RHBA-2006:0124 - Bug Fix Advisory

Topic

Updated glibc packages that address several bugs are now available.

Description

The GNU libc packages (known as glibc) contain the standard C libraries
used by applications.

This erratum addresses the following bugs in the GNU C Library:

• - fix argument checking in yp_order
• - don't cache euid/egid in euidaccess
• - avoid unnecessary socket read in nscd client code if hostname has no aliases
• - fix do_ypcall in case of memory allocation failure
• - fix strncmp on PowerPC
• - define shmatt_t type on ia64 in <sys/shm.h>
• - remove LinuxThreads man pages to avoid confusion, section 3p man pages

are much more accurate for NPTL

• - fix bindresvport to really try more ports if range 600 .. 1023 is full
• - add to dtv_t array flags whether a pointer has been allocated statically

or dynamically and only free the dynamically allocated ones

• - make sure waitid syscall is used on PowerPC and mainframe
• - on IA-64 don't abort on unhandled math function exception codes
• - remove use of _RE_ARGS in <regex.h>
• - fix setuid etc. hangs if some thread exits during the call
• - fix memory leak in innetgr
• - thread-safety fix for innetgr
• - fix getent hosts IP for IPv4 IPs
• - allow nscd log to grow beyond 2GB on 32-bit arches
• - avoid freeing static buffer in getpw* when using nscd and nscd GC is in

progress

• - fix a race in pthread_cancel_init on ia64
• - nscd persistent database checker
• - fix resolving over TCP
• - write LD_DEBUG= conflict processing message to LD_DEBUG_OUTPUT stream

instead of stdout

• - increase the size ELF header size read from the beginning of libraries

on 64-bit arches to avoid unnecessary additional reads

• - handle EINTR in sigwait properly
• - use posix_fallocate instead of ftruncate in nscd
• - msync hash table and header in nscd for persistent caches
• - fix argp_error and argp_failure
• - print real thread number, max threads, restart interval and paranoia

setting in nscd statistics

• - fix nis_leaf_of_r for buflen == 0
• - use stat64 instead of stat for nscd persistent caches
• - be more verbose in nscd -d -d -d debug mode
• - fix memory leaks in setlocale
• - handle EINTR properly in nscd
• - hypotf fix
• - fix getlogin_r call in glob
• - fix memory leak in getent netgroup printing
• - fix obstack.h (obstack_int_grow_fast) for !__STDC__
• - fix typo in xtrace
• - fix sockatmark
• - fix __stack_prot if RELRO region wasn't properly aligned
• - fix lddlibc4
• - don't use needlessly TLS LD model in libc.so
• - fix fmemopen
• - fix mbrtowc
• - add -a option to getconf
• - fix fgets with last argument 1
• - fix fwrite
• - fix strto{f,d,ld}* in tr_TR locale
• - fix %n readonly string checks
• - -Wundef fix for features.h
• - fix csqrt{,f,l}
• - argp_usage inline can throw
• - fix handling of 2GB+ lines in getdelim
• - fix handling of very high year in {,as}ctime
• - fix {,as}ctime_r
• - fix tgmath.h
• - fix strxfrm_l
• - make sure LLONG_MAX etc. are defined with -D_GNU_SOURCE or
• D_ISOC99_SOURCE, even when not using -std=c99
• - fix address ordering in getaddrinfo
• - fix __{BEGIN,END}_NAMESPACE_* pairing in headers
• - fix error handling in *printf
• - fix off by one error in NIS publickey handling
• - fix svc_getreqset on 64-bit arches
• - fix backtrace_symbols_fd comment
• - fix AI_ALL handling in getaddrinfo
• - fix pthread_once on x86_64 misaligning stack

All users of glibc should upgrade to these updated packages, which resolve
these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 165693 - function erfc abort on some value
• BZ - 169051 - Memory leak when using innetgr function
• BZ - 169831 - "getent hosts" doesn't use /etc/hosts for reverse lookup anymore
• BZ - 172761 - Crash on pthread_exit() or pthread_self()
• BZ - 173358 - glibc attempts to free an invalid pointer

CVEs

(none)

References

(none)