Date: Mon, 2 Jan 2017 20:07:36 -0500 From: Rich Felker <dalias@...c.org> To: musl@...ts.openwall.com Subject: musl 1.1.16 release This release fixes a serious under-allocation bug in regexec due to integer overflow (CVE-2016-8859) and related issues. Implementation-defined regex anchoring behavior in BRE subexpressions has also been changed to match other implementations. A bug causing all static-pie binaries with initialized TLS to crash at startup has been fixed. Overflow handling in printf has been overhauled to correctly handle obscure corner cases. Additional noteworthy bugs have been fixed in swprintf, strtod, getopt_long_only, and time conversion and zone handling. A major MIPS-specific regression in 1.1.15 that prevented tcsetattr from working at all has also been fixed. A new port to s390x (64-bit S/390), header-level support for Linux 4.7, 4.8, and 4.9 features, and a facility to increase default thread stack size via pthread_setattr_default_np have also been added in this release, along with other minor features and compatibility improvements. http://www.musl-libc.org/releases/musl-1.1.16.tar.gz http://www.musl-libc.org/releases/musl-1.1.16.tar.gz.asc Special thanks to musl's release sponsors (patreon.com/musl): * The Midipix Project (midipix.org) * Justin Cormack * Hurricane Labs (hurricanelabs.com) * Kelsey Hightower * Les Aker * Neal Gompa
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.