diff --git a/backport-nss-make-sure-startp_initialized-do-first.patch b/backport-nss-make-sure-startp_initialized-do-first.patch new file mode 100644 index 0000000000000000000000000000000000000000..0c28fd20e726089da1c63e0edf45eb48bdeb60c5 --- /dev/null +++ b/backport-nss-make-sure-startp_initialized-do-first.patch @@ -0,0 +1,26 @@ +From 9d99c240898d67e7942a9dc0b9967419118a6407 Mon Sep 17 00:00:00 2001 +From: chengyechun +Date: Sat, 27 Nov 2021 10:04:03 +0800 +Subject: [PATCH] backport-nss-make-sure-startp_initialized-do-first + +The function atomic_read_barrier is added for preventing coredump when the script frequently invokes +the getpwnam_r function. +--- + nss/getXXbyYY_r.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/nss/getXXbyYY_r.c b/nss/getXXbyYY_r.c +index 5ebf36c..21b0d98 100644 +--- a/nss/getXXbyYY_r.c ++++ b/nss/getXXbyYY_r.c +@@ -297,6 +297,7 @@ INTERNAL (REENTRANT_NAME) (ADD_PARAMS, LOOKUP_TYPE *resbuf, char *buffer, + } + else + { ++ atomic_read_barrier(); + fct.l = start_fct; + nip = startp; + #ifdef PTR_DEMANGLE +-- +1.8.3.1 + diff --git a/glibc.spec b/glibc.spec index 572389789d65081b4f0f8db6bdeffd8b08e113eb..6cfb461bbf11cab1eec02940497b03bed10b42ea 100644 --- a/glibc.spec +++ b/glibc.spec @@ -59,7 +59,7 @@ ############################################################################## Name: glibc Version: 2.28 -Release: 79 +Release: 80 Summary: The GNU libc libraries License: %{all_license} URL: http://www.gnu.org/software/glibc/ @@ -138,6 +138,7 @@ Patch54: backport-CVE-2021-38604-0002-librt-fix-null-pointer-deference.patch Patch55: backport-ldconfig-avoid-leak-on-empty-paths-in-config-file.patch Patch56: backport-rtld-copy-terminating-null-in-tunables_strdup-bug-28.patch Patch57: backport-gconv-Do-not-emit-spurious-NUL-character-in-ISO-2022.patch +Patch58: backport-nss-make-sure-startp_initialized-do-first.patch Provides: ldconfig rtld(GNU_HASH) bundled(gnulib) @@ -1162,6 +1163,12 @@ fi %doc hesiod/README.hesiod %changelog +* Tue Nov 2021 chengyechun - 2.28-80 +- Type:bugfix +- CVE:NA +- SUG:restart +- DESC:nss make sure startp initialized do first + * Tue Nov 9 2021 Qingqing Li - 2.28-79 - gconv: Do not emit spurious NUL character in ISO-2022-JP-3 this is also fix CVE-2021-43396