July 23rd, 2024

GNU C Library version 2.40 fixes 5 CVEs

The GNU C Library version 2.40 emphasizes portability, performance, and standards compliance. Updates include GCC 14.1 support, new function families, security enhancements, and improvements for 32-bit architectures. Users can find release notes and contributors on the GNU C Library webpage.

Read original articleLink Icon
GNU C Library version 2.40 fixes 5 CVEs

The GNU C Library version 2.40 has been released, serving as the primary C library in the GNU and GNU/Linux systems. This version emphasizes portability and high performance, adhering to standards like ISO C11 and POSIX.1-2017. Notable updates include support for GCC 14.1, enabling features from the ISO C23 standard, and introducing new function families like exponential and logarithmic functions. Security enhancements were made, addressing CVEs and resolving various bugs. Additionally, improvements were made for architectures using a 32-bit seconds-since-epoch field, allowing timestamps beyond 2038. The release also features a new tunable for running programs as setuid processes and updates for Linux-specific functionalities. The release notes and contributors for version 2.40 can be found on the GNU C Library webpage. Users are encouraged to download packages from the provided links and track the release branches for updates while maintaining backward compatibility.

Related

Memory sealing for the GNU C Library

Memory sealing for the GNU C Library

The GNU C Library introduces mseal() system call for enhanced security by preventing address space changes. Adhemerval Zanella's patch series adds support, improving memory manipulation protection in upcoming releases.

Zlib-ng 2.2 Speeds Up Compression By ~12% On x86_64 CPUs

Zlib-ng 2.2 Speeds Up Compression By ~12% On x86_64 CPUs

Zlib-ng 2.2 release candidate offers 12% faster compression on x86_64 CPUs with performance optimizations, revamped memory allocation, modern API, and CPU intrinsics support. Improvements focus on memory allocation, system calls reduction, and small buffer processing efficiency. Michael Larabel praises enhanced compression speed and memory handling.

Y292B Bug

Y292B Bug

The Y292B bug is a potential timekeeping issue in Unix systems due to a rollover in the year 292,277,026,596. Solutions involve using dynamic languages or GNU Multiple Precision Arithmetic Library in C, emphasizing the need for kernel-level fixes.

The C Standard charter was updated, now with security principles as well

The C Standard charter was updated, now with security principles as well

The ISO/IEC JTC1/SC22/WG14 committee oversees C Standard development, focusing on portability, efficiency, and stability. Collaboration with the C++ committee ensures compatibility. Principles guide feature integration, code efficiency, security, and adaptability.

New Features in C++26

New Features in C++26

The ISO released new C++ standards on a three-year cycle, with C++26 proposals open until January 2025. Updates include hazard pointers, user-space RCU support, debugging headers, and template enhancements for improved functionality.

Link Icon 2 comments
By @bvrmn - 3 months
> stdio: fclose does a linear search, takes ages when many FILE* are opened

It's interesting how many other linear searches are left there regarding FILE.