| Message ID | 20260727112902.1653529-1-adarsh.jagadish.kamini@est.tech |
|---|---|
| State | Changes Requested, archived |
| Commit | a0b4fa9c2683208f7d5b41ab903b526e557b920e |
| Headers | show |
| Series | glibc: stable 2.43 branch updates | expand |
On Mon Jul 27, 2026 at 1:29 PM CEST, Adarsh Jagadish Kamini wrote: > Update SRCREV to pull the latest fixes from the upstream > release/2.43/master branch, including fixes for the following CVEs: > > CVE-2026-5435 resolv: More types as unknown in ns_sprintrrf > CVE-2026-5450 stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] > CVE-2026-5928 libio: Fix ungetwc operating on byte stream [BZ #33998] > CVE-2026-6238 resolv: Fix buffer overreads in ns_sprintrrf > CVE-2026-6791 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091) > > Commits between the old SRCREV (e9517114ac) and the new SRCREV (1c9988e525): > > 1c9988e525 rtld: cache cpuid results on the stack for intel > dae425b554 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791) > 8759917de5 resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069) > 3a418da6a3 resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238) > e64ae5a591 resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435) > c9225a3e73 resolv: Check for inet_ntop failure in ns_sprintrrf > c46f7b2fd6 resolv: Improve formatting of unknown records in ns_sprintrrf > 1d7d1a16b0 resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289) > 349297a4eb resolv: Declare __p_class_syms, __p_type_syms for internal use > fdf10644d6 hppa: Fix missing call to __feraiseexcept (BZ 34306) > a6fa9a9594 arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792) > fe0ccc9564 iconv: Suppress intermediate errors with //TRANSLIT (bug 34236) > 22f3d24a6b Hurd: restore some SIOC ioctls > a13ebdbc7e Hurd: comment ioctls which cannot currently compile > 446f708e4c Hurd: comment PF_ROUTE/AF_ROUTE defines > ced45fd472 Hurd: comment PF_LINK/AF_LINK defines > 89cbf46693 elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210] > 18b97b03b7 Rename __unused fields to __glibc_reserved. > a47b5b2b3e math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183) > 4070d808be stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] > 2890b35cd3 libio: Fix ungetwc operating on byte stream [BZ #33998] > > Testing Results: > Before After Diff > PASS 6609 6611 +2 > XPASS 4 4 0 > FAIL 131 132 +1 > XFAIL 16 16 0 > UNSUPPORTED 554 555 +1 > > Changes in testcases: > > testcase-name before after > resolv/tst-ns_sprintrr(new) - PASS > nptl/tst-robustpi7 PASS FAIL > > [Note: The uplift adds new testcases including resolv/tst-ns_sprintrr > from commit 8759917de5, which passes, accounting for the PASS and > UNSUPPORTED increases. > > nptl/tst-robustpi7 shows as PASS->FAIL, but it is a flaky test under > QEMU user-mode emulation (PI robust-mutex handling). No nptl code was > changed in the SRCREV range.] > > Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech> > --- Hi Adarsh, Thanks for your patch, but this is not building at all. You will need to refresh or drop some patches: ERROR: nativesdk-glibc-2.43+git-r1 do_patch: Applying patch '/srv/pokybuild/yocto-worker/genericx86-64/build/layers/openembedded-core/meta/recipes-core/glibc/glibc/0023-CVE-2026-5450.patch' on target directory '/srv/pokybuild/yocto-worker/genericx86-64/build/build/tmp/work/x86_64-nativesdk-pokysdk-linux/nativesdk-glibc/2.43+git/sources/glibc-2.43+git' https://autobuilder.yoctoproject.org/valkyrie/#/builders/4/builds/4241 Can you have a look at the issue? Thanks, Mathieu
diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc index af3db54cee..cf5a444095 100644 --- a/meta/recipes-core/glibc/glibc-version.inc +++ b/meta/recipes-core/glibc/glibc-version.inc @@ -1,6 +1,6 @@ SRCBRANCH ?= "release/2.43/master" PV = "2.43+git" -SRCREV_glibc ?= "e9517114acc77c0b8af9da6700107df16882b701" +SRCREV_glibc ?= "1c9988e52540c844928c6d93ff45305adc2c24a0" SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5" GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb index b84c55ca17..9f3a3814d0 100644 --- a/meta/recipes-core/glibc/glibc_2.43.bb +++ b/meta/recipes-core/glibc/glibc_2.43.bb @@ -19,6 +19,7 @@ easier access for another. 'ASLR bypass itself is not a vulnerability.'" CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORTS" CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-2026-4437 CVE-2026-4438 \ CVE-2026-4046 \ + CVE-2026-5435 CVE-2026-5450 CVE-2026-5928 CVE-2026-6238 CVE-2026-6791 \ " CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"
Update SRCREV to pull the latest fixes from the upstream release/2.43/master branch, including fixes for the following CVEs: CVE-2026-5435 resolv: More types as unknown in ns_sprintrrf CVE-2026-5450 stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] CVE-2026-5928 libio: Fix ungetwc operating on byte stream [BZ #33998] CVE-2026-6238 resolv: Fix buffer overreads in ns_sprintrrf CVE-2026-6791 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091) Commits between the old SRCREV (e9517114ac) and the new SRCREV (1c9988e525): 1c9988e525 rtld: cache cpuid results on the stack for intel dae425b554 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791) 8759917de5 resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069) 3a418da6a3 resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238) e64ae5a591 resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435) c9225a3e73 resolv: Check for inet_ntop failure in ns_sprintrrf c46f7b2fd6 resolv: Improve formatting of unknown records in ns_sprintrrf 1d7d1a16b0 resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289) 349297a4eb resolv: Declare __p_class_syms, __p_type_syms for internal use fdf10644d6 hppa: Fix missing call to __feraiseexcept (BZ 34306) a6fa9a9594 arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792) fe0ccc9564 iconv: Suppress intermediate errors with //TRANSLIT (bug 34236) 22f3d24a6b Hurd: restore some SIOC ioctls a13ebdbc7e Hurd: comment ioctls which cannot currently compile 446f708e4c Hurd: comment PF_ROUTE/AF_ROUTE defines ced45fd472 Hurd: comment PF_LINK/AF_LINK defines 89cbf46693 elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210] 18b97b03b7 Rename __unused fields to __glibc_reserved. a47b5b2b3e math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183) 4070d808be stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] 2890b35cd3 libio: Fix ungetwc operating on byte stream [BZ #33998] Testing Results: Before After Diff PASS 6609 6611 +2 XPASS 4 4 0 FAIL 131 132 +1 XFAIL 16 16 0 UNSUPPORTED 554 555 +1 Changes in testcases: testcase-name before after resolv/tst-ns_sprintrr(new) - PASS nptl/tst-robustpi7 PASS FAIL [Note: The uplift adds new testcases including resolv/tst-ns_sprintrr from commit 8759917de5, which passes, accounting for the PASS and UNSUPPORTED increases. nptl/tst-robustpi7 shows as PASS->FAIL, but it is a flaky test under QEMU user-mode emulation (PI robust-mutex handling). No nptl code was changed in the SRCREV range.] Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech> --- meta/recipes-core/glibc/glibc-version.inc | 2 +- meta/recipes-core/glibc/glibc_2.43.bb | 1 + 2 files changed, 2 insertions(+), 1 deletion(-)