- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)

- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)

  (CVE-2024-33599, bsc#1223423, BZ #31677)
  (CVE-2024-33600, bsc#1223424, BZ #31678)
  (CVE-2024-33600, bsc#1223424, BZ #31678)
  CVE-2024-33602, bsc#1223425, BZ #31680)

• Files Changed
• Browse Source

- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425)

• Files Changed
• Browse Source

- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)

• Files Changed
• Browse Source

- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)

• Files Changed
• Browse Source

- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  #30945)
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)

• Files Changed
• Browse Source

- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)

• Files Changed
• Browse Source

- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  #31402)

• Files Changed
• Browse Source

- Add libnsl1 to baselibs.conf (bsc#1219640)

• Files Changed
• Browse Source

- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)

- Change minimum GCC to 13

- Split off libnsl.so.1 into a separate package

• Files Changed
• Browse Source

- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)

• Files Changed
• Browse Source

- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)

- Remove systemd from shadow and gshadow lookups (bsc#1217220)

• Files Changed
• Browse Source

jsc#PED-6574

• Files Changed
• Browse Source

initialize package

• Browse Source