On Fri Oct 23, 2026 at 12:47 AM CEST, Peter Marko via lists.openembedded.org wrote: > From: Peter Marko <[email protected]> > > Update SRCREV to pull the latest fixes from the upstream > release/2.44/master branch. This branch does not seem to receive > security fixes anymore, but still got two new commits during last > months. > > Commits between the old SRCREV (be1e627cd7) and the new SRCREV (b7a0de2c8f): > > b7a0de2c8f powerpc: Fix off-by-one in AT_HWCAP4 loop in _dl_procinfo > d9eaad3515 rtld: cache cpuid results on the stack for intel > > Testing Results: > (note that the comparison is done against yocto-20.0.21, so includes ^ 5.0.21 I guess? I will fix this is my branch.
> testing of last 14 CVE patches) > > +--------------+--------+--------+------+ > | Result | Before | After | Diff | > +--------------+--------+--------+------+ > | PASS | 4933 | 4941 | +8 | > | FAIL | 221 | 223 | +2 | > | XFAIL | 16 | 16 | 0 | > | XPASS | 4 | 4 | 0 | > | UNSUPPORTED | 227 | 227 | 0 | > +--------------+--------+--------+------+ > > Changes in testcases: Before After Source > (no change in already existing tests, flaky test filtered by 3 runs) > elf/tst-dl-path-normalize --- PASS > CVE-2026-86805/CVE-2026-95818 > elf/tst-tunables-enable_secure --- PASS > CVE-2026-86805/CVE-2026-95818 test harness > iconvdata/tst-jisx0213-progress --- PASS > CVE-2026-77117/CVE-2026-80489 > libio/bug-wgenops-bz33998.test-result --- PASS CVE-2026-5928 > libio/tst-fopen-ccs-empty --- PASS CVE-2026-18374 > posix/tst-wordexp-append --- PASS CVE-2026-6368 > stdio-common/tst-vfscanf-bz34008 --- PASS CVE-2026-5450 > stdlib/tst-strfmon-bug34510 --- PASS CVE-2026-19499 > elf/tst-origin-secure --- FAIL > CVE-2026-86805/CVE-2026-95818 > posix/tst-wordexp-tilde --- FAIL CVE-2026-6791 > > The two new tests which do not pass when running glibc-testsuite will > pass under following conditions: > * FAIL -> UNSUPPORTED: removing patch 0022 fixes these tests > this fixes 41 FAIL -> 6 PASS + 35 UNSUPPORTED and can be sent as > separate patch if requested > see OE-Core rev: 5eb80f3c562f6e395562c52df67fab60ae0ff32b > * UNSUPPORTED -> PASS: running natively > qemu-user doesn't support the call test-container makes to create its > isolated environment (unshare(CLONE_NEWUSER)) > running natively is possible when target arch equals to host arch Thanks for this explanation. I'm not sure it's worth fixing for scarthgap now so I won't ask for the backport but I appreciate the offer. > Signed-off-by: Peter Marko <[email protected]> > --- > meta/recipes-core/glibc/glibc-version.inc | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/meta/recipes-core/glibc/glibc-version.inc > b/meta/recipes-core/glibc/glibc-version.inc > index 5d57dafed0a..1f4f372c13b 100644 > --- a/meta/recipes-core/glibc/glibc-version.inc > +++ b/meta/recipes-core/glibc/glibc-version.inc > @@ -1,6 +1,6 @@ > SRCBRANCH ?= "release/2.39/master" > PV = "2.39+git" > -SRCREV_glibc ?= "be1e627cd72db31161a3b4ce1c8114674f0895eb" > +SRCREV_glibc ?= "b7a0de2c8f68722cfdfc735b8358a3a6559ec0eb" > SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5" > > GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" Thanks! -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#248976): https://lists.openembedded.org/g/openembedded-core/message/248976 Mute This Topic: https://lists.openembedded.org/mt/121892966/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
