Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 2 Jan 2017 20:07:36 -0500
From: Rich Felker <dalias@...c.org>
To: musl@...ts.openwall.com
Subject: musl 1.1.16 release

This release fixes a serious under-allocation bug in regexec due to
integer overflow (CVE-2016-8859) and related issues.
Implementation-defined regex anchoring behavior in BRE subexpressions
has also been changed to match other implementations. A bug causing
all static-pie binaries with initialized TLS to crash at startup has
been fixed. Overflow handling in printf has been overhauled to
correctly handle obscure corner cases. Additional noteworthy bugs have
been fixed in swprintf, strtod, getopt_long_only, and time conversion
and zone handling. A major MIPS-specific regression in 1.1.15 that
prevented tcsetattr from working at all has also been fixed.

A new port to s390x (64-bit S/390), header-level support for Linux
4.7, 4.8, and 4.9 features, and a facility to increase default thread
stack size via pthread_setattr_default_np have also been added in this
release, along with other minor features and compatibility
improvements. 

http://www.musl-libc.org/releases/musl-1.1.16.tar.gz
http://www.musl-libc.org/releases/musl-1.1.16.tar.gz.asc

Special thanks to musl's release sponsors (patreon.com/musl):

* The Midipix Project (midipix.org)
* Justin Cormack
* Hurricane Labs (hurricanelabs.com)
* Kelsey Hightower
* Les Aker
* Neal Gompa

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ