-4527, bsc#1215280, BZ #30842)
* Tue Sep 12 2023 schwab@suse.de
  - Add systemd to passwd, group and shadow lookups (jsc#PED-5188)
* Mon Sep 11 2023 schwab@suse.de
  - ppc64-flock-fob64.patch: io: Fix record locking contants for powerpc64
    with __USE_FILE_OFFSET64 (BZ #30804)
  - libio-io-vtables.patch: libio: Fix oversized __io_vtables
  - call-init-proxy-objects.patch: elf: Do not run constructors for proxy
    objects
  - dtors-reverse-ctor-order.patch: elf: Always call destructors in reverse
    constructor order (BZ #30785)
* Tue Sep 05 2023 schwab@suse.de
  - intl-c-utf-8-like-c-locale.patch: intl: Treat C.UTF-8 locale like C
    locale (BZ #16621)
  - glibc-disable-gettext-for-c-utf8.patch: Removed
* Mon Aug 28 2023 rguenther@suse.com
  - Add cross-ppc64le package
* Tue Aug 22 2023 schwab@suse.de
  - posix-memalign-fragmentation.patch: malloc: Enable merging of remainders
    in memalign, remove bin scanning from memalign (BZ #30723)
  - Limit build counter sync to i686 flavor, to reduce needs for rebuilds
* Tue Aug 22 2023 rguenther@suse.com
  - Add cross-s390x package (bsc#1214460)
* Mon Aug 14 2023 schwab@suse.de
  - Require that elf/check-localplt does not fail
  - glibc-2.3.90-langpackdir.diff: add hidden alias for __strcpy_chk
  - cache-amd-legacy.patch: x86: Fix for cache computation on AMD legacy
    cpus
  - cache-intel-shared.patch: x86: Fix incorrect scope of setting
    `shared_per_thread` (BZ# 30745)
* Wed Aug 02 2023 schwab@suse.de
  - Update to glibc 2.38
    * When C2X features are enabled and the base argument is 0 or 2, the
      following functions support binary integers prefixed by 0b or 0B as
      input
    * PRIb*, PRIB* and SCNb* macros from C2X have been added to
      <inttypes.h>.
    * printf-family functions now support the wN format length modifiers for
      arguments of type intN_t, int_leastN_t, uintN_t or uint_leastN_t
      and the wfN format
      length modifiers for arguments of type int_fastN_t or uint_fastN_t, as
      specified in draft ISO C2X
    * A new tunable, glibc.pthread.stack_hugetlb, can be used to disable
      Transparent Huge Pages (THP) in stack allocation at pthread_create
    * Vector math library libmvec support has been added to AArch64
    * The strlcpy and strlcat functions have been added
    * CVE-2023-25139: When the printf family of functions is called with a
      format specifier that uses an <apostrophe> (enable grouping) and a
      minimum width specifier, the resulting output could be larger than
      reasonably expected by a caller that computed a tight bound on the
      buffer size
  - Enable build with _FORTIFY_SOURCE
  - glibc-2.3.90-langpackdir.diff: avoid reference to __strcpy_chk
  - iconv-error-verbosity.patch: iconv: restore verbosity with unrecognized
    encoding names (BZ #30694)
  - printf-grouping.patch, strftime-time64.patch,
    getlogin-no-loginuid.patch, fix-locking-in-_IO_cleanup.patch,
    gshadow-erange-rhandling.patch, system-sigchld-block.patch,
    gmon-buffer-alloc.patch, check-pf-cancel-handler.patch,
    powerpc64-fcntl-lock.patch, realloc-limit-chunk-reuse.patch,
    dl-find-object-return.patch; Removed
  - bsc#1211828
  - bsc#1212819
* Mon Jul 10 2023 schwab@suse.de
  - gshadow-erange-rhandling.patch: gshadow: Matching sgetsgent, sgetsgent_r
    ERANGE handling (BZ #30151)
  - system-sigchld-block.patch: posix: Fix system blocks SIGCHLD erroneously
    (BZ #30163)
  - gmon-buffer-alloc.patch: gmon: Fix allocated buffer overflow
    (CVE-2023-0687, bsc#1207975, BZ #29444)
  - check-pf-cancel-handler.patch: __check_pf: Add a cancellation cleanup
    handler (BZ #20975)
  - powerpc64-fcntl-lock.patch: io: Fix F_GETLK, F_SETLK, and F_SETLKW for
    powerpc64
  - realloc-limit-chunk-reuse.patch: realloc: Limit chunk reuse to only
    growing requests (BZ #30579)
  - dl-find-object-return.patch: elf: _dl_find_object may return 1 during
    early startup (BZ #30515)
* Mon Jul 03 2023 schwab@suse.de
  - Need to build with GCC 12 as minimum
* Thu Jun 29 2023 schwab@suse.de
  - fix-locking-in-_IO_cleanup.patch: Update to final version
* Fri Apr 28 2023 giuliano.belinassi@suse.com
  - ulp-prologue-into-asm-functions.patch: Add support for livepatches in
    ASM written functions (bsc#1210777, bsc#1211726)
* Thu Mar 30 2023 schwab@suse.de
  - getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
    is unset (bsc#1209229, BZ #30235)
* Thu Mar 16 2023 schwab@suse.de
  - Exclude static archives from preparation for live patching (bnc#1208721)
* Wed Feb 01 2023 schwab@suse.de
  - Update to glibc 2.37
    * The getent tool now supports the --no-addrconfig option
    * The dynamic linker no longer loads shared objects from the "tls"
      subdirectories on the library search path or the subdirectory that
      corresponds to the AT_PLATFORM system name, or employs the legacy AT_HWCAP
      search mechanism, which was deprecated in version 2.33
  - printf-grouping.patch: Account for grouping in printf width (BZ #30068)
  - strftime-time64.patch: Use 64-bit time_t interfaces in strftime and
    strptime (BZ #30053)
  - glibcextract-compile-c-snippet.patch, sys-mount-kernel-definition.patch,
    sys-mount-usage.patch, nscd-netlink-cache-invalidation.patch,
    syslog-large-messages.patch, dlmopen-libc-early-init.patch,
    ldd-vdso-dependency.patch, syslog-extra-whitespace.patch,
    errlist-edeadlock.patch, makeflags.patch, get-nscd-addresses.patch,
    x86-64-avx2-string-functions.patch, nscd-aicache.patch,
    dl-debug-bindings.patch, floatn.patch: Removed
  - bsc#1207957
  - bsc#1208358
  - bsc#1212910
* Tue Dec 27 2022 lnussel@suse.com
  - Remove reference to obsolete %usrmerged macro (boo#1206798)
* Thu Dec 15 2022 schwab@suse.de
  - floatn.patch: Update _FloatN header support for C++ in GCC 13
* Thu Nov 10 2022 gmbr3@opensuse.org
  - nscd: Convert to systemd-sysusers
* Wed Oct 26 2022 schwab@suse.de
  - dl-debug-bindings.patch: elf: Reinstate on DL_DEBUG_BINDINGS
    _dl_lookup_symbol_x (bsc#1204710)
* Wed Oct 05 2022 schwab@suse.de
  - get-nscd-addresses.patch: get_nscd_addresses: Fix subscript typos (BZ
    [#29605])
  - x86-64-avx2-string-functions.patch: check for required cpu features in
    AVX2 string functions (BZ #29611)
  - nscd-aicache.patch: nscd: Drop local address tuple variable (BZ #29607)
* Wed Sep 21 2022 schwab@suse.de
  - makeflags.patch: Makerules: fix MAKEFLAGS assignment for upcoming
    make-4.4 (BZ# 29564)
* Thu Sep 08 2022 schwab@suse.de
  - errlist-edeadlock.patch: errlist: add missing entry for EDEADLOCK (BZ
    [#29545])
* Tue Sep 06 2022 schwab@suse.de
  - syslog-large-messages.patch: syslog: Fix large messages (CVE-2022-39046,
    bsc#1203011, BZ #29536)
  - dlmopen-libc-early-init.patch: elf: Call __libc_early_init for reused
    namespaces (BZ #29528)
  - ldd-vdso-dependency.patch: elf: Restore how vDSO dependency is printed
    with LD_TRACE_LOADED_OBJECTS (BZ #29539)
  - syslog-extra-whitespace.patch: syslog: Remove extra whitespace between
    timestamp and message (BZ #29544)
* Wed Aug 24 2022 fvogt@suse.com
  - nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
    invalidation if epoll is used (boo#1199964, BZ #29415)
* Mon Aug 15 2022 schwab@suse.de
  - glibcextract-compile-c-snippet.patch: glibcextract.py: Add
    compile_c_snippet
  - sys-mount-kernel-definition.patch: linux: Mimic kernel definition for
    BLOCK_SIZE
  - sys-mount-usage.patch: linux: Fix sys/mount.h usage with kernel headers
* Tue Aug 02 2022 schwab@suse.de
  - Update to glibc 2.36
    Major new features:
    * Support for DT_RELR relative relocation format has been added to
      glibc
    * On Linux, the pidfd_open, pidfd_getfd, and pidfd_send_signal functions
      have been added
    * On Linux, the process_madvise function has been added
    * On Linux, the process_mrelease function has been added
    * The “no-aaaa” DNS stub resolver option has been added
    * On Linux, the fsopen, fsmount, move_mount, fsconfig, fspick, open_tree,
      and mount_setattr have been added
    * localedef now accepts locale definition files encoded in UTF-8
    * Support for the mbrtoc8 and c8rtomb multibyte/UTF-8 character conversion
      functions has been added per the ISO C2X N2653 and C++20 P0482R6 proposals
    * The functions arc4random, arc4random_buf, and arc4random_uniform have been
      added
    Deprecated and removed features, and other changes affecting compatibility:
    * Support for prelink will be removed in the next release
    * The Linux kernel version check has been removed along with the
      LD_ASSUME_KERNEL environment variable
    * On Linux, The LD_LIBRARY_VERSION environment variable has been removed
  - get-nprocs-sched-uninit-read.patch, get-nprocs-inaccurate.patch,
    strcmp-rtm-fallback.path, pt-load-invalid-hole.patch,
    localedef-ld-monetary.patch, nptl-spurious-eintr.patch,
    strncpy-power9-vsx.patch, nptl-cleanup-async-restore.patch,
    read-chk-cancel.patch, wcrtomb-fortify.patch,
    nptl-cleanup-async-restore-2.patch: Removed
  - CVE-2023-4813, bsc#1215286
  - bsc#1198751
  - bsc#1200334
* Thu Jul 14 2022 schwab@suse.de
  - nptl-cleanup-async-restore-2.patch: nptl: Fix
    ___pthread_unregister_cancel_restore asynchronous restore (bsc#1200093,
    BZ #29214)
* Thu Jun 23 2022 schwab@suse.de
  - read-chk-cancel.patch: debug: make __read_chk a cancellation point
    (bsc#1200682, BZ #29274)
  - wcrtomb-fortify.patch: wcrtomb: Make behavior POSIX compliant
    (bsc#1200688)
* Thu Jun 09 2022 schwab@suse.de
  - Set SUSE_ZNOW=0
* Wed Jun 08 2022 schwab@suse.de
  - strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
    __strncpy_power9 (BZ #29197)
  - nptl-cleanup-async-restore.patch: nptl: Fix __libc_cleanup_pop_restore
    asynchronous restore (bsc#1200093, BZ #29214)
* Tue May 17 2022 schwab@suse.de
  - nptl-spurious-eintr.patch: nptl: Handle spurious EINTR when thread
    cancellation is disabled (BZ #29029)
* Thu May 12 2022 dimstar@opensuse.org
  - Follow the distro default gcc version to build the cross
    bootstrap packages.
* Fri Apr 29 2022 meissner@suse.com
  - switched to https urls
* Mon Feb 28 2022 schwab@suse.de
  - get-nprocs-sched-uninit-read.patch: linux: __get_nprocs_sched: do not
    feed CPU_COUNT_S with garbage (BZ #28850)
  - get-nprocs-inaccurate.patch: linux: fix accuracy of get_nprocs and
    get_nprocs_conf (BZ #28865)
  - strcmp-rtm-fallback.path: x86: Fallback {str|wcs}cmp RTM in the ncmp
    overflow case (BZ #28896)
  - pt-load-invalid-hole.patch: elf: Check invalid hole in PT_LOAD segments
    (BZ #28838)
  - localedef-ld-monetary.patch: localedef: Update LC_MONETARY handling (BZ
    [#28845])
* Thu Feb 03 2022 schwab@suse.de
  - Update to glibc 2.35
    Major new features:
    * Unicode 14.0.0 Support
    * Bump r_version in the debugger interface to 2
    * Support for the C.UTF-8 locale has been added to glibc
    * <math.h> functions that round their results to a narrower type, and
      corresponding <tgmath.h> macros, are added from TS 18661-1:2014, TS
      18661-3:2015 and draft ISO C2X
    * <math.h> functions for floating-point maximum and minimum,
      corresponding to new operations in IEEE 754-2019, and corresponding
      <tgmath.h> macros, are added from draft ISO C2X
    * <math.h> macros for single-precision float constants are added as a
      GNU extension
    * The __STDC_IEC_60559_BFP__ and __STDC_IEC_60559_COMPLEX__ macros are
      predefined as specified in TS 18661-1:2014
    * The exp10 functions in <math.h> now have a corresponding type-generic
      macro in <tgmath.h>
    * The ISO C2X macro _PRINTF_NAN_LEN_MAX has been added to <stdio.h>
    * printf-family functions now support the %b format for output of
      integers in binary, as specified in draft ISO C2X, and the %B variant
      of that format recommended by draft ISO C2X
    * A new DSO sorting algorithm has been added in the dynamic linker that uses
      topological sorting by depth-first search (DFS), solving performance issues
      of the existing sorting algorithm when encountering particular circular
      object dependency cases
    * A new tunable, glibc.rtld.dynamic_sort, can be used to select between
      the two DSO sorting algorithms
    * ABI support for a new function '__memcmpeq'. '__memcmpeq' is meant
      to be used by compilers for optimizing usage of 'memcmp' when its
      return value is only used for its boolean status
    * Support for automatically registering threads with the Linux rseq
      system call has been added
    * A symbolic link to the dynamic linker is now installed under
      /usr/bin/ld.so (or more precisely, '${bindir}/ld.so')
    * All programs and the testsuite in glibc are now built as position independent
      executables (PIE) by default on toolchains and architectures that support it
    * On Linux, a new tunable, glibc.malloc.hugetlb, can be used to
      either make malloc issue madvise plus MADV_HUGEPAGE on mmap and sbrk
      or to use huge pages directly with mmap calls with the MAP_HUGETLB
      flags)
    * The printf family of functions now handles the flagged %#m conversion
      specifier, printing errno as an error constant (similar to strerrorname_np)
    * The function _dl_find_object has been added
    * On Linux, the epoll_pwait2 function has been added
    * The function posix_spawn_file_actions_addtcsetpgrp_np has been added,
      enabling posix_spawn and posix_spawnp to set the controlling terminal in
      the new process in a race free manner
    * Source fortification (_FORTIFY_SOURCE) level 3 is now available for
      applications compiling with glibc and gcc 12 and later
    Deprecated and removed features, and other changes affecting compatibility:
    * On x86-64, the LD_PREFER_MAP_32BIT_EXEC environment variable support
      has been removed since the first PT_LOAD segment is no longer executable
      due to defaulting to -z separate-code
    * The r_version update in the debugger interface makes the glibc binary
      incompatible with GDB
    * Intel MPX support (lazy PLT, ld.so profile, and LD_AUDIT) has been removed
    * The catchsegv script and associated libSegFault.so shared object have
      been removed
    * Support for prelink will be removed in the next release; this includes
      removal of the LD_TRACE_PRELINKING, and LD_USE_LOAD_BIAS, environment
      variables and their functionality in the dynamic loader
    Changes to build and runtime requirements:
    * The audit module interface version LAV_CURRENT is increased to enable
      proper bind-now support
    * The audit interface on aarch64 is extended to support both the indirect
      result location register (x8) and NEON Q register
    Security related changes:
    * CVE-2022-23219: Passing an overlong file name to the clnt_create
      legacy function could result in a stack-based buffer overflow when
      using the "unix" protocol
    * CVE-2022-23218: Passing an overlong file name to the svcunix_create
      legacy function could result in a stack-based buffer overflow
    * CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath
      function could result in a memory leak and potential access of
      uninitialized memory
    * CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd
      function may result in an off-by-one buffer underflow and overflow
      when the current working directory is longer than PATH_MAX and also
      corresponds to the / directory through an unprivileged mount
      namespace
  - copy-and-spawn-sgid-double-close.patch,
    fcntl-time-bits-64-redirect.patch, gaiconf-init-double-free.patch,
    gconv-parseconfdir-memory-leak.patch, getcwd-attribute-access.patch,
    glibc-c-utf8-locale.patch, iconv-charmap-close-output.patch,
    ld-show-auxv-colon.patch, ldconfig-leak-empty-paths.patch,
    librt-null-pointer.patch, pthread-kill-fail-after-exit.patch,
    pthread-kill-race-thread-exit.patch, pthread-kill-return-esrch.patch,
    pthread-kill-send-specific-thread.patch,
    pthread-mutexattr-getrobust-np-type.patch,
    setxid-deadlock-blocked-signals.patch,
    sysconf-nprocessors-affinity.patch, x86-string-control-test.patch:
    Removed.
  - bsc#1194640
  - bsc#1194768
  - bsc#1194770
  - bsc#1197718
  - bsc#1211829
  - bsc#1215891
* Fri Nov 26 2021 matz@suse.com
  - Enable building the cross packages in rings.
* Tue Nov 16 2021 giuliano.belinassi@suse.com
  - Add ExtraBuildFlags for build flags that cannot be passed to configure.
  - Add support for livepatches (jsc#SLE-20049).
  - Generate ipa-clones tarball artifact when livepatching is enabled.
* Wed Nov 10 2021 schwab@suse.de
  - glibc.rpmlintrc: Update for rpmlint2
* Tue Oct 05 2021 schwab@suse.de
  - ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
    (BZ #282539
  - x86-string-control-test.patch: x86-64: Use testl to check
    __x86_string_control
  - pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
    should not fail after exit (BZ #19193)
  - pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
    and thread exit (BZ #12889)
  - getcwd-attribute-access.patch: posix: Fix attribute access mode on
    getcwd (BZ #27476)
  - pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
    ESRCH for old programs (BZ #19193)
  - pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
    pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
    [#28036])
  - setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
    blocked signals in thread exit (BZ #28361)
  - pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
    signals to a specific thread (BZ #28407)
  - sysconf-nprocessors-affinity.patch: linux: Revert the use of
    sched_getaffinity on get_nproc (BZ #28310)
  - iconv-charmap-close-output.patch: renamed from
    icon-charmap-close-output.patch
* Wed Aug 11 2021 schwab@suse.de
  - Don't create separate debuginfo packages for cross packages
* Wed Aug 11 2021 schwab@suse.de
  - ldconfig-leak-empty-paths.patch: ldconfig: avoid leak on empty paths in
    config file
  - gconv-parseconfdir-memory-leak.patch: gconv_parseconfdir: Fix memory leak
  - gaiconf-init-double-free.patch: gaiconf_init: Avoid double-free in label
    and precedence lists
  - copy-and-spawn-sgid-double-close.patch: copy_and_spawn_sgid: Avoid
    double calls to close()
  - icon-charmap-close-output.patch: iconv_charmap: Close output file when
    done
  - fcntl-time-bits-64-redirect.patch: Linux: Fix fcntl, ioctl, prctl
    redirects for _TIME_BITS=64 (BZ #28182)
  - librt-null-pointer.patch: librt: fix NULL pointer dereference (BZ
    [#28213])
* Tue Aug 10 2021 matz@suse.com
  - Add cross development packages for aarch64 and riscv64.
* Mon Aug 02 2021 schwab@suse.de
  - Update to glibc 2.34
    Major new features:
    * When _DYNAMIC_STACK_SIZE_SOURCE or _GNU_SOURCE are defined,
      PTHREAD_STACK_MIN is no longer constant and is redefined to
      sysconf(_SC_THREAD_STACK_MIN)
    * Add _SC_MINSIGSTKSZ and _SC_SIGSTKSZ
    * The dynamic linker implements the --list-diagnostics option, printing
      a dump of information related to IFUNC resolver operation and
      glibc-hwcaps subdirectory selection
    * On Linux, the function execveat has been added
    * The ISO C2X function timespec_getres has been added
    * The feature test macro __STDC_WANT_IEC_60559_EXT__, from draft ISO
      C2X, is supported to enable declarations of functions defined in Annex F
      of C2X
    * Add support for 64-bit time_t on configurations like x86 where time_t
      is traditionally 32-bit
    * The main gconv-modules file in glibc now contains only a small set of
      essential converter modules and the rest have been moved into a supplementary
      configuration file gconv-modules-extra.conf in the gconv-modules.d directory
      in the same GCONV_PATH
    * On Linux, a new tunable, glibc.pthread.stack_cache_size, can be used
      to configure the size of the thread stack cache
    * The function _Fork has been added as an async-signal-safe fork replacement
      since Austin Group issue 62 droped the async-signal-safe requirement for
      fork (and it will be included in the future POSIX standard)
    * On Linux, the close_range function has been added
    * The function closefrom has been added
    * The posix_spawn_file_actions_closefrom_np function has been added, enabling
      posix_spawn and posix_spawnp to close all file descriptors great than or
      equal to a giver integer
    Deprecated and removed features, and other changes affecting compatibility:
    * The function pthread_mutex_consistent_np has been deprecated
    * The function pthread_mutexattr_getrobust_np has been deprecated
    * The function pthread_mutexattr_setrobust_np has been deprecated
    * The function pthread_yield has been deprecated
    * The function inet_neta declared in <arpa/inet.h> has been deprecated
    * Various rarely-used functions declared in <resolv.h> and
      <arpa/nameser.h> have been deprecated
    * The pthread cancellation handler is now installed with SA_RESTART and
      pthread_cancel will always send the internal SIGCANCEL on a cancellation
      request
    * The symbols mallwatch and tr_break are now deprecated and no longer used in
      mtrace
    * The __morecore and __after_morecore_hook malloc hooks and the default
      implementation __default_morecore have been removed from the API
    * Debugging features in malloc such as the MALLOC_CHECK_ environment variable
      (or the glibc.malloc.check tunable), mtrace() and mcheck() have now been
      disabled by default in the main C library
    * The deprecated functions malloc_get_state and malloc_set_state have been
      moved from the core C library into libc_malloc_debug.so
    * The deprecated memory allocation hooks __malloc_hook, __realloc_hook,
      __memalign_hook and __free_hook are now removed from the API
    Changes to build and runtime requirements:
    * On Linux, the shm_open, sem_open, and related functions now expect the
      file shared memory file system to be mounted at /dev/shm
    Security related changes:
      CVE-2021-27645: The nameserver caching daemon (nscd), when processing
      a request for netgroup lookup, may crash due to a double-free,
      potentially resulting in degraded service or Denial of Service on the
      local system
      CVE-2021-33574: The mq_notify function has a potential use-after-free
      issue when using a notification type of SIGEV_THREAD and a thread
      attribute with a non-default affinity mask
      CVE-2021-35942: The wordexp function may overflow the positional
      parameter number when processing the expansion resulting in a crash
  - nss-database-check-reload.patch, nss-load-chroot.patch,
    x86-isa-level.patch, nscd-netgroupcache.patch,
    nss-database-lookup.patch, select-modify-timeout.patch,
    nptl-db-libpthread-load-order.patch, rawmemchr-warning.patch,
    tst-cpu-features-amx.patch, mq-notify-use-after-free.patch: Removed
  - bsc#1181403
  - bsc#1184035
  - bsc#1187911
  - jsc#PED-987
* Fri Jun 11 2021 lnussel@suse.de
  - Enable usrmerge in Factory always as it's default there
  - Add conflict with pre-usrmerge filesystem package
* Thu Jun 10 2021 schwab@suse.de
  - mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
    (CVE-2021-33574, bsc#1186489, BZ #27896)
  - Drop glibc-usrmerge-bootstrap-helper package
* Thu May 27 2021 schwab@suse.de
  - tst-cpu-features-amx.patch: x86: tst-cpu-features-supports.c: Update AMX
    check
* Wed May 26 2021 schwab@suse.de
  - rawmemchr-warning.patch: string: Work around GCC PR 98512 in rawmemchr
* Tue May 04 2021 schwab@suse.de
  - nptl-db-libpthread-load-order.patch: nptl_db: Support different
    libpthread/ld.so load orders (bsc#1184214, BZ #27744)
* Tue Apr 13 2021 schwab@suse.de
  - Enable support for static PIE (bsc#1184646)
  - select-modify-timeout.patch: linux: always update select timeout
    (bsc#1184339, BZ #27706)
* Tue Mar 23 2021 schwab@suse.de
  - Don't remove -f[asynchronous-]unwind-tables during configure run, no
    longer needed
* Mon Mar 08 2021 schwab@suse.de
  - nss-database-check-reload.patch: nsswitch: return result when nss
    database is locked (BZ #27343)
  - nss-load-chroot.patch: nss: Re-enable NSS module loading after chroot
    (bsc#1182323, BZ #27389)
  - x86-isa-level.patch: x86: Set minimum x86-64 level marker (bsc#1182522,
    BZ #27318)
  - nss-database-lookup.patch: nss: fix nss_database_lookup2's alternate
    handling (bsc#1182247, BZ #27416)
  - nss-revert-api.patch: remove
  - nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
    (CVE-2021-27645, bsc#1182733, BZ #27462)
* Tue Mar 02 2021 schwab@suse.de
  - Disable x86 ISA level for now (bsc#1182522, BZ #27318)
  - nss-revert-api.patch: Workaround for nss-compat brokeness (bsc#1182247,
    BZ #27416)
* Mon Mar 01 2021 schwab@suse.de
  - Fix build of utils flavor for usrmerge
* Thu Feb 18 2021 schwab@suse.de
  - Prepare for usrmerge (bsc#1029961)
* Tue Feb 16 2021 guillaume.gardet@opensuse.org
  - Add --enable-memory-tagging for aarch64
* Tue Feb 02 2021 schwab@suse.de
  - Update to glibc 2.33
    * The dynamic linker accepts the --list-tunables argument which prints
      all the supported tunables.
    * The dynamic linker accepts the --argv0 argument and provides opportunity
      to change argv[0] string.
    * The dynamic linker loads optimized implementations of shared objects
      from subdirectories under the glibc-hwcaps directory on the library
      search path if the system's capabilities meet the requirements for
      that subdirectory.
    * The new --help option of the dynamic linker provides usage and
      information and library search path diagnostics.
    * The mallinfo2 function is added to report statistics as per mallinfo,
      but with larger field widths to accurately report values that are
      larger than fit in an integer.
    * Add <sys/platform/x86.h> to provide query macros for x86 CPU features.
    * A new fortification level _FORTIFY_SOURCE=3 is available.
    * The mallinfo function is marked deprecated.
    * When dlopen is used in statically linked programs, alternative library
      implementations from HWCAP subdirectories are no longer loaded.
    * The deprecated <sys/vtimes.h> header and the function vtimes have been
      removed.
    * On s390(x), the type float_t is now derived from the macro
      __FLT_EVAL_METHOD__ that is defined by the compiler, instead of being
      hardcoded to double.
    * A future version of glibc will stop loading shared objects from the
      "tls" subdirectories on the library search path, the subdirectory that
      corresponds to the AT_PLATFORM system name, and also stop employing
      the legacy AT_HWCAP search mechanism.
    * CVE-2021-3326: An assertion failure during conversion from the
      ISO-20220-JP-3 character set using the iconv function has been fixed.
  - Remove obsolete, unused /etc/default/nss
  - aarch64-static-pie.patch, euc-kr-overrun.patch,
    get-nprocs-cpu-online-parsing.patch, iconv-redundant-shift.patch,
    iconv-ucs4-loop-bounds.patch, ifunc-fma4.patch,
    intl-codeset-suffixes.patch, nscd-gc-cycle.patch,
    printf-long-double-non-normal.patch, strerrorname-np.patch,
    syslog-locking.patch, sysvipc.patch: Removed
  - bsc#1180557
  - bsc#1181505
  - bsc#1191592
  - bsc#1201942
* Tue Jan 19 2021 schwab@suse.de
  - Remove support for %optimize_power
  - Move to power4 baseline on ppc
* Tue Dec 15 2020 schwab@suse.de
  - aarch64-static-pie.patch: fix static PIE start code for BTI
    (bsc#1179450, BZ #27068)
  - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
    IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
  - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
    bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
  - printf-long-double-non-normal.patch: x86: Harden printf against
    non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
  - get-nprocs-cpu-online-parsing.patch: Fix parsing of
    /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
* Tue Nov 10 2020 schwab@suse.de
  - intl-codeset-suffixes.patch: intl: Handle translation output codesets
    with suffixes (BZ #26383)
  - strerrorname-np.patch: string: Fix strerrorname_np return value (BZ
    [#26555])
  - sysvipc.patch: sysvipc: Fix SEM_STAT_ANY kernel argument pass (BZ
    [#26637], BZ #26639, BZ #26636)
* Mon Oct 26 2020 rguenther@suse.com
  - Use --enable-cet on x86_64 to instrument glibc for indirect branch
    tracking and shadow stack use.  Enable indirect branch tracking
    and shadow stack in the dynamic loader (jsc#PM-2110, bsc#1175154)
* Tue Sep 08 2020 schwab@suse.de
  - Keep nsswitch.conf in /etc for SLES15
  - syslog-locking.patch: Correct locking and cancellation cleanup in syslog
    functions (bsc#1172085, BZ #26100)
  - ifunc-fma4.patch: x86-64: Fix FMA4 detection in ifunc (BZ #26534)
* Thu Aug 06 2020 schwab@suse.de
  - Update to glibc 2.32
    * Unicode 13.0.0 Support
    * New locale added: ckb_IQ
    * The GNU C Library now loads audit modules listed in the DT_AUDIT and
      DT_DEPAUDIT dynamic section entries of the main executable
    * powerpc64le supports IEEE128 long double libm/libc redirects when
      using the -mabi=ieeelongdouble to compile C code on supported GCC
      toolchains
    * To help detect buffer overflows and other out-of-bounds accesses
      several APIs have been annotated with GCC 'access' attribute
    * On Linux, functions the pthread_attr_setsigmask_np and
      pthread_attr_getsigmask_np have been added
    * The GNU C Library now provides the header file <sys/single_threaded.h>
      which declares the variable __libc_single_threaded
    * The functions sigabbrev_np and sigdescr_np have been added
    * The functions strerrorname_np and strerrordesc_np have been added
    * AArch64 now supports standard branch protection security hardening
      in glibc when it is built with a GCC that is configured with
    - -enable-standard-branch-protection (or if -mbranch-protection=standard
      flag is passed when building both GCC target libraries and glibc,
      in either case a custom GCC is needed)
    * The deprecated <sys/sysctl.h> header and the sysctl function have been
      removed
    * The sstk function is no longer available to newly linked binaries
    * The legacy signal handling functions siginterrupt, sigpause, sighold,
      sigrelse, sigignore and sigset, and the sigmask macro have been
      deprecated
    * ldconfig now defaults to the new format for ld.so.cache
    * The deprecated arrays sys_siglist, _sys_siglist, and sys_sigabbrev
      are no longer available to newly linked binaries, and their declarations
      have been removed from <string.h>
    * The deprecated symbols sys_errlist, _sys_errlist, sys_nerr, and _sys_nerr
      are no longer available to newly linked binaries, and their declarations
      have been removed from from <stdio.h>
    * Both strerror and strerror_l now share the same internal buffer in the
      calling thread, meaning that the returned string pointer may be invalided
      or contents might be overwritten on subsequent calls in the same thread or
      if the thread is terminated
    * Using weak references to libpthread functions such as pthread_create
      or pthread_key_create to detect the singled-threaded nature of a
      program is an obsolescent feature
    * The "files" NSS module no longer supports the "key" database (used for
      secure RPC)
    * The __morecore and __after_morecore_hook malloc hooks and the default
      implementation __default_morecore have been deprecated
    * The hesiod NSS module has been deprecated and will be removed in a
      future version of glibc
    * CVE-2016-10228: An infinite loop has been fixed in the iconv program when
      invoked with the -c option and when processing invalid multi-byte input
      sequences
    * CVE-2020-10029: Trigonometric functions on x86 targets suffered from stack
      corruption when they were passed a pseudo-zero argument
    * CVE-2020-1752: A use-after-free vulnerability in the glob function when
      expanding ~user has been fixed.
    * CVE-2020-6096: A signed comparison vulnerability in the ARMv7 memcpy and
      memmove functions has been fixed
  - riscv-syscall-clobber.patch, ldbl-96-rem-pio2l.patch,
    long-double-alias.patch: Removed
  - bsc#1027496
  - bsc#1162930
  - bsc#1166106
  - bsc#1167631
  - bsc#1167939
  - bsc#1194785, jsc#SLE-18195
  - bsc#1200855
  - bsc#1201560
  - bsc#1201640
  - bsc#1207571
  - jsc#SLE-13520
* Tue Jun 23 2020 schwab@suse.de
  - long-double-alias.patch: Fix build with GCC 10 when long double = double
  - nscd-gc-cycle.patch: nscd: bump GC cycle during cache pruning
    (bsc#1171878, BZ #26130)
* Mon May 18 2020 schwab@suse.de
  - glibc-nsswitch-usr.diff: read /usr/etc/nsswitch.conf if
    /etc/nsswitch.conf does not exist
  - Install default nsswitch.conf in /usr/etc
  - Don't install gai.conf in /etc
* Mon Apr 20 2020 schwab@suse.de
  - Split off %lang_package
* Thu Mar 12 2020 schwab@suse.de
  - riscv-syscall-clobber.patch: riscv: Avoid clobbering register parameters
    in syscall
  - ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
    reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)
* Tue Feb 18 2020 schwab@suse.de
  - nsswitch.conf: comment out initgroups setting, so that it defaults to
    the group setting (bsc#1164075)
* Thu Feb 13 2020 schwab@suse.de
  - fix-locking-in-_IO_cleanup.patch: update to latest version
* Mon Feb 03 2020 schwab@suse.de
  - Update to glibc 2.31
    * The GNU C Library now supports a feature test macro _ISOC2X_SOURCE to
      enable features from the draft ISO C2X standard
    * The <math.h> functions that round their results to a narrower type now
      have corresponding type-generic macros in <tgmath.h>
    * The function pthread_clockjoin_np has been added, enabling join with a
      terminated thread with a specific clock
    * New locale added: mnw_MM (Mon language spoken in Myanmar).
    * The DNS stub resolver will optionally send the AD (authenticated data) bit
      in queries if the trust-ad option is set via the options directive in
      /etc/resolv.conf (or if RES_TRUSTAD is set in _res.options)
    * The totalorder and totalordermag functions, and the corresponding
      functions for other floating-point types, now take pointer arguments to
      avoid signaling NaNs possibly being converted to quiet NaNs in argument
      passing
    * The obsolete function stime is no longer available to newly linked
      binaries, and its declaration has been removed from <time.h>
    * The gettimeofday function no longer reports information about a
      system-wide time zone
    * If a lazy binding failure happens during dlopen, during the execution of
      an ELF constructor, the process is now terminated
  - malloc-info-whitespace.patch, riscv-vfork.patch,
    prefer-map-32bit-exec.patch, backtrace-powerpc.patch,
    ldconfig-dynstr.patch: Removed.
  - bsc#1157893
  - bsc#1163184
  - fate#325815, fate#325879, fate#325880, fate#325881, fate#325882
  - fate#325962
* Tue Jan 21 2020 schwab@suse.de
  - backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
    (CVE-2020-1751, bsc#1158996, BZ #25423)
  - Drop support for pluggable gconv modules (bsc#1159851)
* Mon Dec 09 2019 schwab@suse.de
  - prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
    honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
    [#25204])
* Tue Nov 26 2019 kukuk@suse.de
  - nsswitch.conf: add usrfiles for services, protocols, rpc, ethers
    and aliases for /usr/etc move
* Mon Oct 14 2019 schwab@suse.de
  - euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
    (CVE-2019-25013, BZ #24973)
* Thu Oct 10 2019 schwab@suse.de
  - ldconfig-dynstr.patch: ldconfig: handle .dynstr located in separate
    segment (bsc#1153149, BZ #25087)
* Mon Sep 23 2019 schwab@suse.de
  - Package gconv-modules.cache as %ghost
  - Regenerate it also in the %post of glibc-local-base-<targettype>
* Mon Sep 23 2019 lnussel@suse.de
  - move mo files to glibc-locale as that's where all the other
    informations for those locales are. glibc-locale-base only has English
    anyways.
* Wed Sep 18 2019 schwab@suse.de
  - riscv-vfork.patch: Fix RISC-V vfork build with Linux 5.3 kernel headers
* Mon Aug 19 2019 schwab@suse.de
  - Remove NoSource tags (bsc#994835)
* Mon Aug 19 2019 kukuk@suse.de
  - pwdutils is long gone and replaced by shadow
* Fri Aug 02 2019 schwab@suse.de
  - Update to glibc 2.30
    * Unicode 12.1.0 Support
    * The dynamic linker accepts the --preload argument to preload shared
      objects
    * The twalk_r function has been added
    * On Linux, the getdents64, gettid, and tgkill functions have been added
    * Minguo (Republic of China) calendar support has been added
    * The entry for the new Japanese era has been added
    * Memory allocation functions malloc, calloc, realloc, reallocarray, valloc,
      pvalloc, memalign, and posix_memalign fail now with total object size
      larger than PTRDIFF_MAX
    * The dynamic linker no longer refuses to load objects which reference
      versioned symbols whose implementation has moved to a different soname
      since the object has been linked
    * Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock,
      pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait
      functions
    * On AArch64 the GNU IFUNC resolver call ABI changed
    * The copy_file_range function fails with ENOSYS if the kernel does not
      support the system call of the same name
    * The functions clock_gettime, clock_getres, clock_settime,
      clock_getcpuclockid, clock_nanosleep were removed from the librt library
      for new applications (on architectures which had them)
    * The obsolete and never-implemented XSI STREAMS header files <stropts.h>
      and <sys/stropts.h> have been removed
    * Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6
      resolver flag (deprecated in glibc 2.25) have been removed
    * The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub
      resolver have been removed from <resolv.h>
    * With --enable-bind-now, installed programs are now linked with the
      BIND_NOW flag.
    * On 32-bit Arm, support for the port-based I/O emulation and the <sys/io.h>
      header have been removed
    * The Linux-specific <sys/sysctl.h> header and the sysctl function have been
      deprecated and will be removed from a future version of glibc
    * CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check
      size
    * CVE-2019-9169: Attempted case-insensitive regular-expression match
      via proceed_next_node in posix/regexec.c leads to heap-based buffer
      over-read
  - pthread-rwlock-trylock-stalls.patch,
    arm-systemtap-probe-constraint.patch, pthread-mutex-barrier.patch,
    fork-handler-lock.patch, pthread-join-probe.patch,
    riscv-clone-unwind.patch, add-new-Fortran-vector-math-header-file.patch,
    regex-read-overrun.patch, japanese-era-name-may-2019.patch,
    dl-show-auxv.patch, s390-vx-vxe-hwcap.patch, taisho-era-string.patch,
    malloc-tracing-hooks.patch, pldd-inf-loop.patch,
    malloc-large-bin-corruption-check.patch, wfile-sync-crash.patch,
    malloc-tests-warnings.patch, fnmatch-collating-elements.patch,
    iconv-reset-input-buffer.patch: Removed
  - malloc-info-whitespace.patch: Remove unwanted leading whitespace in
    malloc_info (BZ #24867)
  - bsc#1100396
  - bsc#1130045
* Wed Jul 17 2019 schwab@suse.de
  - Move /var/lib/misc/Makefile to /usr/share/misc/Makefile.makedb (bsc#1138726)
* Wed Jun 26 2019 schwab@suse.de
  - malloc-tests-warnings.patch: Fix warnings in malloc tests with GCC 9
* Tue Jun 25 2019 mliska@suse.cz
  - Set optflags for i686 after _lto_cflags is set (boo#1138807).
* Thu Jun 20 2019 mliska@suse.cz
  - Disable LTO due to a usage of top-level assembler that
    causes LTO issues (boo#1138807).
* Wed Jun 12 2019 schwab@suse.de
  - nss-files-long-lines-2.patch: Remove obsolete patch
* Wed May 15 2019 schwab@suse.de
  - dl-show-auxv.patch: Fix output of LD_SHOW_AUXV=1
  - s390-vx-vxe-hwcap.patch: S390: Mark vx and vxe as important hwcap
  - taisho-era-string.patch: ja_JP: Change the offset for Taisho gan-nen
    from 2 to 1 (BZ #24162)
  - malloc-tracing-hooks.patch: malloc: Set and reset all hooks for tracing
    (BZ #16573)
  - pldd-inf-loop.patch: elf: Fix pldd (BZ#18035)
  - malloc-large-bin-corruption-check.patch: malloc: Check for large bin
    list corruption when inserting unsorted chunk (BZ #24216)
  - wfile-sync-crash.patch: Fix crash in _IO_wfile_sync (BZ #20568)
* Wed Apr 03 2019 schwab@suse.de
  - japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
    Japanese era (BZ #22964)
  - Replace glibc_post_upgrade with lua script
* Thu Mar 07 2019 schwab@suse.de
  - add-new-Fortran-vector-math-header-file.patch: Update from upstream
* Tue Mar 05 2019 schwab@suse.de
  - regex-read-overrun.patch: fix read overrun (CVE-2019-9169, bsc#1127308,
    BZ #24114)
  - ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
    (bsc#1117993, BZ #23973)
* Thu Feb 21 2019 mliska@suse.cz
  - Add add-new-Fortran-vector-math-header-file.patch.
* Mon Feb 18 2019 schwab@suse.de
  - pthread-rwlock-trylock-stalls.patch: nptl: Fix pthread_rwlock_try*lock
    stalls (BZ #23844)
  - arm-systemtap-probe-constraint.patch: arm: Use "nr" constraint for
    Systemtap probes (BZ #24164)
  - pthread-mutex-barrier.patch: Add compiler barriers around modifications
    of the robust mutex list for pthread_mutex_trylock (BZ #24180)
  - fork-handler-lock.patch: nptl: Avoid fork handler lock for
    async-signal-safe fork (BZ #24161)
  - pthread-join-probe.patch: nptl: Fix invalid Systemtap probe in
    pthread_join (BZ #24211)
  - riscv-clone-unwind.patch: RISC-V: Fix elfutils testsuite unwind failures
    (BZ #24040)
* Fri Feb 01 2019 schwab@suse.de
  - Update to glibc 2.29
    * The getcpu wrapper function has been added, which returns the currently
      used CPU and NUMA node
    * Optimized generic exp, exp2, log, log2, pow, sinf, cosf, sincosf and tanf
    * The reallocarray function is now declared under _DEFAULT_SOURCE, not just
      for _GNU_SOURCE, to match BSD environments
    * For powercp64le ABI, Transactional Lock Elision is now enabled iff kernel
      indicates that it will abort the transaction prior to entering the kernel
      (PPC_FEATURE2_HTM_NOSC on hwcap2)
    * The functions posix_spawn_file_actions_addchdir_np and
      posix_spawn_file_actions_addfchdir_np have been added, enabling
      posix_spawn and posix_spawnp to run the new process in a different
      directory
    * The popen and system do not run atfork handlers anymore (BZ#17490)
    * strftime's default formatting of a locale's alternative year (%Ey)
      has been changed to zero-pad the year to a minimum of two digits,
      like "%y"
    * As a GNU extension, the '_' and '-' flags can now be applied to
      "%EY" to control how the year number is formatted
    * The glibc.tune tunable namespace has been renamed to glibc.cpu and the
      tunable glibc.tune.cpu has been renamed to glibc.cpu.name
    * The type of the pr_uid and pr_gid members of struct elf_prpsinfo, defined
      in <sys/procfs.h>, has been corrected to match the type actually used by
      the Linux kernel
    * An archaic GNU extension to scanf, under which '%as', '%aS', and '%a[...]'
      meant to scan a string and allocate space for it with malloc, is now
      restricted to programs compiled in C89 or C++98 mode with _GNU_SOURCE
      defined
  - unwind-ctor.patch, old-getdents64.patch, nss-files-leak.patch,
    riscv-feholdexcept-setround.patch,
    pthread-cond-broadcast-waiters-after-spinning.patch,
    regex-uninit-memory-access.patch, spawni-maybe-script-execute.patch,
    gethostid-gethostbyname-failure.patch, strstr-huge-needle.patch,
    pthread-mutex-lock-elision-race.patch, x86-haswell-string-flags.patch,
    if-nametoindex-descr-leak.patch, riscv-flush-icache.patch: Removed
  - CVE-2016-10739
  - bsc#1114984
  - bsc#1114993
  - bsc#1122729
  - bsc#1131330
  - bsc#1149332
  - bsc#1151582
  - bsc#1164505
* Wed Jan 09 2019 schwab@suse.de
  - fnmatch-collating-elements.patch: update
  - riscv-flush-icache.patch: fix for compiling against 4.20 headers
* Wed Nov 28 2018 schwab@suse.de
  - if-nametoindex-descr-leak.patch: if_nametoindex: Fix descriptor leak for
    overlong name (CVE-2018-19591, BZ #23927, bsc#1117603)
* Wed Nov 07 2018 jengelh@inai.de
  - Fix typography for glibc-locale-base.
* Wed Nov 07 2018 schwab@suse.de
  - pthread-mutex-lock-elision-race.patch: Fix race in pthread_mutex_lock
    while promoting to PTHREAD_MUTEX_ELISION_NP (BZ #23275)
  - x86-haswell-string-flags.patch: x86: Fix Haswell CPU string flags (BZ
    [#23709])
* Wed Sep 26 2018 schwab@suse.de
  - unwind-ctor.patch: Add missing unwind information to ld.so on powerpc32
    (BZ #23707)
  - old-getdents64.patch: Rewrite __old_getdents64 (BZ #23497)
  - nss-files-leak.patch: Fix file stream leak in aliases lookup (BZ #23521)
  - riscv-feholdexcept-setround.patch: Fix rounding save/restore bug
  - pthread-cond-broadcast-waiters-after-spinning.patch: Fix
    waiters-after-spinning case (BZ #23538)
  - regex-uninit-memory-access.patch: fix uninitialized memory access (BZ
    [#23578])
  - spawni-maybe-script-execute.patch: Fix segfault in maybe_script_execute
  - gethostid-gethostbyname-failure.patch: Check for NULL value from
    gethostbyname_r (BZ #23679)
  - strstr-huge-needle.patch: Fix strstr bug with huge needles (BZ #23637)
* Wed Sep 12 2018 schwab@suse.de
  - Add libpng-devel and zlib-devel for utils build
* Wed Aug 15 2018 schwab@suse.de
  - Add glibc-locale-base subpackage containing only C, C.UTF-8 and
    en_US.UTF-8 locales (fate#326551)
* Thu Aug 02 2018 schwab@suse.de
  - Update to glibc 2.28
    * The localization data for ISO 14651 is updated to match the 2016
      Edition 4 release of the standard, this matches data provided by
      Unicode 9.0.0
    * Unicode 11.0.0 Support: Character encoding, character type info, and
      transliteration tables are all updated to Unicode 11.0.0, using
      generator scripts contributed by Mike FABIAN (Red Hat)
    * <math.h> functions that round their results to a narrower type are added
      from TS 18661-1:2014 and TS 18661-3:2015
    * Two grammatical forms of month names are now supported
    * The renameat2 function has been added, a variant of the renameat function
      which has a flags argument
    * The statx function has been added, a variant of the fstatat64
      function with an additional flags argument
    * IDN domain names in getaddrinfo and getnameinfo now use the system libidn2
      library if installed
    * Parsing of dynamic string tokens in DT_RPATH, DT_RUNPATH, DT_NEEDED,
      DT_AUXILIARY, and DT_FILTER has been expanded to support the full
      range of ELF gABI expressions including such constructs as
      '$ORIGIN$ORIGIN' (if valid)
    * Support for ISO C threads (ISO/IEC 9899:2011) has been added.
    * The nonstandard header files <libio.h> and <_G_config.h> are no longer
      installed
    * The stdio functions 'getc' and 'putc' are no longer defined as macros
    * All stdio functions now treat end-of-file as a sticky condition
    * The macros 'major', 'minor', and 'makedev' are now only available from
      the header <sys/sysmacros.h>
    * The obsolete function ustat is no longer available to newly linked
      binaries; the headers <ustat.h> and <sys/ustat.h> have been removed
    * The obsolete function nfsservctl is no longer available to newly linked
      binaries
    * The obsolete function name llseek is no longer available to newly linked
      binaries
    * The AI_IDN_ALLOW_UNASSIGNED and NI_IDN_ALLOW_UNASSIGNED flags for the
      getaddrinfo and getnameinfo functions have been deprecated
    * The AI_IDN_USE_STD3_ASCII_RULES and NI_IDN_USE_STD3_ASCII_RULES flags for
      the getaddrinfo and getnameinfo functions have been deprecated
    * The fcntl function now have a Long File Support variant named fcntl64
    * CVE-2016-6261, CVE-2016-6263, CVE-2017-14062: Various vulnerabilities have
      been fixed by removing the glibc-internal IDNA implementation and using
      the system-provided libidn2 library instead
  - Split off all libcrypt related functions into package libxcrypt
  - fix-locking-in-_IO_cleanup.patch, fnmatch-collating-elements.patch:
    Rediff
  - aarch64-sys-ptrace-update.patch,
    crypt_blowfish-1.2-hack_around_arm.diff, crypt_blowfish-1.2-sha.diff,
    crypt_blowfish-const.patch, crypt_blowfish-gensalt.patch,
    glibc-2.14-crypt.diff, i386-memmove-sse2-unaligned.patch,
    i386-sigaction-sa-restorer.patch, mempcpy-avx512.patch,
    netgroup-cache-keys.patch, nss-database-multiple-dfn.patch,
    pkey-get-reserved-name.patch, powerpc-sys-ptrace-undefine-macros.patch,
    powerpc-sys-ptrace-update.patch, realpath-ssize-max-overflow.patch,
    res-send-enomem.patch, riscv-fmax-fmin-nan.patch,
    riscv-kernel-sigaction.patch, riscv-readelflib.patch,
    riscv-tls-init.patch: Removed
  - glibc_post_upgrade.c: Don't reload init (bsc#1103124)
  - CVE-2009-5155, CVE-2015-8985
  - bsc#1092877
  - bsc#1102526
  - bsc#1112570
  - bsc#1126590
  - bsc#1127223
* Tue Jun 19 2018 schwab@suse.de
  - Use python3-pexpect instead of python-pexpect
* Thu Jun 14 2018 schwab@suse.de
  - riscv-kernel-sigaction.patch: fix struct kernel_sigaction to match the
    kernel version (BZ #23069)
* Mon Jun 04 2018 schwab@suse.de
  - glibc-2.3.90-langpackdir.diff: No longer search in /usr/share/locale-bundle
* Wed May 23 2018 schwab@suse.de
  - mempcpy-avx512.patch: Don't write beyond destination in
    __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154)
  - realpath-ssize-max-overflow.patch: Fix overflow in path length
    computation (CVE-2018-11236, bsc#1094161, BZ #22786)
  - Use %license also for COPYING, COPYING.LIB
* Thu Apr 12 2018 schwab@suse.de
  - Readd nis to netgroup and automount nss config (bsc#1088860)
* Thu Mar 29 2018 schwab@suse.de
  - i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
    2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
* Tue Mar 27 2018 schwab@suse.de
  - res-send-enomem.patch: Fix crash in resolver on memory allocation
    failure (bsc#1086690, BZ #23005)
* Thu Mar 22 2018 schwab@suse.de
  - pkey-get-reserved-name.patch: Linux: use reserved name __key in pkey_get
    (BZ #22797)
  - aarch64-sys-ptrace-update.patch: linux/aarch64: sync sys/ptrace.h with
    Linux 4.15 (BZ #22433)
  - powerpc-sys-ptrace-undefine-macros.patch: powerpc: Undefine Linux ptrace
    macros that conflict with __ptrace_request
  - powerpc-sys-ptrace-update.patch: linux/powerpc: sync sys/ptrace.h with
    Linux 4.15 (BZ #22433, BZ #22807)
  - netgroup-cache-keys.patch: Fix netgroup cache keys (BZ #22342)
  - i386-sigaction-sa-restorer.patch: i386: Fix i386 sigaction sa_restorer
    initialization (BZ #21269)
  - riscv-tls-init.patch: RISC-V: Do not initialize $gp in TLS macros
  - riscv-fmax-fmin-nan.patch: RISC-V: fmax/fmin: Handle signalling NaNs
    correctly (BZ #22884)
* Wed Mar 07 2018 schwab@suse.de
  - nss-database-multiple-dfn.patch: Fix multiple definitions of
    __nss_*_database (BZ #22918)
* Thu Feb 22 2018 fvogt@suse.com
  - Use %license (boo#1082318)
* Wed Feb 14 2018 schwab@suse.de
  - Add systemtap-headers to BuildRequires
  - Add --enable-systemtap to configure arguments (fate#324969, bsc#1073636)
* Tue Feb 13 2018 schwab@suse.de
  - riscv-readelflib.patch: Fix parsing flags in ELF64 files on riscv
* Mon Feb 05 2018 schwab@suse.de
  - Update to glibc 2.27
    * Optimized x86-64 asin, atan2, exp, expf, log, pow, atan, sin, cosf,
      sinf, sincosf and tan with FMA
    * Optimized x86-64 trunc and truncf for processors with SSE4.1
    * Optimized generic expf, exp2f, logf, log2f, powf, sinf, cosf and
      sincosf
    * In order to support faster and safer process termination the malloc API
      family of functions will no longer print a failure address and stack
      backtrace after detecting heap corruption
    * The abort function terminates the process immediately, without flushing
      stdio streams
    * On platforms where long double has the IEEE binary128 format (aarch64,
      alpha, mips64, riscv, s390 and sparc), the math library now implements
      _Float128 interfaces for that type, as defined by ISO/IEC TS 18661-3:2015
      These are the same interfaces added in version 2.26 for some platforms where
      this format is supported but is not the format of long double
    * On platforms with support for _Float64x (aarch64, alpha, i386, ia64,
      mips64, powerpc64le, riscv, s390, sparc and x86_64), the math library now
      implements interfaces for that type, as defined by ISO/IEC TS
      18661-3:2015
    * The math library now implements interfaces for the _Float32, _Float64 and
      _Float32x types, as defined by ISO/IEC TS 18661-3:2015
    * glibc now implements the memfd_create and mlock2 functions on Linux
    * Support for memory protection keys was added
    * The copy_file_range function was added
    * The ldconfig utility now processes `include' directives using the C/POSIX
      collation ordering
    * Support for two grammatical forms of month names has been added
    * Support for the RISC-V ISA running on Linux has been added
    * Statically compiled applications attempting to load locales compiled for the
      GNU C Library version 2.27 will fail and fall back to the builtin C/POSIX
      locale
    * Support for statically linked applications which call dlopen is deprecated
      and will be removed in a future version of glibc
    * Support for old programs which use internal stdio data structures and
      functions is deprecated
    * On GNU/Linux, the obsolete Linux constant PTRACE_SEIZE_DEVEL is no longer
      defined by <sys/ptrace.h>
    * libm no longer supports SVID error handling (calling a user-provided
      matherr function on error) or the _LIB_VERSION variable to control error
      handling
    * The libm functions pow10, pow10f and pow10l are no longer supported for
      new programs
    * The mcontext_t type is no longer the same as struct sigcontext
    * The add-ons mechanism for building additional packages at the same time as
      glibc has been removed
    * The res_hnok, res_dnok, res_mailok and res_ownok functions now check that
      the specified string can be parsed as a domain name
    * In the malloc_info output, the <heap> element may contain another <aspace>
      element, "subheaps", which contains the number of sub-heaps
    * In the malloc_info output, the <heap> element may contain another <aspace>
      element, "subheaps", which contains the number of sub-heaps
    * The nonstandard header files <libio.h> and <_G_config.h> are deprecated
      and will be removed in a future release
    * CVE-2018-6485, CVE-2018-6551: The posix_memalign and memalign
      functions, when called with an object size near the value of SIZE_MAX,
      would return a pointer to a buffer which is too small, instead of NULL
      (bsc#1079036)
  - Support for Sun RPC is no longer available, use libtirpc instead
  - glibc-nodate.patch, powerpc-elision-enable-envvar.patch,
    s390-elision-enable-envvar.patch, resolv-context-leak.patch,
    dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
    math-c++-compat.patch, remove-nss-nis-compat.patch,
    eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
    assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
    dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
    nscd-libnsl.patch, malloc-tcache-leak.patch,
    falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
    nss-files-large-buffers.patch. sysconf-uio-maxiov.patch,
    glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
    spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
    tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
    malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
    fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
    ldd-system-interp.patchabort-no-flush.patch: Removed
  - All patches refreshed
  - bsc#1063675
* Tue Jan 30 2018 schwab@suse.de
  - fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
    (bsc#1070491, BZ #15142)
* Tue Jan 30 2018 schwab@suse.de
  - Avoid duplicate source rpm
* Mon Jan 22 2018 schwab@suse.de
  - getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
    absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)
* Tue Jan 02 2018 schwab@suse.de
  - dl-init-paths-overflow.patch: Count components of the expanded path in
    _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
    [#22607], BZ #22627)
  - fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
    string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
* Wed Dec 13 2017 schwab@suse.de
  - tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
  - powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
  - malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
    tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)
* Tue Dec 12 2017 schwab@suse.de
  - Add _multibuild
* Mon Nov 27 2017 schwab@suse.de
  - glob64-s390.patch: no compat glob64 on s390
  - noversion.tar.bz2: remove unused source
* Thu Oct 26 2017 schwab@suse.de
  - x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)
* Thu Oct 26 2017 schwab@suse.de
  - spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
    [#22273])
* Mon Oct 23 2017 schwab@suse.de
  - math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
  - malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
    [#22111])
  - falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
    for Qualcomm Falkor
  - aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
  - nss-files-large-buffers.patch: Avoid large buffers with many host
    addresses (BZ #22078)
  - sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
    [#22321])
  - glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
    (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
    bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
  - dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
    _dl_runtime_resolve (BZ #21265)
* Tue Oct 10 2017 schwab@suse.de
  - nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)
* Mon Oct 09 2017 schwab@suse.de
  - Drop glibc-obsolete
  - glibc-2.3.90-noversion.diff: remove
  - reinitialize-dl_load_write_lock.patch: remove
* Wed Oct 04 2017 schwab@suse.de
  - nss-compat.patch: Move nss_compat from nis to nss subdir and install it
    unconditionally
  - nsswitch.conf: switch back to compat for passwd, group, shadow
* Thu Sep 28 2017 schwab@suse.de
  - assert-pedantic.patch: Suppress pedantic warning caused by statement
    expression (BZ #21242, BZ #21972)
  - math-c++-compat.patch: Add more C++ compatibility (BZ #22235)
  - getaddrinfo-errno.patch: Fix errno and h_errno handling in getaddrinfo
    (BZ #21915, BZ #21922)
  - resolv-conf-oom.patch: Fix memory handling in OOM situation during
    resolv.conf parsing (BZ #22095, BZ #22096)
  - dynarray-allocation.patch: Fix initial size of dynarray allocation and
    set errno on overflow error
  - nearbyint-inexact.patch: Avoid spurious inexact in nearbyint (BZ #22225)
* Mon Sep 25 2017 schwab@suse.de
  - math-c++-compat.patch: add more C++ compatibility (BZ #22146)
* Tue Sep 12 2017 schwab@suse.de
  - Remove rpcsvc/yppasswd.* from glibc-devel
  - ld-so-hwcap-x86-64.patch: add x86_64 to hwcap (bsc#1056606, BZ #22093)
* Thu Aug 31 2017 schwab@suse.de
  - eh-frame-zero-terminator.patch: Properly terminate .eh_frame (BZ #22051)
* Thu Aug 31 2017 schwab@suse.de
  - Disable obsolete libnsl and NIS support
  - remove-nss-nis-compat.patch: remove nis and compat from default NSS
    configs
  - nsswitch.conf: Likewise
* Tue Aug 29 2017 schwab@suse.de
  - math-c++-compat.patch: Do not use __builtin_types_compatible_p in C++
    mode (BZ #21930)
* Thu Aug 17 2017 schwab@suse.de
  - Add iconvconfig to baselibs.conf (bsc#1051042)
* Thu Aug 10 2017 schwab@suse.de
  - resolv-context-leak.patch: Fix leaks of resolver contexts
  - dl-runtime-resolve-opt-avx512f.patch: Use _dl_runtime_resolve_opt only
    with AVX512F (BZ #21871)
  - libpthread-compat-wrappers.patch: Don't use IFUNC resolver for longjmp
    or system in libpthread (BZ #21041)
* Wed Aug 02 2017 schwab@suse.de
  - Update to glibc 2.26
    * A per-thread cache has been added to malloc
    * Unicode 10.0.0 Support
    * Improvements to the DNS stub resolver
    * New function reallocarray, which resizes an allocated block (like
      realloc) to the product of two sizes, with a guaranteed clean failure
      upon integer overflow in the multiplication
    * New wrappers for the Linux-specific system calls preadv2 and pwritev2
    * posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to
      create a new session ID for the spawned process
    * errno.h is now safe to use from C-preprocessed assembly language on all
      supported operating systems
    * On ia64, powerpc64le, x86-32, and x86-64, the math library now implements
      128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE
      754-2008) and ISO/IEC TS 18661-3:2015
    * The synchronization that pthread_spin_unlock performs has been changed to
      now be equivalent to a C11 atomic store with release memory order to the
      spin lock's memory location
    * The DNS stub resolver no longer performs EDNS fallback
    * res_mkquery and res_nmkquery no longer support the IQUERY opcode
    * The _res_opcodes variable has been removed from libresolv
    * <string.h> no longer includes inline versions of any string functions,
      as this kind of optimization is better done by the compiler
    * The nonstandard header <xlocale.h> has been removed
    * The obsolete header <sys/ultrasound.h> has been removed
    * The obsolete signal constant SIGUNUSED is no longer defined by <signal.h>
    * The obsolete function cfree has been removed
    * The stack_t type no longer has the name struct sigaltstack
    * The ucontext_t type no longer has the name struct ucontext
    * On S/390 GNU/Linux, the constants defined by <sys/ptrace.h> have been
      synced with the kernel
    * Linux kernel 3.2 or later is required at runtime, on all architectures
      supported by that kernel
    * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes,
      to avoid fragmentation-based spoofing attacks (CVE-2017-12132)
    * LD_LIBRARY_PATH is now ignored in binaries running in privileged
      AT_SECURE mode to guard against local privilege escalation attacks
      (CVE-2017-1000366)
    * Avoid printing a backtrace from the __stack_chk_fail function since it
      is called on a corrupt stack and a backtrace is unreliable on a
      corrupt stack (CVE-2010-3192)
    * A use-after-free vulnerability in clntudp_call in the Sun RPC system
      has been fixed (CVE-2017-12133)
    * fate#322258, fate#321513, fate#322453
  - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff,
    i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch,
    sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch,
    tunables-bigendian.patch: Removed
  - bsc#1074208
* Tue Jul 25 2017 schwab@suse.de
  - Fix RPM group
* Thu Jul 20 2017 schwab@suse.de
  - s390-elision-enable-envvar.patch: enable TLE only if
    GLIBC_ELISION_ENABLE=yes is defined (fate#322271)
* Wed Jun 21 2017 schwab@suse.de
  - ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
    programs (BZ #21209)
  - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
    AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)
* Wed Jun 14 2017 schwab@suse.de
  - Remove glibc-cpusetsize.diff, no longer useful
* Wed May 31 2017 schwab@suse.de
  - fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123,
    BZ #21289)
* Mon May 29 2017 schwab@suse.de
  - test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h
    aliasing
* Mon May 29 2017 schwab@suse.de
  - add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE
    locales (bsc#1039502)
* Tue May 23 2017 schwab@suse.de
  - Remove glibc-testsuite.patch, no longer relevant
* Mon May 22 2017 schwab@suse.de
  - Use multibuild feature
  - Remove obsolete check-build.sh
  - glibc.rpmlintrc: remove obsolete entries
  - Use %tmpfiles_create in nscd postin
* Wed Mar 29 2017 schwab@suse.de
  - i686-memchr-sse.patch: Fix i686 memchr overflow calculation
    (bsc#1031021, BZ #21182)
  - sunrpc-use-after-free.patch: Avoid use-after-free read access in
    clntudp_call (BZ #21115)
  - Build testsuite with gdb and python-pexpect to enable more tests
* Wed Feb 08 2017 schwab@suse.de
  - tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ
    [#21109])
* Sun Feb 05 2017 schwab@suse.de
  - Update to glibc 2.25
    * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR
      24731-2:2010, is supported to enable declarations of functions from that
      TR.
    * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS
      18661-1:2014, is supported to enable declarations of functions and macros
      from that TS.
    * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS
      18661-4:2015, is supported to enable declarations of functions and macros
      from that TS.
    * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are
      now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L.
    * The inclusion of <sys/sysmacros.h> by <sys/types.h> is deprecated.
    * New <fenv.h> features from TS 18661-1:2014 are added to libm: the
      fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the
      femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros.
    * Integer width macros from TS 18661-1:2014 are added to <limits.h>:
      CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH,
      UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to
      <stdint.h>: INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH,
      INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH,
      UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH,
      INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH,
      UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH,
      UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH,
      UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH,
      UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH,
      WINT_WIDTH.
    * New <math.h> features are added from TS 18661-1:2014:
    - Signaling NaN macros: SNANF, SNAN, SNANL.
    - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp,
      fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf,
      fromfpxl, ufromfpx, ufromfpxf, ufromfpxl.
    - llogb functions: the llogb, llogbf and llogbl functions, and the
      FP_LLOGB0 and FP_LLOGBNAN macros.
    - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag,
      fminmagf, fminmagl.
    - Comparison macros: iseqsig.
    - Classification macros: iscanonical, issubnormal, iszero.
    - Total order functions: totalorder, totalorderf, totalorderl,
      totalordermag, totalordermagf, totalordermagl.
    - Canonicalize functions: canonicalize, canonicalizef, canonicalizel.
    - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload,
      setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl.
    * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014,
      are added to libc.
    * Most of glibc can now be built with the stack smashing protector enabled.
    * The function explicit_bzero, from OpenBSD, has been added to libc.
    * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined
      to float instead of double.
    * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the
      float_t and double_t types are now defined to long double instead of float
      and double.
    * The getentropy and getrandom functions, and the <sys/random.h> header file
      have been added.
    * The buffer size for byte-oriented stdio streams is now limited to 8192
      bytes by default.
    * The <sys/quota.h> header now includes the <linux/quota.h> header.
    * The malloc_get_state and malloc_set_state functions have been removed.
    * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the
      corresponding RES_NOIP6DOTINT flag from <resolv.h> have been removed.
    * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING
      flag from <resolv.h> have been removed.
    * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG,
      RES_BLAST defined in the <resolv.h> header file have been deprecated.
    * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for
      _res.flags are deprecated.
    * DNSSEC-related declarations and definitions have been removed from the
      <arpa/nameser.h> header file, and libresolv will no longer attempt to
      decode the data part of DNSSEC record types.
    * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p,
      ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the
      <arpa/nameser.h> header file because the distinction between RR types and
      meta-RR types is not officially standardized, subject to revision, and
      thus not suitable for encoding in a macro.
    * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook
      and rhook members of the res_state type in <resolv.h> have been removed.
    * For multi-arch support it is recommended to use a GCC which has
      been built with support for GNU indirect functions.
    * GDB pretty printers have been added for mutex and condition variable
      structures in POSIX Threads.
    * Tunables feature added to allow tweaking of the runtime for an application
      program.
    * A new version of condition variables functions have been implemented in
      the NPTL implementation of POSIX Threads to provide stronger ordering
      guarantees.
    * A new version of pthread_rwlock functions have been implemented to use a more
      scalable algorithm primarily through not using a critical section anymore to
      make state changes.
    * On ARM EABI (32-bit), generating a backtrace for execution contexts which
      have been created with makecontext could fail to terminate due to a
      missing .cantunwind annotation.  (CVE-2016-6323)
    * The DNS stub resolver functions would crash due to a NULL pointer
      dereference when processing a query with a valid DNS question type which
      was used internally in the implementation. (CVE-2015-5180)
  - Enable stack protector if part of %optflags
  - startcontext-cantunwind.patch: Removed
  - cpuid-assertion.patch: Removed
* Thu Oct 13 2016 schwab@suse.de
  - cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)
* Wed Oct 05 2016 schwab@suse.de
  - glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to
    /var/lib/nscd
  - glibc-2.3.90-langpackdir.diff: simplify
* Tue Aug 02 2016 schwab@suse.de
  - Update to glibc 2.24
    * The minimum Linux kernel version that this version of the GNU C Library
      can be used with is 3.2
    * The pap_AN locale has been deleted
    * The readdir_r and readdir64_r functions have been deprecated
    * The type `union wait' has been removed
    * A new NSS action is added to facilitate large distributed system
      administration
    * The deprecated __malloc_initialize_hook variable has been removed from
      the API
    * The long unused localedef --old-style option has been removed
    * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added
      to libm
    * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed
      (CVE-2016-3075)
    * Previously, getaddrinfo copied large amounts of address data to the
      stack, even after the fix for CVE-2013-4458 has been applied,
      potentially resulting in a stack overflow.  getaddrinfo now uses a
      heap allocation instead (CVE-2016-3706)
    * The glob function suffered from a stack-based buffer overflow when it
      was called with the GLOB_ALTDIRFUNC flag and encountered a long file
      name (CVE-2016-1234)
    * The Sun RPC UDP client could exhaust all available stack space when
      flooded with crafted ICMP and UDP messages (CVE-2016-4429)
    * The IPv6 name server management code in libresolv could result in a
      memory leak for each thread which is created, performs a failing
      naming lookup, and exits (CVE-2016-5417)
  - startcontext-cantunwind.patch: mark __startcontext as .cantunwind
    (bsc#974800, BZ #20435)
  - Removed patches:
    * 0001-Updated-translations-for-2.23.patch
    * 0002-Regenerate-libc.pot-for-2.23.patch
    * 0003-Regenerated-configure-scripts.patch
    * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch
    * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch
    * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
    * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch
    * 0008-Update-NEWS.patch
    * 0009-sln-use-stat64.patch
    * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch
    * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch
    * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch
    * 0013-Mention-BZ-19762-in-NEWS.patch
    * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch
    * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch
    * 0016-Fix-resource-leak-in-resolver-bug-19257.patch
    * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch
    * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch
    * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch
    * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch
    * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch
    * 0022-configure-fix-test-usage.patch
    * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
    * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch
    * 0025-getnameinfo-Do-not-preserve-errno.patch
    * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch
    * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch
    * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch
    * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch
    * 0030-hesiod-Remove-RCS-keywords.patch
    * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch
    * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch
    * 0033-malloc-Remove-NO_THREADS.patch
    * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch
    * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch
    * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch
    * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch
    * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch
    * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch
    * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch
    * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch
    * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch
    * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch
    * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch
    * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch
    * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch
    * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch
    * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch
    * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
    * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch
    * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch
    * 0052-Fix-tst-dlsym-error-build.patch
    * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch
    * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch
    * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch
    * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch
    * clntudp-call-alloca.patch
    * glibc-memset-nontemporal.diff
    * nis-initgroups-status.patch
    * nscd-gc-crash.patch
    * robust-mutex-deadlock.patch
    * strncat-avoid-array-bounds-warning.patch
* Wed Jun 29 2016 schwab@suse.de
  - strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for
    stncat on i586 (BZ #20260)
  - Update glibc.keyring
  - Unset MALLOC_CHECK_ during testsuite run
* Thu Jun 23 2016 schwab@suse.de
  - nsswitch.conf: Add fallback to files for passwd and group to prepare for
    libnsl removal.
* Wed Jun 22 2016 schwab@suse.de
  - nis-initgroups-status.patch: Return proper status from
    _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
  - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
    check for timeout (bsc#985170, BZ #20263)
* Thu Jun 09 2016 schwab@suse.de
  - nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
    [#19755])
* Mon May 30 2016 schwab@suse.de
  - clntudp-call-alloca.patch: do not use alloca in clntudp_call
    (CVE-2016-4429, bsc#980854, BZ #20112)
* Wed May 11 2016 schwab@suse.de
  - Import patches from 2.23 branch
    0001-Updated-translations-for-2.23.patch
    0002-Regenerate-libc.pot-for-2.23.patch
    0003-Regenerated-configure-scripts.patch
    0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch
    0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch
    0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
    0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch
    0008-Update-NEWS.patch
    0009-sln-use-stat64.patch
    0010-Add-sys-auxv.h-wrapper-to-include-sys.patch
    0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch
    0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch
    0013-Mention-BZ-19762-in-NEWS.patch
    0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch
    0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch
    0016-Fix-resource-leak-in-resolver-bug-19257.patch
    0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch
    0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch
    0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch
    0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch
    0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch
    0022-configure-fix-test-usage.patch
    0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
    0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch
    0025-getnameinfo-Do-not-preserve-errno.patch
    0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch
    0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch
    0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch
    0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch
    0030-hesiod-Remove-RCS-keywords.patch
    0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch
    0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch
    0033-malloc-Remove-NO_THREADS.patch
    0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch
    0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch
    0036-malloc-Remove-malloc-hooks-from-fork-handler.patch
    0037-malloc-Add-missing-internal_function-attributes-on-f.patch
    0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch
    0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch
    0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch
    0041-nss_dns-Check-address-length-before-creating-addrinf.patch
    0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch
    0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch
    0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch
    0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch
    0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch
    0047-strfmon_l-Use-specified-locale-for-number-formatting.patch
    0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch
    0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
    0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch
    0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch
    0052-Fix-tst-dlsym-error-build.patch
    0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch
    0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch
    0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch
    0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch
  - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727
  - resolv-mem-leak.patch: renamed to
    0016-Fix-resource-leak-in-resolver-bug-19257.patch
  - no-long-double.patch: renamed to
    0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
  - glibc-gcc6.patch: renamed to
    0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
* Mon May 09 2016 schwab@suse.de
  - glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories
  - glibc-2.3.locales.diff.bz2: likewise
* Mon Apr 25 2016 jslaby@suse.com
  - glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with
    - Wparentheses
* Mon Apr 11 2016 schwab@suse.de
  - Add compatibility symlinks for LSB 3.0 (fate#318933)
* Mon Mar 21 2016 schwab@suse.de
  - powerpc-elision-enable-envvar.patch: enable TLE only if
    GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)
* Tue Mar 15 2016 schwab@suse.de
  - ldd-system-interp.patch: Restore warning about execution permission, it
    is still needed for noexec mounts (bsc#915985)
* Tue Mar 08 2016 idonmez@suse.com
  - Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8)
    and rh#902094 . Added with glibc-c-utf8-locale.patch.
  - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for
    C.UTF-8 same as C locale.
* Mon Mar 07 2016 schwab@suse.de
  - Move %install_info_delete to %preun
  - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer
    acceptable
* Tue Feb 23 2016 schwab@suse.de
  - no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE
* Mon Feb 22 2016 schwab@suse.de
  - Update to glibc 2.23 release.
    * Unicode 8.0.0 Support
    * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess
      the kernel-internal CPU set size
    * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64
    * getaddrinfo now detects certain invalid responses on an internal
      netlink socket
    * A defect in the malloc implementation, present since glibc 2.15 (2012)
      or glibc 2.10 via --enable-experimental-malloc (2009), could result in
      the unnecessary serialization of memory allocation requests across
      threads
    * The obsolete header <regexp.h> has been removed
    * The obsolete functions bdflush, create_module, get_kernel_syms,
      query_module and uselib are no longer available to newly linked
      binaries
    * Optimized string, wcsmbs and memory functions for IBM z13.
    * Newly linked programs that define a variable called signgam will no
      longer have it set by the lgamma, lgammaf and lgammal functions
  - Removed patches:
    * dont-remove-nodelete-flag.patch
    * openat64-readd-o-largefile.patch
    * mntent-blank-line.patch
    * opendir-o-directory-check.patch
    * strcoll-remove-strdiff-opt.patch
    * ld-pointer-guard.patch
    * tls-dtor-list-mangling.patch
    * powerpc-lock-elision-race.patch
    * prelink-elf-rtype-class.patch
    * vector-finite-math-aliases.patch
    * powerpc-elision-adapt-param.patch
    * catopen-unbound-alloca.patch
    * strftime-range-check.patch
    * hcreate-overflow-check.patch
    * errorcheck-mutex-no-elision.patch
    * refactor-nan-parsing.patch
    * send-dg-buffer-overflow.patch
    * isinf-cxx11-conflict.patch
    * ibm93x-redundant-shift-si.patch
    * iconv-reset-input-buffer.patch
    * tzset-tzname.patch
    * static-dlopen.patch
* Thu Feb 18 2016 schwab@suse.de
  - isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with
    C++11 (bsc#963700, BZ #19439)
* Wed Feb 17 2016 schwab@suse.de
  - tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling
    (BZ #19018)
  - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits
    for prelink (BZ #19178)
  - vector-finite-math-aliases.patch: Better workaround for aliases of
    * _finite symbols in vector math library (BZ# 19058)
  - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision
    transient failure adapt param (BZ #19174)
  - catopen-unbound-alloca.patch: Fix unbound alloca in catopen
    (CVE-2015-8779, bsc#962739, BZ #17905)
  - strftime-range-check.patch: Add range check on time fields
    (CVE-2015-8776, bsc#962736, BZ #18985)
  - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778,
    bsc#962737, BZ #18240)
  - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error
    checking mutex (bsc#956716, BZ #17514)
  - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads
    (CVE-2014-9761, bsc#962738, BZ #16962)
  - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer
    overflow (CVE-2015-7547, bsc#961721, BZ #18665)
  - powerpc-lock-elision-race.patch: renamed from
    0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch
* Mon Feb 15 2016 schwab@suse.de
  - Add audit-devel and libcap-devel to BuildRequires, for use by nscd
* Thu Nov 26 2015 schwab@suse.de
  - reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock
    on fork (bsc#958315, BZ #19282)
* Wed Nov 18 2015 schwab@suse.de
  - resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257)
  - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set
    DST rules only (BZ #19253)
* Mon Oct 26 2015 schwab@suse.de
  - glibc-2.3.90-noversion.diff: use stat64
* Mon Oct 19 2015 schwab@suse.de
  - ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777,
    bsc#950944, BZ #18928)
* Mon Oct 12 2015 schwab@suse.de
  - strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based
    optimization (BZ #18589)
* Thu Oct 08 2015 schwab@suse.de
  - iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE
    error handler (BZ #18830)
* Wed Sep 30 2015 normand@linux.vnet.ibm.com
  - new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock
    0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch
* Thu Sep 24 2015 schwab@suse.de
  - nss-files-long-lines-2.patch: Properly reread entry after failure in
    nss_files getent function (bsc#945779, BZ #18991)
* Wed Sep 16 2015 schwab@suse.de
  - fnmatch-collating-elements.patch: Fix fnmatch handling of collating
    elements (BZ #17396, BZ #16976)
* Mon Sep 07 2015 schwab@suse.de
  - opendir-o-directory-check.patch: Fix opendir inverted o_directory_works
    test
  - static-dlopen.patch: Static dlopen default library search path fix
    (bsc#937853)
* Mon Aug 31 2015 schwab@suse.de
  - mntent-blank-line.patch: Fix memory corruption w/blank lines
* Mon Aug 10 2015 schwab@suse.de
  - dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from
    all loaded objects on failed dlopen
  - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64
* Wed Aug 05 2015 schwab@suse.de
  - Update to glibc 2.22 release.
    * Cache information can be queried via sysconf() function on s390
    * A buffer overflow in gethostbyname_r and related functions performing DNS
      requests has been fixed.  (CVE-2015-1781)
    * The time zone file parser has been made more robust against crafted time
      zone files
    * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors
      for LD and GD on x86 and x86-64, has been implemented.
    * Character encoding and ctype tables were updated to Unicode 7.0.0
    * Added vector math library named libmvec
    * A new fmemopen implementation has been added with the goal of POSIX
      compliance.
    * The header <regexp.h> is deprecated, and will be removed in a future
      release.
    * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211
      bsc#940195 bsc#940332 bsc#944494 bsc#968787
  - Patches from upstream removed
    * htm-tabort.patch
    * o-tmpfile.patch
    * memcpy-chk-non-SSE2.patch
    * pthread-mutexattr-gettype-kind.patch
    * powerpc-software-sqrt.patch
    * static-tls-dtv-limit.patch
    * threaded-trim-threshold.patch
    * resolv-nameserver-handling.patch
    * nss-separate-state-getXXent.patch
    * aarch64-sigstksz.patch
    * heap-top-corruption.patch
    * pthread-join-deadlock.patch
* Mon Jul 27 2015 schwab@suse.de
  - pthread-join-deadlock.patch: Use IE model for static variables in
    libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)
* Wed Jul 22 2015 schwab@suse.de
  - glibc-nodate.patch: fix verification of timestamp
* Tue Jul 21 2015 meissner@suse.com
  - also filter out -fstack-protector-strong
* Mon Jun 22 2015 schwab@suse.de
  - getaddrinfo-ipv6-sanity.diff: Remove.  It breaks services that start
    before IPv6 is up (bsc#931399)
  - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.
* Tue Jun 09 2015 schwab@suse.de
  - Add /usr/include/gnu/lib-names-.*.h to baselibs
  - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS
    offset in the DTV (bsc#930015, BZ #18457)
  - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if
    top chunk is MINSIZE (BZ #18502)
* Wed Apr 08 2015 mgorman@suse.com
  - threaded-trim-threshold.patch: Fix regression in threaded application
    malloc performance (bsc#915955, BZ #17195)
* Thu Apr 02 2015 schwab@suse.de
  - aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)
* Mon Mar 30 2015 schwab@suse.de
  - powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ
    [#17967])
  - nss-separate-state-getXXent.patch: Separate internal state between
    getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007)
  - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS
    limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621,
    BZ #17628)
* Mon Mar 09 2015 schwab@suse.de
  - resolv-nameserver-handling.patch: Replace with simpler version with more
    compatibility
* Mon Mar 02 2015 schwab@suse.de
  - memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs
    (bsc#920084)
* Tue Feb 24 2015 schwab@suse.de
  - resolv-nameserver-handling.patch: Rewrite handling of nameserver
    configuration in resolver
* Thu Feb 12 2015 schwab@suse.de
  - htm-tabort.patch: Fix TABORT encoding for little endian
* Mon Feb 09 2015 schwab@suse.de
  - Update to glibc 2.21 release.
    * A new semaphore algorithm has been implemented in generic C code for all
      machines
    * Added support for TSX lock elision of pthread mutexes on powerpc32,
      powerpc64 and powerpc64le
    * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for
      AArch64
    * i386 memcpy functions optimized with SSE2 unaligned load/store
    * New locales: tu_IN, bh_IN, raj_IN, ce_RU
    * The obsolete sigvec function has been removed
    * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402
      CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222
  - Patches from upstream removed
    * ifunc-x86-slow-sse4.patch
    * pthread-mutex-trylock-elision.patch
  - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with
    non-default O_DIRECTORY (BZ #17912)
* Tue Oct 28 2014 schwab@suse.de
  - Update to crypt_blowfish 1.3.
    * Add support for the $2b$ prefix.
  - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit
    (BZ #17501)

Files

/etc/bindresvport.blacklist
/etc/gai.conf
/etc/ld.so.cache
/etc/ld.so.conf
/etc/nsswitch.conf
/etc/rpc
/lib/ld64.so.1
/lib64/ld-lsb-s390x.so.3
/lib64/libBrokenLocale.so.1
/lib64/libanl.so.1
/lib64/libc.so.6
/lib64/libc_malloc_debug.so.0
/lib64/libdl.so.2
/lib64/libm.so.6
/lib64/libnss_compat.so.2
/lib64/libnss_db.so.2
/lib64/libnss_dns.so.2
/lib64/libnss_files.so.2
/lib64/libnss_hesiod.so.2
/lib64/libpthread.so.0
/lib64/libresolv.so.2
/lib64/librt.so.1
/lib64/libthread_db.so.1
/lib64/libutil.so.1
/sbin/ldconfig
/usr/bin/gencat
/usr/bin/getconf
/usr/bin/getent
/usr/bin/iconv
/usr/bin/ld.so
/usr/bin/ldd
/usr/bin/locale
/usr/bin/localedef
/usr/lib/getconf
/usr/lib/getconf/POSIX_V6_LP64_OFF64
/usr/lib/getconf/POSIX_V7_LP64_OFF64
/usr/lib/getconf/XBS5_LP64_OFF64
/usr/lib/getconf/getconf
/usr/sbin/iconvconfig
/usr/share/doc/packages/glibc
/usr/share/doc/packages/glibc/gai.conf
/usr/share/licenses/glibc
/usr/share/licenses/glibc/LICENSES
/usr/share/man/man1/gencat.1.gz
/usr/share/man/man1/getconf.1.gz
/usr/share/man/man5/locale.alias.5.gz
/var/cache/ldconfig


Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Apr 3 23:58:30 2024