RHBA-2007:0210 - Bug Fix Advisory

Topic

Updated glibc packages that address several bugs are now available.

Description

The GNU libc packages (known as glibc) contain the standard C libraries
used by applications.

This erratum applies the following bug fixes in the GNU C Library:

• - fix application crashes when doing NSS lookups through nscd mmapped

databases and nscd decides to start garbage collection during the lookups

• - fix a race condition in getXXbyYY_r
• - fix NIS getservbyname when proto is NULL
• - fix ia64 _mcount
• - fix nss_compat +group handling
• - fix hasmntopt
• - fix setusershell and getusershell
• - various problems in strtod
• - allow suid apps to setenv NIS_PATH and influence through that nis_list

and nis_lookup

• - link nscd against libcap, ensure even after dropping priviledges nscd

has capabilities for auditing

• - fix strxfrm
• - fix i?86 floor and ceil inlines
• - fix xdrmem_setpos
• - fix :include: /etc/alias handling
• - avoid unbounded use of alloca in glob for very large number of files
• - fix getnameinfo error handling
• - re-enable rtkaio
• - fix aio_return in librtkaio
• - fix nis_getnames if the default domain doesn't contain at least two dots
• - change realloc to try harder to allocate memory before returning NULL
• - add nosegneg lib variants on i686
• - fix pthread_cond_{,timed}wait cancellation
• - fix lrint on ppc32
• - fix malloc allocating more than half of address space
• - fix mktime on 32-bit arches a few years after 2038
• - fix pthread_create called from cancellation handlers
• - fix regex case insensitive searches with characters where upper and

lower case multibyte representations have different length (e.g. I and
dotless i)

• - randomize resolver query ids before use instead after use
• - avoid malloc infinite looping for allocations larger than the system can

allocate

• - in malloc limit number of unsorted block sort iterations
• - fix early timeout of initgroups data in nscd
• - fix out of memory behavior in gettext
• - fix missing destructor calls in dlclose
• - only define O_DIRECT with -D_GNU_SOURCE on ia64 to match all other arches
• - fix errno if nice() fails
• - fix get{serv,rpc}ent{,_r} if NIS map is empty
• - make localedef more robust on invalid input
• - fix getpid after fork in some threaded NPTL programs
• - expand $LIB/$PLATFORM in LD_LIBRARY_PATH
• - fix cacosh{,f,l}
• - provide getlogin prototype even for -D_XOPEN_SOURCE=500
• - fix UINT8_C and UINT16_C stdint.h macros
• - fix pthread_join in already cancelled thread
• - fix too large key check in pthread_setspecific
• - fix %a/%A printing with zero precision
• - fix invalid free in error(3)
• - if some test gets stuck, kill the tee process after make check finishes
• - nss_compat fixes
• - fix l{,l}rint{,f,l} rounding of values around zero
• - fix libSegFault.so register dump on ppc and ppc64
• - don't use prelink info if LD_DYNAMIC_WEAK=1
• - fix dlclose
• - fix nscd database growing
• - speedup initgroups when using NIS+
• - __nisfind_server NIS+ fixes

All users of glibc should upgrade to these updated packages, which apply
these fixes.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 178934 - [RHEL4] Log messages: nscd: Can't send to audit system...
• BZ - 194321 - Message encoding not converted when ENOMEM error
• BZ - 200823 - Backported glibc fixes for RHEL4.5 glibc
• BZ - 202991 - Grep with certain expressions breaks in libc
• BZ - 203237 - getservent crashes when the machine uses nis and the services map is empty (Regression).
• BZ - 203728 - localedef segfault
• BZ - 204122 - getnameinfo() does not return EAI_AGAIN when name servers are down
• BZ - 206329 - libresolv query ids reused after fork()
• BZ - 206483 - rpc.mountd segfaults when NFS mount is attempted from remote system
• BZ - 208831 - [RHEL4] Numerous Segfaults after Installation of Update 4
• BZ - 209283 - [RHEL4] Crash when doing ls with loads of files
• BZ - 215572 - getaliasbyname segfaults when reading "name: :include:/path" alias

CVEs

(none)

References

(none)