package/{glibc, localedef}: security bump to version 2.43-45-gdae425b554207f7c4599c7fac707ad4c08545674

Removed patch which is included in this bump.

Fixes CVE-2026-5435, CVE-2026-6238 & CVE-2026-6791.

git shortlog  4070d808bea1c077eb7e7d52b52b91cae98205d5..

Adhemerval Zanella (3):
      math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183)
      arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792)
      posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791)

Florian Weimer (8):
      iconv: Suppress intermediate errors with //TRANSLIT (bug 34236)
      resolv: Declare __p_class_syms, __p_type_syms for internal use
      resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289)
      resolv: Improve formatting of unknown records in ns_sprintrrf
      resolv: Check for inet_ntop failure in ns_sprintrrf
      resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435)
      resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238)
      resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)

Jakub Jelinek (1):
      Rename __unused fields to __glibc_reserved.

John David Anglin (1):
      hppa: Fix missing call to __feraiseexcept (BZ 34306)

Pino Toscano (1):
      Hurd: comment PF_LINK/AF_LINK defines

Sam James (1):
      elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210]

Samuel Thibault (3):
      Hurd: comment PF_ROUTE/AF_ROUTE defines
      Hurd: comment ioctls which cannot currently compile
      Hurd: restore some SIOC ioctls

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Bernd Kuhls
2026-07-03 21:17:31 +02:00
committed by Julien Olivain
parent beb6be6b06
commit 42d63edf4c
4 changed files with 12 additions and 88 deletions

View File

@@ -1,85 +0,0 @@
From 243bdfec8f7cd4a85a8ce6e4e9a5a5accd3ce1aa Mon Sep 17 00:00:00 2001
From: Jakub Jelinek <jakub@redhat.com>
Date: Tue, 17 Feb 2026 17:06:48 +0100
Subject: [PATCH] Rename __unused fields to __glibc_reserved.
__unused is often defined to __attribute__((unused)) in BSD
sources and furthermore libstdc++ testsuite uses it as a macro
to verify libstdc++ headers don't use __unused identifiers.
In ~2012 glibc headers have been cleaned up, but some new
uses of __unused have reappeared (s390 fenv.h already many
years ago, the rest last November).
Reviewed-by: Florian Weimer <fweimer@redhat.com>
Upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=18b97b03b7442d8ba0860e43145f8724c9e77b17
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
sysdeps/powerpc/nptl/bits/struct_mutex.h | 2 +-
sysdeps/s390/fpu/bits/fenv.h | 8 ++++----
sysdeps/s390/nptl/bits/struct_mutex.h | 2 +-
sysdeps/x86/nptl/bits/struct_mutex.h | 2 +-
4 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/sysdeps/powerpc/nptl/bits/struct_mutex.h b/sysdeps/powerpc/nptl/bits/struct_mutex.h
index 1472af21f7..ebf2d50922 100644
--- a/sysdeps/powerpc/nptl/bits/struct_mutex.h
+++ b/sysdeps/powerpc/nptl/bits/struct_mutex.h
@@ -32,7 +32,7 @@ struct __pthread_mutex_s
int __kind;
#if __WORDSIZE == 64
short __spins;
- short __unused;
+ short __glibc_reserved;
__pthread_list_t __list;
# define __PTHREAD_MUTEX_HAVE_PREV 1
#else
diff --git a/sysdeps/s390/fpu/bits/fenv.h b/sysdeps/s390/fpu/bits/fenv.h
index b9e844e393..33e88fbe9d 100644
--- a/sysdeps/s390/fpu/bits/fenv.h
+++ b/sysdeps/s390/fpu/bits/fenv.h
@@ -76,10 +76,10 @@ typedef unsigned int fexcept_t; /* size of fpc */
typedef struct
{
fexcept_t __fpc;
- void *__unused;
- /* The field __unused (formerly __ieee_instruction_pointer) is a relict from
- commit "Remove PTRACE_PEEKUSER" (87b9b50f0d4b92248905e95a06a13c513dc45e59)
- and isn't used anymore. */
+ void *__glibc_reserved;
+ /* The field __glibc_reserved (formerly __ieee_instruction_pointer) is a
+ relict from commit "Remove PTRACE_PEEKUSER"
+ (87b9b50f0d4b92248905e95a06a13c513dc45e59) and isn't used anymore. */
} fenv_t;
/* If the default argument is used we use this value. */
diff --git a/sysdeps/s390/nptl/bits/struct_mutex.h b/sysdeps/s390/nptl/bits/struct_mutex.h
index d069b485d1..571265267c 100644
--- a/sysdeps/s390/nptl/bits/struct_mutex.h
+++ b/sysdeps/s390/nptl/bits/struct_mutex.h
@@ -32,7 +32,7 @@ struct __pthread_mutex_s
int __kind;
#if __WORDSIZE == 64
short __spins;
- short __unused;
+ short __glibc_reserved;
__pthread_list_t __list;
# define __PTHREAD_MUTEX_HAVE_PREV 1
#else
diff --git a/sysdeps/x86/nptl/bits/struct_mutex.h b/sysdeps/x86/nptl/bits/struct_mutex.h
index 9c19dff660..13c9894ad4 100644
--- a/sysdeps/x86/nptl/bits/struct_mutex.h
+++ b/sysdeps/x86/nptl/bits/struct_mutex.h
@@ -32,7 +32,7 @@ struct __pthread_mutex_s
int __kind;
#ifdef __x86_64__
short __spins;
- short __unused;
+ short __glibc_reserved;
__pthread_list_t __list;
# define __PTHREAD_MUTEX_HAVE_PREV 1
#else
--
2.47.3

View File

@@ -1,5 +1,5 @@
# Locally calculated (fetched from git)
sha256 668f890b45fd8d32bb73783ad3b75fe1f396c5c3aa3c3832e616b4c3f0c6066b glibc-2.43-27-g4070d808bea1c077eb7e7d52b52b91cae98205d5-git4.tar.gz
sha256 647325cc2e9f2c6260f3c48d0385ac5e30cb60d2ec2e5afd649555c518c9bf60 glibc-2.43-45-gdae425b554207f7c4599c7fac707ad4c08545674-git4.tar.gz
# Hashes for license files
sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYINGv2

View File

@@ -7,7 +7,7 @@
# Generate version string using:
# git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
# When updating the version, please also update localedef
GLIBC_VERSION = 2.43-27-g4070d808bea1c077eb7e7d52b52b91cae98205d5
GLIBC_VERSION = 2.43-45-gdae425b554207f7c4599c7fac707ad4c08545674
GLIBC_SITE = https://sourceware.org/git/glibc.git
GLIBC_SITE_METHOD = git
@@ -46,6 +46,15 @@ GLIBC_IGNORE_CVES += CVE-2026-5928
# Fixed by glibc-2.43-27-g4070d808bea1c077eb7e7d52b52b91cae98205d5
GLIBC_IGNORE_CVES += CVE-2026-5450
# Fixed by glibc-2.43-42-ge64ae5a591f0604b7504df4df631857bb11cc78b
GLIBC_IGNORE_CVES += CVE-2026-5435
# Fixed by glibc-2.43-43-g3a418da6a3938756763980541e440dbdd46900fb
GLIBC_IGNORE_CVES += CVE-2026-6238
# Fixed by glibc-2.43-45-gdae425b554207f7c4599c7fac707ad4c08545674
GLIBC_IGNORE_CVES += CVE-2026-6791
# This CVE is considered as not being security issues by
# upstream glibc:
# https://security-tracker.debian.org/tracker/CVE-2010-4756

View File

@@ -7,7 +7,7 @@
# Use the same VERSION and SITE as target glibc
# As in glibc.mk, generate version string using:
# git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
LOCALEDEF_VERSION = 2.43-27-g4070d808bea1c077eb7e7d52b52b91cae98205d5
LOCALEDEF_VERSION = 2.43-45-gdae425b554207f7c4599c7fac707ad4c08545674
LOCALEDEF_SOURCE = glibc-$(LOCALEDEF_VERSION)$(BR_FMT_VERSION_git).tar.gz
LOCALEDEF_SITE = https://sourceware.org/git/glibc.git
LOCALEDEF_SITE_METHOD = git