diff mbox series

[wrynose,29/60] glibc: stable 2.43 branch updates to 562cd7badd

Message ID 98ff1c9d3e272a1773775211b0d7dc4c20b28f8b.1791707817.git.yoann.congal@smile.fr
State New
Headers show
Series [wrynose,01/60] glibc: set status for CVE-2011-0536 and CVE-2025-0577 | expand

Commit Message

Yoann Congal Oct. 11, 2026, 8:40 a.m. UTC 
From: Harish Sadineni <Harish.Sadineni@windriver.com>

Update SRCREV to pull the latest fixes from the upstream
release/2.43/master branch, including fixes for the following CVEs:

CVE-2026-89092 CVE-2026-97399

Commits between the old SRCREV (9cda6fc96ab) and the new SRCREV (562cd7badd):

562cd7badd powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399)
533e1c955c elf: Open the normalized $ORIGIN rpath in AT_SECURE programs (BZ 34360)
8305f5b8fa realloc: Fix mmap non-mremap reallocation case [BZ #34697]
e51efbc44f CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache

Testing Results:
+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 6601   | 6601   | +0   |
| XPASS        | 4      | 4      |  0   |
| FAIL         | 142    | 143    | +1   |
| XFAIL        | 16     | 16     |  0   |
| UNSUPPORTED  | 559    | 560    | +1   |
+--------------+--------+--------+------+

Changes in testcases:                     Before   After
elf/tst-dl-path-normalize                  ---     PASS
elf/tst-origin-secure                      ---     UNSUPPORTED
malloc/tst-malloc-too-large-malloc-check   PASS    FAIL

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
[YC: CVE-2026-19542 was fixed before this patch in the 2.43 branch ]
---
 meta/recipes-core/glibc/glibc-version.inc | 2 +-
 meta/recipes-core/glibc/glibc_2.43.bb     | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index 5f6863df160..e8e6bb665ae 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@ 
 SRCBRANCH ?= "release/2.43/master"
 PV = "2.43+git"
-SRCREV_glibc ?= "9cda6fc96abd035d9cbe68482138d4a78a51a7d5"
+SRCREV_glibc ?= "562cd7badd3f9edd74b68316439f910f6f7c4c1f"
 SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5"
 
 GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"
diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb
index 56942e86dcd..3d642e6738d 100644
--- a/meta/recipes-core/glibc/glibc_2.43.bb
+++ b/meta/recipes-core/glibc/glibc_2.43.bb
@@ -24,6 +24,7 @@  CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-20
     CVE-2026-4046 \
     CVE-2026-5435 CVE-2026-5450 CVE-2026-5928 CVE-2026-6238 CVE-2026-6791 \
     CVE-2026-6368 CVE-2026-19499 CVE-2026-77117 CVE-2026-80489 CVE-2026-18374 CVE-2026-8674 \
+    CVE-2026-89092 CVE-2026-97399 CVE-2026-19542 \
 "
 CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"