Projects / musl / Releases

All releases of musl

  •  06 Jun 2014 22:50
Avatar

    Release Notes: This release fixes a stack-based buffer overflow in DNS response parsing (CVE-2014-3484) found during an overhaul of the resolver internals. A number of new features in the forward and reverse name lookup functions have been added, particularly in the area of IPv6 support. VDSO acceleration of clock_gettime and related functions on i386 is now available with recent kernels. Support for the %C and %y specifiers to strptime has been added. Various low to medium severity bugs have also been fixed.

    •  06 Jun 2014 22:49
    Avatar

      Release Notes: This maintenance release fixes a stack-based buffer overflow in DNS response parsing (CVE-2014-3484) and various other low to medium severity bugs.

      •  20 May 2014 22:22
      Avatar

        Release Notes: This release fixes a bug in musl's implementation of the two-way algorithm whereby strstr, wcsstr, and memmem fail to match certain periodic search strings. Several other minor issues are also fixed. New dynamic linker command line features and iconv charsets cp473 and cp850 are now available. Several improvements to the configure script are also made, including detection of an optimizer bug in GCC 4.9.0 which produces a broken libc.

        •  20 May 2014 22:07
        Avatar

          Release Notes: This maintenance release for the 1.0 branch fixes a bug in musl's implementation of the two-way algorithm whereby strstr, wcsstr, and memmem fail to match certain periodic search strings. Several other minor issues are also fixed. Several improvements to the configure script are also made, including detection of an optimizer bug in GCC 4.9.0 which produces a broken libc.

          •  16 Apr 2014 08:37
          Avatar

            Release Notes: New features include support for RELRO protection in the dynamic linker, VDSO acceleration for clock functions on x86_64, and improvements to malloc that avoid early allocation failures specific to PIE binaries. Several important bugs have been fixed, including searches past the end of the buffer in memmem and multiple bugs in printf floating point formatting, one of which may be able to trigger a buffer overflow under certain conditions. Some bugs specific to the MIPS, microblaze, and x32 ports have also been fixed.

            •  16 Apr 2014 08:34
            Avatar

              Release Notes: This is the first maintenance release in the 1.0 series, and fixes several important bugs including searches past the end of the buffer in memmem and multiple bugs in printf floating point formatting, one of which may be able to trigger a buffer overflow under certain conditions. Some bugs specific to the MIPS and microblaze ports have also been fixed.

              •  20 Mar 2014 08:51
              Avatar

                Release Notes: This release adds support for a soft-float ABI variant on MIPS as well as new experimental ports to SuperH and x32 (the new 32-bit ABI for x86_64). Two floating point printf bugs have been fixed including a rounding error and off-by-one buffer overflow that could occur only when printing certain denormal values with thousands of places of precision. A second overflow issue was fixed in wcsxfrm where a buffer length of zero was misinterpreted. Several other minor bugfixes and compatibility improvements have also been made.

                •  09 Jan 2014 04:29
                Avatar

                  Release Notes: Major bug fixes include a buffer overflow in mbsrtowcs, group file handling errors, a failure of execle to use the new environment, and timezone parsing crashes on 64-bit systems. Also fixed are several fd leak (close-on-exec) issues, handling of invalid IP address strings, several fnmatch corner cases possibly leading to out-of-bound access, and failure of faccessat with the AT_EACCESS flag. This release also adds support for mixing IPv4 and v6 nameservers in resolv.conf, expanded shadow password API, IPv6 multicast structures, and the ability for libc.so to report the version installed.

                  •  24 Sep 2013 03:32
                  Avatar

                    Release Notes: This release fixed a regression in installation of the dynamic linker symlink when DESTDIR is used, a rare deadlock in libc-internal locking, incorrect dynamic linker fallback to built-in search paths in certain error cases, popen failures when the caller has closed stdin or stdout, deadlock and memory corruption issues in multi-threaded set*id and setrlimit operations, and multiple low-impact bugs in math functions and other components.

                    •  30 Aug 2013 21:35
                    Avatar

                      Release Notes: The dynamic linker now supports $ORIGIN and recursive rpath resolution. Field widths and the %s format have been added to strftime. iconv now supports all major non-stateful CJK encodings, including EUC-KR and Big5(+HKSCS), which are new in this release. CPU affinity interfaces have been added. Many floating point improvements have been made, including fenv support on ARM hardfloat targets. Major optimizations have been made to memset and memcpy (all archs). Numerous low- to medium-impact bugs have been fixed.

                      Screenshot

                      Project Spotlight

                      episoder

                      A tool to tell you about new episodes of your favourite TV shows.

                      Screenshot

                      Project Spotlight

                      BalanceNG

                      A modern software IP load balancer.