diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-08-07 19:17:02 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-08-13 08:42:58 -0700 |
| commit | 39bb9e606b514d3e09f0dc361330e61f8e65bb9e (patch) | |
| tree | b3046b585ed41cc8835b1fd6915718776e8de79d /meta/recipes-core | |
| parent | 170d5d05230f992a6b003bd15eb02cec4aef2cd9 (diff) | |
| download | poky-39bb9e606b514d3e09f0dc361330e61f8e65bb9e.tar.gz | |
glibc: stable 2.41 branch updates
$ git log --oneline 6e489c17f827317bcf8544efefa65f13b5a079dc..e7c419a2957590fb657900fc92a89708f41abd9d
e7c419a295 (origin/release/2.41/master, release/2.41/master) iconv: iconv -o should not create executable files (bug 33164)
1e16d0096d posix: Fix double-free after allocation failure in regcomp (bug 33185)
Add CVE-2025-8058 to CVE ignore list as this is (bug 33185) commit.
(From OE-Core rev: af3e5e432d9bf1e5811ea92f3e29c0874b6b9405)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/recipes-core')
| -rw-r--r-- | meta/recipes-core/glibc/glibc-version.inc | 2 | ||||
| -rw-r--r-- | meta/recipes-core/glibc/glibc_2.41.bb | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc index a2cfd0f308..881a9cce2c 100644 --- a/meta/recipes-core/glibc/glibc-version.inc +++ b/meta/recipes-core/glibc/glibc-version.inc | |||
| @@ -1,6 +1,6 @@ | |||
| 1 | SRCBRANCH ?= "release/2.41/master" | 1 | SRCBRANCH ?= "release/2.41/master" |
| 2 | PV = "2.41+git" | 2 | PV = "2.41+git" |
| 3 | SRCREV_glibc ?= "6e489c17f827317bcf8544efefa65f13b5a079dc" | 3 | SRCREV_glibc ?= "e7c419a2957590fb657900fc92a89708f41abd9d" |
| 4 | SRCREV_localedef ?= "fab74f31b3811df543e24b6de47efdf45b538abc" | 4 | SRCREV_localedef ?= "fab74f31b3811df543e24b6de47efdf45b538abc" |
| 5 | 5 | ||
| 6 | GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" | 6 | GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" |
diff --git a/meta/recipes-core/glibc/glibc_2.41.bb b/meta/recipes-core/glibc/glibc_2.41.bb index 7ddf7f9127..8a65e8ce9f 100644 --- a/meta/recipes-core/glibc/glibc_2.41.bb +++ b/meta/recipes-core/glibc/glibc_2.41.bb | |||
| @@ -17,7 +17,7 @@ Allows for ASLR bypass so can bypass some hardening, not an exploit in itself, m | |||
| 17 | easier access for another. 'ASLR bypass itself is not a vulnerability.'" | 17 | easier access for another. 'ASLR bypass itself is not a vulnerability.'" |
| 18 | 18 | ||
| 19 | CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORTS" | 19 | CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORTS" |
| 20 | CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-4802 CVE-2025-5702 CVE-2025-5745" | 20 | CVE_STATUS_STABLE_BACKPORTS = "CVE-2025-4802 CVE-2025-5702 CVE-2025-5745 CVE-2025-8058" |
| 21 | CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash" | 21 | CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash" |
| 22 | 22 | ||
| 23 | DEPENDS += "gperf-native bison-native" | 23 | DEPENDS += "gperf-native bison-native" |