Re: [OE-core][wrynose][PATCH] glibc: stable 2.43 branch updates

["Yoann Congal" <yoann.congal@smile.fr>]

On Wed Jul 22, 2026 at 3:52 PM CEST, Adarsh Jagadish Kamini via lists.openembedded.org wrote:
> From: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
>
> Update SRCREV to pull the latest fixes from the upstream
> release/2.43/master branch, including fixes for the following CVEs:
>
>   CVE-2026-5435  resolv: More types as unknown in ns_sprintrrf
>   CVE-2026-5450  stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]
>   CVE-2026-5928  libio: Fix ungetwc operating on byte stream [BZ #33998]
>   CVE-2026-6238  resolv: Fix buffer overreads in ns_sprintrrf
>   CVE-2026-6791  posix: Fix stack overflow in wordexp tilde expansion (BZ 34091)
>
> Commits between the old SRCREV (e9517114ac) and the new SRCREV (1c9988e525):
>
> 1c9988e525 rtld: cache cpuid results on the stack for intel
> dae425b554 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791)
> 8759917de5 resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)
> 3a418da6a3 resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238)
> e64ae5a591 resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435)
> c9225a3e73 resolv: Check for inet_ntop failure in ns_sprintrrf
> c46f7b2fd6 resolv: Improve formatting of unknown records in ns_sprintrrf
> 1d7d1a16b0 resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289)
> 349297a4eb resolv: Declare __p_class_syms, __p_type_syms for internal use
> fdf10644d6 hppa: Fix missing call to __feraiseexcept (BZ 34306)
> a6fa9a9594 arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792)
> fe0ccc9564 iconv: Suppress intermediate errors with //TRANSLIT (bug 34236)
> 22f3d24a6b Hurd: restore some SIOC ioctls
> a13ebdbc7e Hurd: comment ioctls which cannot currently compile
> 446f708e4c Hurd: comment PF_ROUTE/AF_ROUTE defines
> ced45fd472 Hurd: comment PF_LINK/AF_LINK defines
> 89cbf46693 elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210]
> 18b97b03b7 Rename __unused fields to __glibc_reserved.
> a47b5b2b3e math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183)
> 4070d808be stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]
> 2890b35cd3 libio: Fix ungetwc operating on byte stream [BZ #33998]
>
> Testing Results:
>              Before    After    Diff
> PASS         6609      6611      +2
> XPASS        4         4          0
> FAIL         131       132       +1
> XFAIL        16        16         0
> UNSUPPORTED  554       555       +1
>
> Changes in testcases:
>
> testcase-name                                before  after
> resolv/tst-ns_sprintrr(new)                    -     PASS
> nptl/tst-robustpi7                            PASS    FAIL
>
> [Note: The uplift adds new testcases including resolv/tst-ns_sprintrr
> from commit 8759917de5, which passes, accounting for the PASS and
> UNSUPPORTED increases.
>
> nptl/tst-robustpi7 shows as PASS->FAIL, but it is a flaky test under
> QEMU user-mode emulation (PI robust-mutex handling). No nptl code was
> changed in the SRCREV range.]
>
> Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
> ---
>  meta/recipes-core/glibc/glibc-version.inc | 2 +-
>  meta/recipes-core/glibc/glibc_2.43.bb     | 1 +
>  2 files changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
> index af3db54cee..cf5a444095 100644
> --- a/meta/recipes-core/glibc/glibc-version.inc
> +++ b/meta/recipes-core/glibc/glibc-version.inc
> @@ -1,6 +1,6 @@
>  SRCBRANCH ?= "release/2.43/master"
>  PV = "2.43+git"
> -SRCREV_glibc ?= "e9517114acc77c0b8af9da6700107df16882b701"
> +SRCREV_glibc ?= "1c9988e52540c844928c6d93ff45305adc2c24a0"

Hello,

That would put wrynose ahead of master. Can you send a similar patch for
master so I can take it here as well?

Thanks!
-- 
Yoann Congal
Smile ECS