missing gconv-modules.cache
Description:
While looking into the details of CVE-2024-2961, I noticed that glibc on Arch Linux does not have the gconv modules cache at /usr/lib/gconv/gconv-modules.cache
.
I'm not sure of the performance impact of not having this cache, but a second issue could be that people following CVE-2024-2961 mitigation procedures like https://rockylinux.org/news/glibc-vulnerability-april-2024/, would run iconvconfig(8)
to create the cache, which will then never be updated again by future Arch glibc updates. So it seems like a good idea to make it part of our glibc package.
Additional info:
- package version(s): glibc 2.39-2
- config and/or log files:
- link to upstream bug report, if any:
Steps to reproduce:
$ pacman -Ql glibc | grep gconv-modules.cache
$ ls /usr/lib/gconv/gconv-modules.cache
ls: cannot access '/usr/lib/gconv/gconv-modules.cache': No such file or directory
$ sudo iconvconfig
$ ls /usr/lib/gconv/gconv-modules.cache
/usr/lib/gconv/gconv-modules.cache