# changelog

author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-9
changelog:
  - fix CVE-2018-16329 CVE-2020-27759 CVE-2020-27760 CVE-2020-27761 CVE-2020-27762
    CVE-2020-27764 CVE-2020-27765 CVE-2020-27765 CVE-2020-27766 CVE-2020-27767 CVE-2020-27770


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: luhuaxin <luhuaxin@huawei.com> - 2.31.1-15
changelog:
  - Patch synchronization and update dependency name
  - Type:cves
  - ID:CVE-2019-1010204
  - SUG:NA
  - DESC:fix CVE-2019-1010204


author: openEuler Buildteam <buildteam@openeuler.org> - 2.31.1-16
changelog:
  - Type:cves
  - ID:CVE
  - SUG:NA
  - DESC:fix CVE-2018-20671 CVE-2019-12972 CVE-2019-17450 CVE-2019-17451
         CVE-2018-18309 CVE-2018-18309 CVE-2018-18605 CVE-2018-18607 CVE-2018-18606
         CVE-2018-1000876 CVE-2018-20002 CVE-2018-20002 CVE-2019-1010180
         fix failure in the libiberty testsuite
         fix stack-buffer-overflow, and use-of-uninitialized-value and shift exponent -1 is negative


author: openEuler Buildteam <buildteam@openeuler.org> - 2.33.1-3
changelog:
  - Type:bugfix
  - ID:CVE
  - SUG:NA
  - DESC:add patch to solve complaining about relocs in the .gnu.build.attribute


author: openEuler Buildteam <buildteam@openeuler.org> - 2.33.1-4
changelog:
  - Type:bugfix
  - ID:CVE
  - SUG:NA
  - DESC:fix the issue that the permission changes due to the upgrade and
         backport patch to fix memory leak and overflow


author: zoulin <zoulin13@huawei.com> - 2.34-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a memory leak in the testcase fuzz_readelf
        Fix use-of-uninitialized-value in print_insn_mwtag
        Fix use-of-ninitialized-value in _bfd_xcoff_slurp_armap
        Fix a potential use-of-an-uninitialised-value in the print_insn_ns32k of fuzz_disassemble


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.34-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix static library file conflicts when install both binutils and binutils-devel


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: huzunhao<huzunhao2@huawei.com> - 2.58.1-3
changelog:
  - Type:cves
  - ID:CVE-2019-12450 CVE-2019-13012
  - SUG:restart
  - DESC:fix CVE-2019-12450 CVE-2019-13012


author: liqingqing <liqingqing3@huawei.com> - 2.28-29
changelog:
  - remove country selection from tzselect
  - fix some bugs https://sourceware.org/git/?p=glibc.git;a=commit;h=1df872fd74f730bcae3df201a229195445d2e18a
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=823624bdc47f1f80109c9c52dee7939b9386d708
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=bc10e22c90e42613bd5dafb77b80a9ea1759dd1b
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=6c29942cbf059aca47fd4bbd852ea42c9d46b71f
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=31effacee2fc1b327bedc9a5fcb4b83f227c6539
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=5b06f538c5aee0389ed034f60d90a8884d6d54de
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=57ada43c905eec7ba28fe60a08b93a52d88e26c1
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=e0e4c321c3145b6ac0e8f6e894f87790cf9437ce
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=182a3746b8cc28784718c8ea27346e97d1423945
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=02d8b5ab1c89bcef2627d2b621bfb35b573852c2
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=f59a54ab0c2dcaf9ee946df2bfee9d4be81f09b8
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=fefa21790b5081e5d04662a240e2efd18603ef86
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=2bd81b60d6ffdf7e0d22006d69f4b812b1c80513
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=a55541fd1c4774d483c2d2b4bd17bcb9faac62e7
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=b6d2c4475d5abc05dd009575b90556bdd3c78ad0
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=8a80ee5e2bab17a1f8e1e78fab5c33ac7efa8b29
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=c0fd3244e71db39cef1e2d1d8ba12bb8b7375ce4
  - fix CVE-2016-10739 CVE-2019-19126 CVE-2019-6488
  - add pie compile option for debug/Makefile and remove -static for build-locale-archive


author: Wang Shuo<wangshuo47@huawei.com> - 2.28-40
changelog:
  - add filelist to improve the scalability
  - disable DEBUG for performence
  - disable parallel compilation for locale
  - backport many patch for bugfix:
  - User provided stack should not be released nor madvised at thread exit
  - removes the HP_TIMING_BITS usage for fast random bits
  - reset the state a-vector-registe fter outputting the second whcar_t characte(Bug 25734)
  - implement avx2 offset check condition for strncmp function[BZ #25933]
  - bugfix for __nptl_setxid and exiting detached thread(bug 25942)
  - use RDX_LP to compare against __x86_shared_non_temporal_threshold in assembly code[BZ #25966]
  - Since "vpxor %xmmN, %xmmN, %xmmN" clears the whole vector register
  - To improve the performance of memset


author: liqingqing_1229<liqingqing3@huawei.com> - 2.28-44
changelog:
  - fix bug 26100: correct locking and cancellation cleanup in syslog functions. 
  - origin bugzilla link is https://sourceware.org/bugzilla/show_bug.cgi?id=26100


author: zhaowei<zhaowei23@huawei.com> - 2.28-45
changelog:
  - fix bug 965941: fix build with libselinux >= 3.1 
  - origin bugzilla link is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965941


author: Qingqing Li <liqingqing3@huawei.com> - 2.28-46
changelog:
  - fix handling of collating symbols in fnmatch.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?id=26620
  - fix SEM_STAT_ANY kernel argument pass.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?26637
  - fix i686 test-strftime3.c compile warning.


author: liusirui<liusirui@huawei.com> - 2.28-47
changelog:
  - Fix CVE-2020-27618, iconv accept redundant shift sequences in IBM1364 [BZ #26224]
    https://sourceware.org/bugzilla/show_bug.cgi?id=26224


author: Wang Shuo <wangshuo_1994@foxmail.com> - 2.28-48
changelog:
  - Fix CVE-2020-29573, Harden printf against non-normal long double values
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-29573
    https://sourceware.org/bugzilla/show_bug.cgi?id=26649


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-49
changelog:
  - Fix CVE-2020-29562, Fix incorrect UCS4 inner loop bounds (BZ#26923)
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29562
    https://sourceware.org/bugzilla/show_bug.cgi?id=26923


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-50
changelog:
  - Fix stack missing in _dl_tlsdesc_dynamic
    Fix buffer overrun in EUC-KR conversion module (bz #24973)
    Remove unbounded alloca usage from getmntent [BZ#27083]
    https://sourceware.org/pipermail/libc-alpha/2021-January/121272.html
    https://sourceware.org/pipermail/libc-alpha/2021-January/121330.html
    https://sourceware.org/bugzilla/show_bug.cgi?id=24973
    https://sourceware.org/bugzilla/show_bug.cgi?id=27083


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-51
changelog:
  - Fix bug 26791: Use O_CLOEXEC in sysconf
    bugzilla link: https://sourceware.org/bugzilla/show_bug.cgi?id=26791
  - Fix bug 26853: aarch64: Add unwind information to _start
    bugzilla link: https://sourceware.org/bugzilla/show_bug.cgi?id=26853


author: shanzhikun <shanzhikun@huawei.com> - 2.28-54
changelog:
  - elf: Allow dlopen of filter object to work [BZ #16272]
    https://sourceware.org/bugzilla/show_bug.cgi?id=16272
  - elf: Fix pldd (BZ#18035)
    https://sourceware.org/bugzilla/show_bug.cgi?id=18035


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-55
changelog:
  - Fix CVE-2021-3326, Fix assertion failure in ISO-2022-JP-3 module (bug 27256)
    https://nvd.nist.gov/vuln/detail/CVE-2021-3326
    https://sourceware.org/bugzilla/show_bug.cgi?id=27256


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: wenjun<wenjun8@huawei.com> - 4.0.9-11.h1
changelog:
  - Type:cves
  - ID:CVE-2018-18557 CVE-2018-17101 CVE-2018-17100 CVE-2018-12900 CVE-2018-18661
  - SUG:NA
  - DESC:fix above cves


author: wangye <wangye70@huawei.com> - 4.1.0-2
changelog:
  - Type:cves
  - ID:CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524
  - SUG:NA
  - DESC: fix CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


