Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package glibc for openSUSE:Factory checked in at 2023-10-20 23:15:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/glibc (Old) and /work/SRC/openSUSE:Factory/.glibc.new.1945 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "glibc" Fri Oct 20 23:15:22 2023 rev:281 rq:1118597 version:2.38 Changes: -------- --- /work/SRC/openSUSE:Factory/glibc/glibc.changes 2023-10-05 20:02:19.876931606 +0200 +++ /work/SRC/openSUSE:Factory/.glibc.new.1945/glibc.changes 2023-10-20 23:15:23.579511863 +0200 @@ -1,0 +2,16 @@ +Wed Oct 18 11:54:04 UTC 2023 - Andreas Schwab <sch...@suse.de> + +- dtors-reverse-ctor-order.patch: Remove, has been reverted + +------------------------------------------------------------------- +Tue Oct 17 12:00:11 UTC 2023 - Andreas Schwab <sch...@suse.de> + +- Avoid use of SSE in i586 build + +------------------------------------------------------------------- +Mon Oct 9 08:50:18 UTC 2023 - Andreas Schwab <sch...@suse.de> + +- Add systemd also to gshadow lookups (jsc#PED-5188) +- For SLE continue to use nsswitch.conf without systemd + +------------------------------------------------------------------- Old: ---- dtors-reverse-ctor-order.patch New: ---- sle-nsswitch.conf ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ glibc.spec ++++++ --- /var/tmp/diff_new_pack.kalqxl/_old 2023-10-20 23:15:25.043565280 +0200 +++ /var/tmp/diff_new_pack.kalqxl/_new 2023-10-20 23:15:25.047565426 +0200 @@ -170,6 +170,7 @@ Source2: http://savannah.gnu.org/project/memberlist-gpgkeys.php?group=libc&download=1#/glibc.keyring Source4: manpages.tar.bz2 Source5: nsswitch.conf +Source6: sle-nsswitch.conf Source7: bindresvport.blacklist Source9: glibc.rpmlintrc Source10: baselibs.conf @@ -316,20 +317,18 @@ Patch1006: libio-io-vtables.patch # PATCH-FIX-UPSTREAM elf: Do not run constructors for proxy objects Patch1007: call-init-proxy-objects.patch -# PATCH-FIX-UPSTREAM elf: Always call destructors in reverse constructor order (BZ #30785) -Patch1008: dtors-reverse-ctor-order.patch # PATCH-FIX-UPSTREAM Stack read overflow with large TCP responses in no-aaaa mode (CVE-2023-4527, BZ #30842) -Patch1009: no-aaaa-read-overflow.patch +Patch1008: no-aaaa-read-overflow.patch # PATCH-FIX-UPSTREAM getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806, BZ #30843) -Patch1010: getcanonname-use-after-free.patch +Patch1009: getcanonname-use-after-free.patch # PATCH-FIX-UPSTREAM Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 (CVE-2023-5156, BZ #30884) -Patch1011: getaddrinfo-memory-leak.patch +Patch1010: getaddrinfo-memory-leak.patch # PATCH-FIX-UPSTREAM io: Do not implement fstat with fstatat -Patch1012: fstat-implementation.patch +Patch1011: fstat-implementation.patch # PATCH-FIX-UPSTREAM Propagate GLIBC_TUNABLES in setxid binaries -Patch1013: setxid-propagate-glibc-tunables.patch +Patch1012: setxid-propagate-glibc-tunables.patch # PATCH-FIX-UPSTREAM tunables: Terminate if end of input is reached (CVE-2023-4911) -Patch1014: tunables-string-parsing.patch +Patch1013: tunables-string-parsing.patch ### # Patches awaiting upstream approval @@ -566,7 +565,6 @@ %patch1011 -p1 %patch1012 -p1 %patch1013 -p1 -%patch1014 -p1 %endif %patch2000 -p1 @@ -629,6 +627,14 @@ done %if "%flavor" == "i686" BuildFlags+=" -march=i686 -mtune=generic" +%else +%if !%{build_cross} +%ifarch i586 +# workaround for unaligned stack in java-11-openjdk and mariadb +# by avoiding use of SSE +BuildFlags+=" -march=i586" +%endif +%endif %endif %if 0%{?with_gcc:1} BuildCC="gcc-%{with_gcc}" @@ -957,7 +963,7 @@ %if %suse_version > 1500 install -D -m 644 %{SOURCE5} %{buildroot}%{_prefix}/etc/nsswitch.conf %else -install -m 644 %{SOURCE5} %{buildroot}/etc +install -m 644 %{SOURCE6} %{buildroot}/etc/nsswitch.conf %endif %if %{build_html} ++++++ nsswitch.conf ++++++ --- /var/tmp/diff_new_pack.kalqxl/_old 2023-10-20 23:15:25.323575497 +0200 +++ /var/tmp/diff_new_pack.kalqxl/_new 2023-10-20 23:15:25.323575497 +0200 @@ -63,7 +63,7 @@ aliases: files usrfiles ethers: files usrfiles -gshadow: files usrfiles +gshadow: files usrfiles systemd netgroup: files nis protocols: files usrfiles publickey: files ++++++ sle-nsswitch.conf ++++++ # # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # Valid databases are: aliases, ethers, group, gshadow, hosts, # initgroups, netgroup, networks, passwd, protocols, publickey, # rpc, services, and shadow. # # Valid service provider entries include (in alphabetical order): # # compat Use /etc files plus *_compat pseudo-db # db Use the pre-processed /var/db files # dns Use DNS (Domain Name Service) # files Use the local files in /etc # hesiod Use Hesiod (DNS) for user lookups # nis Use NIS (NIS version 2), also called YP # nisplus Use NIS+ (NIS version 3) # # See `info libc 'NSS Basics'` for more information. # # Commonly used alternative service providers (may need installation): # # ldap Use LDAP directory server # myhostname Use systemd host names # mymachines Use systemd machine names # mdns*, mdns*_minimal Use Avahi mDNS/DNS-SD # resolve Use systemd resolved resolver # sss Use System Security Services Daemon (sssd) # systemd Use systemd for dynamic user option # winbind Use Samba winbind support # wins Use Samba wins support # wrapper Use wrapper module for testing # # Notes: # # 'sssd' performs its own 'files'-based caching, so it should generally # come before 'files'. # # WARNING: Running nscd with a secondary caching service like sssd may # lead to unexpected behaviour, especially with how long # entries are cached. # # Installation instructions: # # To use 'db', install the appropriate package(s) (provide 'makedb' and # libnss_db.so.*), and place the 'db' in front of 'files' for entries # you want to be looked up first in the databases, like this: # # passwd: db files # shadow: db files # group: db files passwd: compat group: compat shadow: compat # Allow initgroups to default to the setting for group. # initgroups: compat hosts: files dns networks: files dns aliases: files usrfiles ethers: files usrfiles gshadow: files usrfiles netgroup: files nis protocols: files usrfiles publickey: files rpc: files usrfiles services: files usrfiles automount: files nis bootparams: files netmasks: files
