# changelog

author: Carlos O'Donell <carlos@redhat.com> - 2.19.90-36
changelog:
  - Allow up to 32 dlopened modules to use static TLS (#1124987).
  - Run glibc tests in %check section of RPM spec file.
  - Do not run tests with `-k` and fail if any test fails to build.


author: Carlos O'Donell <carlos@redhat.com> - 2.20-4
changelog:
  - Disable lock elision support for Intel hardware until microcode
    updates can be done in early bootup (#1146967).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.20-7
changelog:
  - Remove LIB_LANG since we don't install locales in /usr/lib/locale anymore.
  - Don't own any directories in /usr/share/locale (#1167445).
  - Use the %find_lang macro to get the *.mo files (#1167445).
  - Add %lang tags to language locale files in /usr/share/i18n/locale (#1169044).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.20-8
changelog:
  - wordexp fails to honour WRDE_NOCMD (CVE-2014-7817, #1167569).
  - Avoid infinite loop in nss_dns getnetbyname (CVE-2014-9402, #1175370).
  - wscanf allocates too little memory (CVE-2015-1472, #1188237).
  - Fix segmentation fault when LD_LIBRARY_PATH contains only non-existing
    paths (#1184234).


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.20-9
changelog:
  - Apply various security fixes from Fedora 22:
    - CVE-2015-8777: Apply additional pointer guard hardening.  (#1276761)
    - CVE-2015-1781: glibc: buffer overflow in gethostbyname_r and
      related functions with misaligned buffer.  (#1214152)
    - CVE-2015-7547: Stack-based buffer overflow in getaddrinfo (#1308943).
  - Apply various security fixes from CentOS 7:
    - Prevent integer overflow in _IO_wstr_overflow (#1195762).
    - Prevent potential denial of service in internal_fnmatch (#1197730).
  - Disable tests, they take too long to run.


