* [Buildroot] [PATCH 1/1] package/{glibc, localedef}: security bump version to 2.44-57-g34106fee6
@ 2026-10-03 7:12 Bernd Kuhls
2026-10-03 14:08 ` Thomas Petazzoni via buildroot
2026-10-10 9:22 ` Thomas Perale via buildroot
0 siblings, 2 replies; 3+ messages in thread
From: Bernd Kuhls @ 2026-10-03 7:12 UTC (permalink / raw)
To: buildroot; +Cc: Romain Naour, Thomas Petazzoni
Fixes CVE-2026-97399:
https://gitlab.com/gnutools/glibc/-/commit/34106fee698c83eb0af71d4d0381e66b399be746
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
package/glibc/glibc.hash | 2 +-
package/glibc/glibc.mk | 5 ++++-
package/localedef/localedef.mk | 2 +-
3 files changed, 6 insertions(+), 3 deletions(-)
diff --git a/package/glibc/glibc.hash b/package/glibc/glibc.hash
index 439fe1f140..51e29673c3 100644
--- a/package/glibc/glibc.hash
+++ b/package/glibc/glibc.hash
@@ -1,5 +1,5 @@
# Locally calculated (fetched from git)
-sha256 2ba6ee9ed5177a792fcce4da13225800f0cb3a2413a459e7864b8843eb5cb790 glibc-2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891-git4.tar.gz
+sha256 902d628994c2f3b30af4a7f507835079852cc8ed21d8a7f340e45dc5dae148bf glibc-2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746-git4.tar.gz
# Hashes for license files
sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYINGv2
diff --git a/package/glibc/glibc.mk b/package/glibc/glibc.mk
index a838ac1a81..435a97361b 100644
--- a/package/glibc/glibc.mk
+++ b/package/glibc/glibc.mk
@@ -7,7 +7,7 @@
# Generate version string using:
# git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
# When updating the version, please also update localedef
-GLIBC_VERSION = 2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891
+GLIBC_VERSION = 2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746
GLIBC_SITE = https://gitlab.com/gnutools/glibc.git
GLIBC_SITE_METHOD = git
@@ -46,6 +46,9 @@ GLIBC_IGNORE_CVES += CVE-2026-8674
# Fixed by 2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891
GLIBC_IGNORE_CVES += CVE-2026-89092
+# Fixed by 2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746
+GLIBC_IGNORE_CVES += CVE-2026-97399
+
# This CVE is considered as not being security issues by
# upstream glibc:
# https://security-tracker.debian.org/tracker/CVE-2010-4756
diff --git a/package/localedef/localedef.mk b/package/localedef/localedef.mk
index e4bfce1a3a..becbdfae7f 100644
--- a/package/localedef/localedef.mk
+++ b/package/localedef/localedef.mk
@@ -7,7 +7,7 @@
# Use the same VERSION, SITE, and LICENSE as target glibc
# As in glibc.mk, generate version string using:
# git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
-LOCALEDEF_VERSION = 2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891
+LOCALEDEF_VERSION = 2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746
LOCALEDEF_SOURCE = glibc-$(LOCALEDEF_VERSION)$(BR_FMT_VERSION_git).tar.gz
LOCALEDEF_SITE = https://gitlab.com/gnutools/glibc.git
LOCALEDEF_SITE_METHOD = git
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/{glibc, localedef}: security bump version to 2.44-57-g34106fee6
2026-10-03 7:12 [Buildroot] [PATCH 1/1] package/{glibc, localedef}: security bump version to 2.44-57-g34106fee6 Bernd Kuhls
@ 2026-10-03 14:08 ` Thomas Petazzoni via buildroot
2026-10-10 9:22 ` Thomas Perale via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni via buildroot @ 2026-10-03 14:08 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Romain Naour
On Sat, Oct 03, 2026 at 09:12:37AM +0200, Bernd Kuhls wrote:
> Fixes CVE-2026-97399:
> https://gitlab.com/gnutools/glibc/-/commit/34106fee698c83eb0af71d4d0381e66b399be746
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to master, thanks!
Best regards,
Thomas Petazzoni
--
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/{glibc, localedef}: security bump version to 2.44-57-g34106fee6
2026-10-03 7:12 [Buildroot] [PATCH 1/1] package/{glibc, localedef}: security bump version to 2.44-57-g34106fee6 Bernd Kuhls
2026-10-03 14:08 ` Thomas Petazzoni via buildroot
@ 2026-10-10 9:22 ` Thomas Perale via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-10 9:22 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Thomas Perale, buildroot
In reply of:
> Fixes CVE-2026-97399:
> https://gitlab.com/gnutools/glibc/-/commit/34106fee698c83eb0af71d4d0381e66b399be746
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to 2026.08.x. Thanks
> ---
> package/glibc/glibc.hash | 2 +-
> package/glibc/glibc.mk | 5 ++++-
> package/localedef/localedef.mk | 2 +-
> 3 files changed, 6 insertions(+), 3 deletions(-)
>
> diff --git a/package/glibc/glibc.hash b/package/glibc/glibc.hash
> index 439fe1f140..51e29673c3 100644
> --- a/package/glibc/glibc.hash
> +++ b/package/glibc/glibc.hash
> @@ -1,5 +1,5 @@
> # Locally calculated (fetched from git)
> -sha256 2ba6ee9ed5177a792fcce4da13225800f0cb3a2413a459e7864b8843eb5cb790 glibc-2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891-git4.tar.gz
> +sha256 902d628994c2f3b30af4a7f507835079852cc8ed21d8a7f340e45dc5dae148bf glibc-2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746-git4.tar.gz
>
> # Hashes for license files
> sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYINGv2
> diff --git a/package/glibc/glibc.mk b/package/glibc/glibc.mk
> index a838ac1a81..435a97361b 100644
> --- a/package/glibc/glibc.mk
> +++ b/package/glibc/glibc.mk
> @@ -7,7 +7,7 @@
> # Generate version string using:
> # git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
> # When updating the version, please also update localedef
> -GLIBC_VERSION = 2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891
> +GLIBC_VERSION = 2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746
> GLIBC_SITE = https://gitlab.com/gnutools/glibc.git
> GLIBC_SITE_METHOD = git
>
> @@ -46,6 +46,9 @@ GLIBC_IGNORE_CVES += CVE-2026-8674
> # Fixed by 2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891
> GLIBC_IGNORE_CVES += CVE-2026-89092
>
> +# Fixed by 2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746
> +GLIBC_IGNORE_CVES += CVE-2026-97399
> +
> # This CVE is considered as not being security issues by
> # upstream glibc:
> # https://security-tracker.debian.org/tracker/CVE-2010-4756
> diff --git a/package/localedef/localedef.mk b/package/localedef/localedef.mk
> index e4bfce1a3a..becbdfae7f 100644
> --- a/package/localedef/localedef.mk
> +++ b/package/localedef/localedef.mk
> @@ -7,7 +7,7 @@
> # Use the same VERSION, SITE, and LICENSE as target glibc
> # As in glibc.mk, generate version string using:
> # git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
> -LOCALEDEF_VERSION = 2.44-55-gc90398e00571476711792baacb6d92bd2a7b6891
> +LOCALEDEF_VERSION = 2.44-57-g34106fee698c83eb0af71d4d0381e66b399be746
> LOCALEDEF_SOURCE = glibc-$(LOCALEDEF_VERSION)$(BR_FMT_VERSION_git).tar.gz
> LOCALEDEF_SITE = https://gitlab.com/gnutools/glibc.git
> LOCALEDEF_SITE_METHOD = git
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-10-10 9:22 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-03 7:12 [Buildroot] [PATCH 1/1] package/{glibc, localedef}: security bump version to 2.44-57-g34106fee6 Bernd Kuhls
2026-10-03 14:08 ` Thomas Petazzoni via buildroot
2026-10-10 9:22 ` Thomas Perale via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.