[wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

[wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

[Harish.Sadineni]

From: Harish Sadineni <Harish.Sadineni@windriver.com>

Update SRCREV to pull the latest fixes from the upstream
release/2.43/master branch, including fixes for the following CVEs:

CVE-2026-89092 CVE-2026-97399

Commits between the old SRCREV (9cda6fc96ab) and the new SRCREV (562cd7badd):

562cd7badd powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399)
533e1c955c elf: Open the normalized $ORIGIN rpath in AT_SECURE programs (BZ 34360)
8305f5b8fa realloc: Fix mmap non-mremap reallocation case [BZ #34697]
e51efbc44f CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache

Testing Results:
+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 6601   | 6601   | +0   |
| XPASS        | 4      | 4      |  0   |
| FAIL         | 142    | 143    | +1   |
| XFAIL        | 16     | 16     |  0   |
| UNSUPPORTED  | 559    | 560    | +1   |
+--------------+--------+--------+------+

Changes in testcases:                     Before   After
elf/tst-dl-path-normalize                  ---     PASS
elf/tst-origin-secure                      ---     UNSUPPORTED
malloc/tst-malloc-too-large-malloc-check   PASS    FAIL

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
---
 meta/recipes-core/glibc/glibc-version.inc | 2 +-
 meta/recipes-core/glibc/glibc_2.43.bb     | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index 5f6863df16..e8e6bb665a 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@
 SRCBRANCH ?= "release/2.43/master"
 PV = "2.43+git"
-SRCREV_glibc ?= "9cda6fc96abd035d9cbe68482138d4a78a51a7d5"
+SRCREV_glibc ?= "562cd7badd3f9edd74b68316439f910f6f7c4c1f"
 SRCREV_localedef ?= "cba02c503d7c853a38ccfb83c57e343ca5ecd7e5"
 
 GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"
diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb
index 104d6b4067..07e221eb46 100644
--- a/meta/recipes-core/glibc/glibc_2.43.bb
+++ b/meta/recipes-core/glibc/glibc_2.43.bb
@@ -21,6 +21,7 @@ CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 CVE-20
     CVE-2026-4046 \
     CVE-2026-5435 CVE-2026-5450 CVE-2026-5928 CVE-2026-6238 CVE-2026-6791 \
     CVE-2026-6368 CVE-2026-19499 CVE-2026-77117 CVE-2026-80489 CVE-2026-18374 CVE-2026-8674 \
+    CVE-2026-89092 CVE-2026-97399 CVE-2026-19542 \
 "
 CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"
 
-- 
2.49.0

Re: [wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

[Sadineni, Harish]

[-- Attachment #1: Type: text/plain, Size: 202 bytes --]

Hi all,

please take this update on top of [wrynose][PATCH v2] glibc: stable 2.43 branch updates to 9cda6fc96ab.
https://lists.openembedded.org/g/openembedded-core/message/246907

Thanks,
Harish

[-- Attachment #2: Type: text/html, Size: 374 bytes --]

RE: [OE-core] [wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

[Marko, Peter]

[-- Attachment #1: Type: text/plain, Size: 609 bytes --]

These two updates would put wrynose ahead of master and blacksail.

Peter

From: openembedded-core@lists.openembedded.org <openembedded-core@lists.openembedded.org> On Behalf Of Sadineni, Harish via lists.openembedded.org
Sent: Wednesday, October 7, 2026 12:30 PM
To: openembedded-core@lists.openembedded.org
Subject: Re: [OE-core] [wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

Hi all,

please take this update on top of [wrynose][PATCH v2] glibc: stable 2.43 branch updates to 9cda6fc96ab.
https://lists.openembedded.org/g/openembedded-core/message/246907

Thanks,
Harish

[-- Attachment #2: Type: text/html, Size: 3114 bytes --]

RE: [OE-core] [wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

[Marko, Peter]

[-- Attachment #1: Type: text/plain, Size: 1106 bytes --]

I have sent the update for master now.
Blacksail will be done when it merges in master.

Peter

From: Marko, Peter (FT D EU SK BFS1)
Sent: Wednesday, October 7, 2026 12:43 PM
To: Harish.Sadineni@windriver.com; openembedded-core@lists.openembedded.org
Subject: RE: [OE-core] [wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

These two updates would put wrynose ahead of master and blacksail.

Peter

From: openembedded-core@lists.openembedded.org<mailto:openembedded-core@lists.openembedded.org> <openembedded-core@lists.openembedded.org<mailto:openembedded-core@lists.openembedded.org>> On Behalf Of Sadineni, Harish via lists.openembedded.org
Sent: Wednesday, October 7, 2026 12:30 PM
To: openembedded-core@lists.openembedded.org<mailto:openembedded-core@lists.openembedded.org>
Subject: Re: [OE-core] [wrynose][PATCH] glibc: stable 2.43 branch updates to 562cd7badd

Hi all,

please take this update on top of [wrynose][PATCH v2] glibc: stable 2.43 branch updates to 9cda6fc96ab.
https://lists.openembedded.org/g/openembedded-core/message/246907

Thanks,
Harish

[-- Attachment #2: Type: text/html, Size: 4665 bytes --]