[wrynose][PATCH] glibc: stable 2.43 branch updates

[wrynose][PATCH] glibc: stable 2.43 branch updates

[Deepesh.Varatharajan]

From: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>

Update SRCREV to pull the latest fixes from the upstream
release/2.43/master branch, including fixes for the following CVEs:

CVE-2026-6368 CVE-2026-19499 CVE-2026-77117
CVE-2026-80489 CVE-2026-18374 CVE-2026-8674

Commits between the old SRCREV (1c9988e5254) and the new SRCREV (9cda6fc96ab):

9cda6fc96a stdlib: Don't call clearenv from __libc_setenv_freemem
d6c6dd71c6 resolv: Fix assertion failure on search list truncation [BZ 31026, CVE-2026-8674]
65f2295a98 zic: keep needed last transition to new type (bug 34618)
f8f3d451ba nptl: Skip pretty-printer tests without python3 [BZ #34507]
d9a8ff5c01 hesiod: use booleans in parser macro calls
1c1f5103a9 hesiod: fix swapped arguments in service parser
049168237f nss_files: use booleans in parser macro calls
0770e8b07c nss_files: fix swapped arguments in service parser
20b3e87176 libio: Add test for fopen with an empty ", ccs=" value [BZ #34574]
72351055c6 libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling
8dad0ee453 alpha: expect test-float32x-float64-div to fail
f024355965 alpha: add the denormal trap enable bit to FE_NOMASK_ENV
c4dac931ab alpha: Fix stack alignment in makecontext
76115597fe alpha: fix setrlimit compat symbol for negative rlim values besides -1
c29ca5d216 iconvdata: Test case for bug 34556, bug 34568
3ad1bbd8f9 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489)
138c43f018 iconvdata: SHIFT_JISX0213 decoding lacks pending character reset (CVE-2026-77117)
713998bf00 stdlib: Fix right-justification in strfmon (bug 34510, CVE-2026-19499)
2a35bab35b posix: Remove unnecessary overflow check in wordexp (BZ 34090)
4964178b4d m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c (bug 34559)
0afa34adb0 misc: Fix out-of-bounds array write in tdelete (bug 34506)
7d26579873 malloc: Show hugetlb tunable default in --list-tunables
8017bcfc4d m68k: Fix fmod/fmodf infinite recursion (BZ 34508)
a388c4002d posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368)
bc95068f5f ppc64le: Restore optimized memchr for power10 [BZ #34300]

Testing Results:
+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 6592   | 6598   | +6   |
| XPASS        | 4      | 4      |  0   |
| FAIL         | 127    | 125    | -2   |
| XFAIL        | 16     | 16     |  0   |
| UNSUPPORTED  | 559    | 559    |  0   |
+--------------+--------+--------+------+

Changes in testcases:                     Before   After
malloc/tst-malloc-too-large-malloc-check   FAIL     PASS
malloc/tst-malloc-too-large-mcheck         FAIL     PASS
iconvdata/tst-jisx0213-progress(NEW)         -      PASS
libio/tst-fopen-ccs-empty      (NEW)         -      PASS
posix/tst-wordexp-append       (NEW)         -      PASS
stdlib/tst-strfmon-bug34510    (NEW)         -      PASS

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
---
 meta/recipes-core/glibc/glibc-version.inc | 2 +-
 meta/recipes-core/glibc/glibc_2.43.bb     | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index cf5a444095..5f6863df16 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@
 SRCBRANCH ?= "release/2.43/master"
 PV = "2.43+git"
-SRCREV_glibc ?= "1c9988e52540c844928c6d93ff45305adc2c24a0"
+SRCREV_glibc ?= "9cda6fc96abd035d9cbe68482138d4a78a51a7d5"
 SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5"
 
 GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"
diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb
index 9f3a3814d0..104d6b4067 100644
--- a/meta/recipes-core/glibc/glibc_2.43.bb
+++ b/meta/recipes-core/glibc/glibc_2.43.bb
@@ -20,6 +20,7 @@ CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORTS"
 CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-2026-4437 CVE-2026-4438 \
     CVE-2026-4046 \
     CVE-2026-5435 CVE-2026-5450 CVE-2026-5928 CVE-2026-6238 CVE-2026-6791 \
+    CVE-2026-6368 CVE-2026-19499 CVE-2026-77117 CVE-2026-80489 CVE-2026-18374 CVE-2026-8674 \
 "
 CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"
 
-- 
2.49.0

Re: [wrynose][PATCH] glibc: stable 2.43 branch updates

[Varatharajan, Deepesh]

[-- Attachment #1: Type: text/plain, Size: 147 bytes --]

Hi Yoann,

Please ignore this patch. I’ll send a V2 with the SRCREV included in the commit header, as discussed earlier.

Regards,
Deepesh

[-- Attachment #2: Type: text/html, Size: 214 bytes --]

[wrynose][PATCH] glibc: stable 2.43 branch updates

[Hemanth.KumarMD]

From: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>

$ git log --oneline 1c9988e52540c844928c6d93ff45305adc2c24a0..8dad0ee453a9bd9d24e55daba85e70915b29e19d
8dad0ee453 alpha: expect test-float32x-float64-div to fail
f024355965 alpha: add the denormal trap enable bit to FE_NOMASK_ENV
c4dac931ab alpha: Fix stack alignment in makecontext
76115597fe alpha: fix setrlimit compat symbol for negative rlim values besides -1
c29ca5d216 iconvdata: Test case for bug 34556, bug 34568
3ad1bbd8f9 iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489)
138c43f018 iconvdata: SHIFT_JISX0213 decoding lacks pending character reset (CVE-2026-77117)
713998bf00 stdlib: Fix right-justification in strfmon (bug 34510, CVE-2026-19499)
2a35bab35b posix: Remove unnecessary overflow check in wordexp (BZ 34090)
4964178b4d m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c (bug 34559)
0afa34adb0 misc: Fix out-of-bounds array write in tdelete (bug 34506)
7d26579873 malloc: Show hugetlb tunable default in --list-tunables
8017bcfc4d m68k: Fix fmod/fmodf infinite recursion (BZ 34508)
a388c4002d posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368)
bc95068f5f ppc64le: Restore optimized memchr for power10 [BZ #34300]

Testing Results:
+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 5818   | 5821   | +3   |
| XPASS        | 4      | 4      | 0    |
| FAIL         | 1071   | 1071   | 0    |
| XFAIL        | 16     | 16     | 0    |
| UNSUPPORTED  | 402    | 402    | 0    |
| UNRESOLVED   | 7      | 7      | 0    |
+--------------+--------+--------+------+

Changes in testcases:
+------------------------------------+--------+--------+
| Testcase                           | Before | After  |
+------------------------------------+--------+--------+
| iconvdata/tst-jisx0213-progress    | N/A    | PASS   |
| posix/tst-wordexp-append           | N/A    | PASS   |
| stdlib/tst-strfmon-bug34510        | N/A    | PASS   |
+------------------------------------+--------+--------+

Justification:

commit - c29ca5d216 iconvdata: Test case for bug 34556, bug 34568
Adds the regression test for the EUC_JISX0213 / SHIFT_JISX0213 pending
character reset fixes (CVE-2026-80489, CVE-2026-77117).
+PASS: iconvdata/tst-jisx0213-progress

commit - a388c4002d posix: Fix wordexp WRDE_APPEND to preserve state
on non-NOSPACE errors (BZ 34090, CVE-2026-6368)
Fixes WRDE_APPEND state preservation and adds a regression test.
+PASS: posix/tst-wordexp-append

commit - 713998bf00 stdlib: Fix right-justification in strfmon
Fixes right-justification in strfmon and adds a regression test.
+PASS: stdlib/tst-strfmon-bug34510

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
---
 meta/recipes-core/glibc/glibc-version.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index cf5a444095..6d667ac95c 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@
 SRCBRANCH ?= "release/2.43/master"
 PV = "2.43+git"
-SRCREV_glibc ?= "1c9988e52540c844928c6d93ff45305adc2c24a0"
+SRCREV_glibc ?= "8dad0ee453a9bd9d24e55daba85e70915b29e19d"
 SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5"
 
 GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"
-- 
2.49.0

[wrynose][PATCH] glibc: stable 2.43 branch updates

[Jaipaul Cheernam]

$ git log --oneline e9517114acc77c0b8af9da6700107df16882b701..7d26579873791748c20d874adb66e877412175dd
7d26579873 malloc: Show hugetlb tunable default in --list-tunables
8017bcfc4d m68k: Fix fmod/fmodf infinite recursion (BZ 34508)
a388c4002d posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368)
bc95068f5f ppc64le: Restore optimized memchr for power10 [BZ #34300]
1c9988e525 rtld: cache cpuid results on the stack for intel
dae425b554 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791)
8759917de5 resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)
3a418da6a3 resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238)
e64ae5a591 resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435)
c9225a3e73 resolv: Check for inet_ntop failure in ns_sprintrrf
c46f7b2fd6 resolv: Improve formatting of unknown records in ns_sprintrrf
1d7d1a16b0 resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289)
349297a4eb resolv: Declare __p_class_syms, __p_type_syms for internal use
fdf10644d6 hppa: Fix missing call to __feraiseexcept (BZ 34306)
a6fa9a9594 arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792)
fe0ccc9564 iconv: Suppress intermediate errors with //TRANSLIT (bug 34236)
22f3d24a6b Hurd: restore some SIOC ioctls
a13ebdbc7e Hurd: comment ioctls which cannot currently compile
446f708e4c Hurd: comment PF_ROUTE/AF_ROUTE defines
ced45fd472 Hurd: comment PF_LINK/AF_LINK defines
89cbf46693 elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210]
18b97b03b7 Rename __unused fields to __glibc_reserved.
a47b5b2b3e math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183)
4070d808be stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]
2890b35cd3 libio: Fix ungetwc operating on byte stream [BZ #33998]

Testing Results (make check on x86-64 host):
+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 7262   | 7267   | +5   |
| XPASS        | 4      | 4      |  0   |
| FAIL         | 3      | 3      |  0   |
| XFAIL        | 16     | 16     |  0   |
| UNSUPPORTED  | 41     | 41     |  0   |
+--------------+--------+--------+------+

Changes in failed testcases:
(no changes, same 3 environment-specific failures in both runs)

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
 meta/recipes-core/glibc/glibc-version.inc | 2 +-
 meta/recipes-core/glibc/glibc_2.43.bb     | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index af3db54cee..22a3d4d141 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@
 SRCBRANCH ?= "release/2.43/master"
 PV = "2.43+git"
-SRCREV_glibc ?= "e9517114acc77c0b8af9da6700107df16882b701"
+SRCREV_glibc ?= "7d26579873791748c20d874adb66e877412175dd"
 SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5"
 
 GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"
diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb
index b84c55ca17..2ffff0b62b 100644
--- a/meta/recipes-core/glibc/glibc_2.43.bb
+++ b/meta/recipes-core/glibc/glibc_2.43.bb
@@ -19,6 +19,7 @@ easier access for another. 'ASLR bypass itself is not a vulnerability.'"
 CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORTS"
 CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-2026-4437 CVE-2026-4438 \
     CVE-2026-4046 \
+    CVE-2026-5435 CVE-2026-6238 CVE-2026-6368 CVE-2026-6791 \
 "
 CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"