summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2023-10-06 22:08:14 +0200
committerSteve Sakoman <steve@sakoman.com>2023-10-07 05:39:59 -1000
commitfcb237541720b02c29a4be4cfab4d326153034fc (patch)
treea2b1b11dd2d2bf5273f7104ea527c42516b15824
parent91c3fc996ea1c4946295918e58d762a4bfcf7b3b (diff)
downloadpoky-fcb237541720b02c29a4be4cfab4d326153034fc.tar.gz
glibc: Update to latest on stable 2.35 branch
Adresses CVE-2023-4911. Single commit bump: * c84018a05ae tunables: Terminate if end of input is reached (CVE-2023-4911) (From OE-Core rev: bca43f95850d395f9dc56644fa1d12910cabb0c5) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-core/glibc/glibc-version.inc2
-rw-r--r--meta/recipes-core/glibc/glibc_2.35.bb2
2 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index c23a43576c..e0d47f283b 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -1,6 +1,6 @@
1SRCBRANCH ?= "release/2.35/master" 1SRCBRANCH ?= "release/2.35/master"
2PV = "2.35" 2PV = "2.35"
3SRCREV_glibc ?= "73d4ce728a59deb2fd18969e559769b3f590fac9" 3SRCREV_glibc ?= "c84018a05aec80f5ee6f682db0da1130b0196aef"
4SRCREV_localedef ?= "794da69788cbf9bf57b59a852f9f11307663fa87" 4SRCREV_localedef ?= "794da69788cbf9bf57b59a852f9f11307663fa87"
5 5
6GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git" 6GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git"
diff --git a/meta/recipes-core/glibc/glibc_2.35.bb b/meta/recipes-core/glibc/glibc_2.35.bb
index b4bad5b7ac..271520f76b 100644
--- a/meta/recipes-core/glibc/glibc_2.35.bb
+++ b/meta/recipes-core/glibc/glibc_2.35.bb
@@ -17,7 +17,7 @@ CVE_CHECK_IGNORE += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
17CVE_CHECK_IGNORE += "CVE-2019-1010025" 17CVE_CHECK_IGNORE += "CVE-2019-1010025"
18 18
19# To avoid these in cve-check reports since the recipe version did not change 19# To avoid these in cve-check reports since the recipe version did not change
20CVE_CHECK_IGNORE += "CVE-2023-4813 CVE-2023-4806 CVE-2023-5156" 20CVE_CHECK_IGNORE += "CVE-2023-4813 CVE-2023-4806 CVE-2023-4911 CVE-2023-5156"
21 21
22DEPENDS += "gperf-native bison-native" 22DEPENDS += "gperf-native bison-native"
23 23