From: Harish Sadineni <[email protected]> Update SRCREV to pull the latest fixes from the upstream release/2.43/master branch, including fixes for the following CVEs:
CVE-2026-89092 CVE-2026-97399 Commits between the old SRCREV (9cda6fc96ab) and the new SRCREV (562cd7badd): 562cd7badd powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399) 533e1c955c elf: Open the normalized $ORIGIN rpath in AT_SECURE programs (BZ 34360) 8305f5b8fa realloc: Fix mmap non-mremap reallocation case [BZ #34697] e51efbc44f CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache Testing Results: +--------------+--------+--------+------+ | Result | Before | After | Diff | +--------------+--------+--------+------+ | PASS | 6601 | 6601 | +0 | | XPASS | 4 | 4 | 0 | | FAIL | 142 | 143 | +1 | | XFAIL | 16 | 16 | 0 | | UNSUPPORTED | 559 | 560 | +1 | +--------------+--------+--------+------+ Changes in testcases: Before After elf/tst-dl-path-normalize --- PASS elf/tst-origin-secure --- UNSUPPORTED malloc/tst-malloc-too-large-malloc-check PASS FAIL Signed-off-by: Harish Sadineni <[email protected]> --- meta/recipes-core/glibc/glibc-version.inc | 2 +- meta/recipes-core/glibc/glibc_2.43.bb | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc index 5f6863df16..e8e6bb665a 100644 --- a/meta/recipes-core/glibc/glibc-version.inc +++ b/meta/recipes-core/glibc/glibc-version.inc @@ -1,6 +1,6 @@ SRCBRANCH ?= "release/2.43/master" PV = "2.43+git" -SRCREV_glibc ?= "9cda6fc96abd035d9cbe68482138d4a78a51a7d5" +SRCREV_glibc ?= "562cd7badd3f9edd74b68316439f910f6f7c4c1f" SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5" GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb index 104d6b4067..07e221eb46 100644 --- a/meta/recipes-core/glibc/glibc_2.43.bb +++ b/meta/recipes-core/glibc/glibc_2.43.bb @@ -21,6 +21,7 @@ CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-20 CVE-2026-4046 \ CVE-2026-5435 CVE-2026-5450 CVE-2026-5928 CVE-2026-6238 CVE-2026-6791 \ CVE-2026-6368 CVE-2026-19499 CVE-2026-77117 CVE-2026-80489 CVE-2026-18374 CVE-2026-8674 \ + CVE-2026-89092 CVE-2026-97399 CVE-2026-19542 \ " CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash" -- 2.49.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247382): https://lists.openembedded.org/g/openembedded-core/message/247382 Mute This Topic: https://lists.openembedded.org/mt/121625301/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
