diff mbox series

[scarthgap,34/55] glibc: stable 2.39 branch updates to b7a0de2c8f

Message ID 77cd6c551efab4e73b765421cdb4650bcdfeab0a.1793405493.git.yoann.congal@smile.fr
State RFC, archived
Delegated to: Yoann Congal
Headers show
Series [scarthgap,01/55] scripts/install-buildtools: Update to 5.0.21 | expand

Commit Message

Yoann Congal Oct. 31, 2026, 12:14 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Update SRCREV to pull the latest fixes from the upstream
release/2.39/master branch. This branch does not seem to receive
security fixes anymore, but still got two new commits during last
months.

Commits between the old SRCREV (be1e627cd7) and the new SRCREV (b7a0de2c8f):

b7a0de2c8f powerpc: Fix off-by-one in AT_HWCAP4 loop in _dl_procinfo
d9eaad3515 rtld: cache cpuid results on the stack for intel

Testing Results:
(note that the comparison is done against yocto-20.0.21, so includes
testing of last 14 CVE patches)

+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 4933   | 4941   | +8   |
| FAIL         | 221    | 223    | +2   |
| XFAIL        | 16     | 16     |  0   |
| XPASS        | 4      | 4      |  0   |
| UNSUPPORTED  | 227    | 227    |  0   |
+--------------+--------+--------+------+

Changes in testcases:                   Before  After  Source
(no change in already existing tests, flaky test filtered by 3 runs)
elf/tst-dl-path-normalize                ---    PASS   CVE-2026-86805/CVE-2026-95818
elf/tst-tunables-enable_secure           ---    PASS   CVE-2026-86805/CVE-2026-95818 test harness
iconvdata/tst-jisx0213-progress          ---    PASS   CVE-2026-77117/CVE-2026-80489
libio/bug-wgenops-bz33998.test-result    ---    PASS   CVE-2026-5928
libio/tst-fopen-ccs-empty                ---    PASS   CVE-2026-18374
posix/tst-wordexp-append                 ---    PASS   CVE-2026-6368
stdio-common/tst-vfscanf-bz34008         ---    PASS   CVE-2026-5450
stdlib/tst-strfmon-bug34510              ---    PASS   CVE-2026-19499
elf/tst-origin-secure                    ---    FAIL   CVE-2026-86805/CVE-2026-95818
posix/tst-wordexp-tilde                  ---    FAIL   CVE-2026-6791

The two new tests which do not pass when running glibc-testsuite will
pass under following conditions:
* FAIL -> UNSUPPORTED: removing patch 0022 fixes these tests
  this fixes 41 FAIL -> 6 PASS + 35 UNSUPPORTED and can be sent as
  separate patch if requested
  see OE-Core rev: 5eb80f3c562f6e395562c52df67fab60ae0ff32b
* UNSUPPORTED -> PASS: running natively
  qemu-user doesn't support the call test-container makes to create its
  isolated environment (unshare(CLONE_NEWUSER))
  running natively is possible when target arch equals to host arch

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
[YC: fixed a 2.44 -> 2.39 typo in branch name]
---
 meta/recipes-core/glibc/glibc-version.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index 5d57dafed0a..1f4f372c13b 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@ 
 SRCBRANCH ?= "release/2.39/master"
 PV = "2.39+git"
-SRCREV_glibc ?= "be1e627cd72db31161a3b4ce1c8114674f0895eb"
+SRCREV_glibc ?= "b7a0de2c8f68722cfdfc735b8358a3a6559ec0eb"
 SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5"
 
 GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"