From: Harish Sadineni <[email protected]> Update SRCREV to pull the latest fixes from the upstream release/2.43/master branch, including fixes for the following CVEs:
CVE-2026-89092 CVE-2026-97399 Commits between the old SRCREV (9cda6fc96ab) and the new SRCREV (562cd7badd): 562cd7badd powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399) 533e1c955c elf: Open the normalized $ORIGIN rpath in AT_SECURE programs (BZ 34360) 8305f5b8fa realloc: Fix mmap non-mremap reallocation case [BZ #34697] e51efbc44f CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache Testing Results: +--------------+--------+--------+------+ | Result | Before | After | Diff | +--------------+--------+--------+------+ | PASS | 6601 | 6601 | +0 | | XPASS | 4 | 4 | 0 | | FAIL | 142 | 143 | +1 | | XFAIL | 16 | 16 | 0 | | UNSUPPORTED | 559 | 560 | +1 | +--------------+--------+--------+------+ Changes in testcases: Before After elf/tst-dl-path-normalize --- PASS elf/tst-origin-secure --- UNSUPPORTED malloc/tst-malloc-too-large-malloc-check PASS FAIL Signed-off-by: Harish Sadineni <[email protected]> Signed-off-by: Yoann Congal <[email protected]> [YC: CVE-2026-19542 was fixed before this patch in the 2.43 branch ] --- meta/recipes-core/glibc/glibc-version.inc | 2 +- meta/recipes-core/glibc/glibc_2.43.bb | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc index 5f6863df160..e8e6bb665ae 100644 --- a/meta/recipes-core/glibc/glibc-version.inc +++ b/meta/recipes-core/glibc/glibc-version.inc @@ -1,6 +1,6 @@ SRCBRANCH ?= "release/2.43/master" PV = "2.43+git" -SRCREV_glibc ?= "9cda6fc96abd035d9cbe68482138d4a78a51a7d5" +SRCREV_glibc ?= "562cd7badd3f9edd74b68316439f910f6f7c4c1f" SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5" GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb index 56942e86dcd..3d642e6738d 100644 --- a/meta/recipes-core/glibc/glibc_2.43.bb +++ b/meta/recipes-core/glibc/glibc_2.43.bb @@ -24,6 +24,7 @@ CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-20 CVE-2026-4046 \ CVE-2026-5435 CVE-2026-5450 CVE-2026-5928 CVE-2026-6238 CVE-2026-6791 \ CVE-2026-6368 CVE-2026-19499 CVE-2026-77117 CVE-2026-80489 CVE-2026-18374 CVE-2026-8674 \ + CVE-2026-89092 CVE-2026-97399 CVE-2026-19542 \ " CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247538): https://lists.openembedded.org/g/openembedded-core/message/247538 Mute This Topic: https://lists.openembedded.org/mt/121697619/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
