- Auto-sync with upstream branch release/2.25/master
    
    Upstream commit: edcf13e25c1559558a6f12ff5a71d4136a39235e
    
    - PTHREAD_STACK_MIN is too small on x86-64 (#1527887)
    - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
      (#1533837)
    - CVE-2017-16997: Check for empty tokens before dynamic string token
      expansion in the dynamic linker (#1526866)
    - CVE-2017-15804: glob: Fix overflow in GLOB_TILDE unescaping (swbz#22332)
    - CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
    - CVE-2017-15671: glob: Fix memory leak (#1504807)
    - nss_files: Avoid large buffers with many host addresses (swbz#22078)
    - nss_files: Use struct scratch_buffer for gethostbyname (swbz#18023)
    - posix: Fix improper assert in Linux posix_spawn (BZ#22273)
    - Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
    - x86-64: Use fxsave/xsave/xsavec in _dl_runtime_resolve (swbz#21265)