Waldemar Brodkorb d98e3f11e9 package/{glibc, localedef}: security bump to version 2.42-51-gcbf39c26b ...

Fixes following CVE's:

- CVE-2025-15281
  wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
  https://www.cve.org/CVERecord?id=CVE-2025-15281
  https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2026-0003
  fixed by upstream commit:
  https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=cbf39c26b25801e9bc88499b4fd361ac172d4125

- CVE-2026-0861
  Integer overflow in memalign leads to heap corruption
  https://www.cve.org/CVERecord?id=CVE-2026-0861
  https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2026-0001
  fixed by upstream commit:
  https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=b0ec8fb689df862171f0f78994a3bdeb51313545

- CVE-2026-0915
  getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
  https://www.cve.org/CVERecord?id=CVE-2026-0915
  https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2026-0002
  fixed by upstream commit:
  https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=453e6b8dbab935257eb0802b0c97bca6b67ba30e

For a full list of changes, see:
https://sourceware.org/git/?p=glibc.git;a=shortlog;h=cbf39c26b25801e9bc88499b4fd361ac172d4125

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Julien: add extra info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 18de297a5a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-02-04 17:29:15 +01:00

..

0001-HACK-only-build-and-install-localedef.patch

…

0002-relax-dependency-on-GCC-to-4.8-and-binutils-to-2.24.patch

…

0003-HACK-keep-_ISOC23_SOURCE-undefined-to-build-localede.patch

…

localedef.hash

…

localedef.mk

…