mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 00:04:06 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/{glibc, localedef}: security bump version to 2.44-36-g2d5421ffc

Browse Source 
Fixes the following CVEs:

CVE-2026-19499:
63b53df549

CVE-2026-77117:
6f9b2bfa50

CVE-2026-80489:
cb61572ea3

Added GLIBC_IGNORE_CVES for CVE-2026-19542 which was forgotten in
buildroot commit 58f3137738.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Bernd Kuhls
2026-08-29 21:07:55 +02:00
committed by Julien Olivain
parent e1ec936cf7
commit be382f6061
3 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/glibc/glibc.hash
View File

@@ -1,5 +1,5 @@
# Locally calculated (fetched from git)
sha256 028aa13d6c0737aecf0ec6ac0fa842e3a18c82bcdaeeb800d42a65a76dcbfe91 glibc-2.44-27-gae9225d55963c4420c49ccfa3f2fafc416f92032-git4.tar.gz
sha256 39f6808e31a02da42f774912c6754ea22d5f076c4e935b1e233f3602d4d772c0 glibc-2.44-36-g2d5421ffca8893534d5e02ad38c28acd8e778fa3-git4.tar.gz
# Hashes for license files
sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYINGv2

14
package/glibc/glibc.mk
View File

@@ -7,7 +7,7 @@
# Generate version string using:
# git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
# When updating the version, please also update localedef
GLIBC_VERSION = 2.44-27-gae9225d55963c4420c49ccfa3f2fafc416f92032
GLIBC_VERSION = 2.44-36-g2d5421ffca8893534d5e02ad38c28acd8e778fa3
GLIBC_SITE = https://gitlab.com/gnutools/glibc.git
GLIBC_SITE_METHOD = git
@@ -25,6 +25,18 @@ GLIBC_CPE_ID_VENDOR = gnu
# allow proper matching with the CPE database.
GLIBC_CPE_ID_VERSION = $(word 1, $(subst -,$(space),$(GLIBC_VERSION)))
# Fixed by 2.44-26-gd6ff274313d79feb864cc10eb775b91c817a67e9
GLIBC_IGNORE_CVES += CVE-2026-19542
# Fixed by 2.44-29-g63b53df549451a5d69fcba6d7612ea99f517e8e3
GLIBC_IGNORE_CVES += CVE-2026-19499
# Fixed by 2.44-30-g6f9b2bfa500bf5d1cff5d990adfff4b71298dadd
GLIBC_IGNORE_CVES += CVE-2026-77117
# Fixed by 2.44-31-gcb61572ea3f773e1e1978f6c412cc36a30acdb0c
GLIBC_IGNORE_CVES += CVE-2026-80489
# This CVE is considered as not being security issues by
# upstream glibc:
# https://security-tracker.debian.org/tracker/CVE-2010-4756

2
package/localedef/localedef.mk
View File

@@ -7,7 +7,7 @@
# Use the same VERSION, SITE, and LICENSE as target glibc
# As in glibc.mk, generate version string using:
# git describe --match 'glibc-*' --abbrev=40 origin/release/MAJOR.MINOR/master | cut -d '-' -f 2-
LOCALEDEF_VERSION = 2.44-27-gae9225d55963c4420c49ccfa3f2fafc416f92032
LOCALEDEF_VERSION = 2.44-36-g2d5421ffca8893534d5e02ad38c28acd8e778fa3
LOCALEDEF_SOURCE = glibc-$(LOCALEDEF_VERSION)$(BR_FMT_VERSION_git).tar.gz
LOCALEDEF_SITE = https://gitlab.com/gnutools/glibc.git
LOCALEDEF_SITE_METHOD = git