Skip to content

glibc: Update to v2.44+git.b84047b5 - #10690

Open
EbonJaeger wants to merge 1 commit into
mainfrom
glibc-update
Open

EbonJaeger wants to merge 1 commit into
mainfrom
glibc-update

Conversation

@EbonJaeger

Copy link
Copy Markdown
Member

Summary

  • misc: Fix out-of-bounds array write in tdelete
  • m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c
  • posix: Remove unnecessary overflow check in wordexp
  • stdlib: Fix right-justification in strfmon
  • iconvdata: SHIFT_JISX0213 decoding lacks pending character reset
  • iconvdata: EUC_JISX0213 decoding lacks pending character reset
  • alpha: Fix stack alignment in makecontext
  • alpha: add the denormal trap enable bit to FE_NOMASK_ENV
  • libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling
  • elf: Do not load cache extensions from an old-format ld.so.cache

Packager Notes
Most of the old perf patches didn't build. I opted to drop them instead of rebasing because AerynOS doesn't use them, either.

Security

Signed-off-by: Evan Maddock maddock.evan@vivaldi.net

Test Plan

Rebuild nano, install it, and see that it still works.

Checklist

  • Package was built and tested against unstable
  • This change could gainfully be listed in the weekly sync notes once merged
  • I agree to license this contribution and all my previous contributions under the licensing terms in LICENSE.md and have the power and authority to grant those licenses.

**Summary**
- misc: Fix out-of-bounds array write in tdelete
- m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c
- posix: Remove unnecessary overflow check in wordexp
- stdlib: Fix right-justification in strfmon
- iconvdata: SHIFT_JISX0213 decoding lacks pending character reset
- iconvdata: EUC_JISX0213 decoding lacks pending character reset
- alpha: Fix stack alignment in makecontext
- alpha: add the denormal trap enable bit to FE_NOMASK_ENV
- libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling
- elf: Do not load cache extensions from an old-format ld.so.cache

**Security**
- CVE-2026-18374
- CVE-2026-77117
- CVE-2026-80489

Signed-off-by: Evan Maddock <maddock.evan@vivaldi.net>
@EbonJaeger EbonJaeger added the Security Security issue label Sep 14, 2026
@github-project-automation github-project-automation Bot moved this to Triage in Solus Sep 14, 2026
@joebonrichie

Copy link
Copy Markdown
Contributor

Might as well do a full GNU toolchain upgrade & rebootstrap if we land this.

i will check the performance patches when i have time. They did fix performance regressions against the baseline x86-64-v1 for the x86-64-v3 built libm.so for various math functions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security Security issue

Projects

Status: Triage

Development

Successfully merging this pull request may close these issues.

2 participants