Skip to content

[HIGH] Patch glibc for CVE-2026-4046 #17075

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
v-aaditya wants to merge 2 commits into
base: fasttrack/3.0
Choose a base branch
from
Open

[HIGH] Patch glibc for CVE-2026-4046 #17075

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
95e87a2
Patch for CVE-2026-4046
v-aaditya May 7, 2026
b584894
Update changelog date for glibc.spec
v-aaditya May 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions SPECS-EXTENDED/buildah/buildah.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ Epoch: 0
Version: 1.41.4
# The `AND` needs to be uppercase in the License for SPDX compatibility
License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
Release: 7%{?dist}
Release: 8%{?dist}
Vendor: Microsoft Corporation
Distribution: Azure Linux
ExclusiveArch: aarch64 ppc64le s390x x86_64
Expand All @@ -43,7 +43,7 @@ BuildRequires: device-mapper-devel
BuildRequires: git-core
BuildRequires: golang >= 1.16.6
BuildRequires: glib2-devel
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}
%if !%{defined gobuild}
BuildRequires: go-rpm-macros
%endif
Expand Down Expand Up @@ -173,6 +173,9 @@ make test-unit
%{_datadir}/%{name}/test

%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 0:1.41.4-8
- Bump to rebuild with updated glibc

* Wed Mar 25 2026 Aditya Singh <v-aditysing@microsoft.com> - 0:1.41.4-7
- Bump to rebuild with updated glibc

Expand Down
7 changes: 5 additions & 2 deletions SPECS-EXTENDED/catatonit/catatonit.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ Distribution: Azure Linux

Name: catatonit
Version: 0.1.7
Release: 27%{?dist}
Release: 28%{?dist}
Summary: A signal-forwarding process manager for containers
License: GPLv3+
URL: https://github.com/openSUSE/catatonit
Expand All @@ -13,7 +13,7 @@ BuildRequires: automake
BuildRequires: file
BuildRequires: gcc
BuildRequires: git
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}
BuildRequires: libtool
BuildRequires: make

Expand Down Expand Up @@ -61,6 +61,9 @@ ln -s %{_libexecdir}/%{name}/%{name} %{buildroot}%{_libexecdir}/podman/%{name}
%{_libexecdir}/podman/%{name}

%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 0.1.7-28
- Bump to rebuild with updated glibc

* Wed Mar 25 2026 Aditya Singh <v-aditysing@microsoft.com> - 0.1.7-27
- Bump to rebuild with updated glibc

Expand Down
7 changes: 5 additions & 2 deletions SPECS-EXTENDED/crun/crun.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
Summary: OCI runtime written in C
Name: crun
Version: 1.24
Release: 4%{?dist}
Release: 5%{?dist}
Vendor: Microsoft Corporation
Distribution: Azure Linux
URL: https://github.com/containers/%{name}
Expand Down Expand Up @@ -48,7 +48,7 @@ BuildRequires: wasmedge-devel
%endif

BuildRequires: python
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}
Provides: oci-runtime

%description
Expand Down Expand Up @@ -114,6 +114,9 @@ rm -rf %{buildroot}%{_prefix}/lib*
%endif

%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 1.24-5
- Bump to rebuild with updated glibc

* Wed Mar 25 2026 Aditya Singh <v-aditysing@microsoft.com> - 1.24-4
- Bump to rebuild with updated glibc

Expand Down
7 changes: 5 additions & 2 deletions SPECS-EXTENDED/dyninst/dyninst.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: An API for Run-time Code Generation
License: LGPLv2+
Name: dyninst
Release: 29%{?dist}
Release: 30%{?dist}
Vendor: Microsoft Corporation
Distribution: Azure Linux
URL: http://www.dyninst.org
Expand Down Expand Up @@ -31,7 +31,7 @@ BuildRequires: tbb tbb-devel

# Extra requires just for the testsuite
BuildRequires: gcc-gfortran libstdc++-static libxml2-devel
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}

# Testsuite files should not provide/require anything
%{?filter_setup:
Expand Down Expand Up @@ -194,6 +194,9 @@ echo "%{_libdir}/dyninst" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf
%attr(644,root,root) %{_libdir}/dyninst/testsuite/*.a

%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 10.1.0-30
- Bump to rebuild with updated glibc

* Wed Mar 25 2026 Aditya Singh <v-aditysing@microsoft.com> - 10.1.0-29
- Bump to rebuild with updated glibc

Expand Down
7 changes: 5 additions & 2 deletions SPECS-EXTENDED/podman/podman.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ Epoch: 0
# If you're reading this on dist-git, the version is automatically filled in by Packit.
Version: 5.6.1
License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
Release: 8%{?dist}
Release: 9%{?dist}
ExclusiveArch: aarch64 ppc64le s390x x86_64 riscv64
Summary: Manage Pods, Containers and Container Images
Vendor: Microsoft Corporation
Expand All @@ -48,7 +48,7 @@ BuildRequires: btrfs-progs-devel
BuildRequires: gcc
BuildRequires: glib2-devel
BuildRequires: glibc-devel
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}
BuildRequires: golang
BuildRequires: git-core

Expand Down Expand Up @@ -298,6 +298,9 @@ make localunit

# rhcontainerbot account currently managed by lsm5
%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 0:5.6.1-9
- Bump to rebuild with updated glibc

* Wed Mar 25 2026 Aditya Singh <v-aditysing@microsoft.com> - 0:5.6.1-8
- Bump to rebuild with updated glibc

Expand Down
7 changes: 5 additions & 2 deletions SPECS/busybox/busybox.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: Statically linked binary providing simplified versions of system commands
Name: busybox
Version: 1.36.1
Release: 23%{?dist}
Release: 24%{?dist}
License: GPLv2
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -20,7 +20,7 @@ Patch6: CVE-2023-39810.patch
Patch7: CVE-2022-48174.patch
Patch8: CVE-2026-26157.patch
BuildRequires: gcc
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}
BuildRequires: libselinux-devel >= 1.27.7-2
BuildRequires: libsepol-devel
%if 0%{?with_check}
Expand Down Expand Up @@ -110,6 +110,9 @@ cd testsuite
%{_mandir}/man1/busybox.petitboot.1.gz

%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 1.36.1-24
- Bump to rebuild with updated glibc

* Wed Mar 25 2026 Aditya Singh <v-aditysing@microsoft.com> - 1.36.1-23
- Bump to rebuild with updated glibc

Expand Down
7 changes: 5 additions & 2 deletions SPECS/flannel/flannel.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Simple and easy way to configure a layer 3 network fabric designed for Kubernetes
Name: flannel
Version: 0.24.2
Release: 26%{?dist}
Release: 27%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -20,7 +20,7 @@ Patch5: CVE-2025-65637.patch
Patch6: CVE-2026-32241.patch
BuildRequires: gcc
BuildRequires: glibc-devel
BuildRequires: glibc-static >= 2.38-19%{?dist}
BuildRequires: glibc-static >= 2.38-20%{?dist}
BuildRequires: golang < 1.25
BuildRequires: kernel-headers

Expand Down Expand Up @@ -54,6 +54,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld
%{_bindir}/flanneld

%changelog
* Thu May 07 2026 Aditya Singh <v-aditysing@microsoft.com> - 0.24.2-27
- Bump to rebuild with updated glibc

* Mon Mar 30 2026 Aditya Singh <v-aditysing@microsoft.com> - 0.24.2-26
- Bump to rebuild with updated glibc
* Mon Mar 30 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 0.24.2-25
Expand Down
Loading
Loading