diff --git a/SPECS-EXTENDED/buildah/buildah.spec b/SPECS-EXTENDED/buildah/buildah.spec index 368da66a348..18ccaa94c5e 100644 --- a/SPECS-EXTENDED/buildah/buildah.spec +++ b/SPECS-EXTENDED/buildah/buildah.spec @@ -21,7 +21,7 @@ Summary: A command line tool used for creating OCI Images Name: buildah Version: 1.18.0 -Release: 28%{?dist} +Release: 29%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Mariner @@ -32,7 +32,7 @@ BuildRequires: btrfs-progs-devel BuildRequires: device-mapper-devel BuildRequires: git BuildRequires: glib2-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: go-md2man BuildRequires: go-rpm-macros BuildRequires: golang @@ -123,6 +123,9 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype %{_datadir}/%{name}/test %changelog +* Tue Feb 03 2026 Aditya Singh - 1.18.0-29 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 1.18.0-28 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/catatonit/catatonit.spec b/SPECS-EXTENDED/catatonit/catatonit.spec index 4aaec5f3ba8..e73134e181b 100644 --- a/SPECS-EXTENDED/catatonit/catatonit.spec +++ b/SPECS-EXTENDED/catatonit/catatonit.spec @@ -3,7 +3,7 @@ Distribution: Mariner Name: catatonit Version: 0.1.7 -Release: 12%{?dist} +Release: 13%{?dist} Summary: A signal-forwarding process manager for containers License: GPLv3+ URL: https://github.com/openSUSE/catatonit @@ -13,7 +13,7 @@ BuildRequires: automake BuildRequires: file BuildRequires: gcc BuildRequires: git -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: libtool BuildRequires: make @@ -61,6 +61,9 @@ ln -s %{_libexecdir}/%{name}/%{name} %{buildroot}%{_libexecdir}/podman/%{name} %{_libexecdir}/podman/%{name} %changelog +* Tue Feb 03 2026 Aditya Singh - 0.1.7-13 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 0.1.7-12 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/dyninst/dyninst.spec b/SPECS-EXTENDED/dyninst/dyninst.spec index 5db032c9148..d907267ac43 100644 --- a/SPECS-EXTENDED/dyninst/dyninst.spec +++ b/SPECS-EXTENDED/dyninst/dyninst.spec @@ -1,7 +1,7 @@ Summary: An API for Run-time Code Generation License: LGPLv2+ Name: dyninst -Release: 14%{?dist} +Release: 15%{?dist} Vendor: Microsoft Corporation Distribution: Mariner URL: http://www.dyninst.org @@ -31,7 +31,7 @@ BuildRequires: tbb tbb-devel # Extra requires just for the testsuite BuildRequires: gcc-gfortran libstdc++-static libxml2-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} # Testsuite files should not provide/require anything %{?filter_setup: @@ -194,6 +194,9 @@ echo "%{_libdir}/dyninst" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf %attr(644,root,root) %{_libdir}/dyninst/testsuite/*.a %changelog +* Tue Feb 03 2026 Aditya Singh - 10.1.0-15 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 10.1.0-14 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/podman/podman.spec b/SPECS-EXTENDED/podman/podman.spec index 66a4f0ec713..b06790f4715 100644 --- a/SPECS-EXTENDED/podman/podman.spec +++ b/SPECS-EXTENDED/podman/podman.spec @@ -36,7 +36,7 @@ Name: podman Version: 4.1.1 -Release: 25%{?dist} +Release: 26%{?dist} License: ASL 2.0 and BSD and ISC and MIT and MPLv2.0 Summary: Manage Pods, Containers and Container Images Vendor: Microsoft Corporation @@ -51,7 +51,7 @@ BuildRequires: go-md2man BuildRequires: golang BuildRequires: gcc BuildRequires: glib2-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: git BuildRequires: go-rpm-macros BuildRequires: gpgme-devel @@ -387,6 +387,9 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/ # rhcontainerbot account currently managed by lsm5 %changelog +* Tue Feb 03 2026 Aditya Singh - 4.1.1-26 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 4.1.1-25 - Bump to rebuild with updated glibc diff --git a/SPECS/busybox/busybox.spec b/SPECS/busybox/busybox.spec index 7e56a0110f8..b1b0c690d77 100644 --- a/SPECS/busybox/busybox.spec +++ b/SPECS/busybox/busybox.spec @@ -1,7 +1,7 @@ Summary: Statically linked binary providing simplified versions of system commands Name: busybox Version: 1.35.0 -Release: 16%{?dist} +Release: 17%{?dist} License: GPLv2 Vendor: Microsoft Corporation Distribution: Mariner @@ -25,7 +25,7 @@ Patch11: CVE-2023-42366.patch Patch12: CVE-2022-48174.patch Patch13: CVE-2023-39810.patch BuildRequires: gcc -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: libselinux-devel >= 1.27.7-2 BuildRequires: libsepol-devel # libbb/hash_md5_sha.c @@ -103,6 +103,9 @@ install -m 644 docs/busybox.petitboot.1 %{buildroot}/%{_mandir}/man1/busybox.pet %{_mandir}/man1/busybox.petitboot.1.gz %changelog +* Tue Feb 03 2026 Aditya Singh - 1.35.0-17 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 1.35.0-16 - Bump to rebuild with updated glibc diff --git a/SPECS/flannel/flannel.spec b/SPECS/flannel/flannel.spec index fa690f11567..1415432ba89 100644 --- a/SPECS/flannel/flannel.spec +++ b/SPECS/flannel/flannel.spec @@ -4,7 +4,7 @@ Summary: Simple and easy way to configure a layer 3 network fabric designed for Kubernetes Name: flannel Version: 0.14.0 -Release: 29%{?dist} +Release: 30%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Mariner @@ -17,7 +17,7 @@ Patch1: CVE-2025-65637.patch BuildRequires: gcc BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: golang BuildRequires: kernel-headers @@ -50,6 +50,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld %{_bindir}/flanneld %changelog +* Tue Feb 03 2026 Aditya Singh - 0.14.0-30 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 0.14.0-29 - Bump to rebuild with updated glibc diff --git a/SPECS/glibc/CVE-2025-15281.patch b/SPECS/glibc/CVE-2025-15281.patch new file mode 100644 index 00000000000..edc664e9139 --- /dev/null +++ b/SPECS/glibc/CVE-2025-15281.patch @@ -0,0 +1,201 @@ +From ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc Mon Sep 17 00:00:00 2001 +From: Adhemerval Zanella +Date: Thu, 15 Jan 2026 10:32:19 -0300 +Subject: [PATCH 1/1] posix: Reset wordexp_t fields with WRDE_REUSE + (CVE-2025-15281 / BZ 33814) + +The wordexp fails to properly initialize the input wordexp_t when +WRDE_REUSE is used. The wordexp_t struct is properly freed, but +reuses the old wc_wordc value and updates the we_wordv in the +wrong position. A later wordfree will then call free with an +invalid pointer. + +Checked on x86_64-linux-gnu and i686-linux-gnu. + +Reviewed-by: Carlos O'Donell +(cherry picked from commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302) + +Upstream Patch Reference: https://sourceware.org/git/?p=glibc.git;a=patch;h=ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc;hp=831f63b94ceb92fb14c0d1a7ddad35a0d1404c71 +--- + NEWS | 6 +++ + posix/Makefile | 10 +++++ + posix/tst-wordexp-reuse.c | 89 +++++++++++++++++++++++++++++++++++++++ + posix/wordexp.c | 2 + + 4 files changed, 107 insertions(+) + create mode 100644 posix/tst-wordexp-reuse.c + +diff --git a/NEWS b/NEWS +index faa7ec18..d8fbec32 100644 +--- a/NEWS ++++ b/NEWS +@@ -199,6 +199,10 @@ Security related changes: + corresponds to the / directory through an unprivileged mount + namespace. Reported by Qualys. + ++ GLIBC-SA-2026-0003 ++ wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized ++ memory (CVE-2025-15281) ++ + The following bugs are resolved with this release: + + [12889] nptl: Race condition in pthread_kill +@@ -335,6 +339,8 @@ The following bugs are resolved with this release: + [28837] libc: FAIL: socket/tst-socket-timestamp-compat + [28847] locale: Empty mon_decimal_point in LC_MONETARY results in non- + empty mon_decimal_point_wc ++ [33814] glob: wordexp with WRDE_REUSE and WRDE_APPEND may return ++ uninitialized memory + + + Version 2.34 +diff --git a/posix/Makefile b/posix/Makefile +index 9b30b53a..bc068ed9 100644 +--- a/posix/Makefile ++++ b/posix/Makefile +@@ -109,6 +109,7 @@ tests := test-errno tstgetopt testfnm runtests runptests \ + tst-glob-tilde test-ssize-max tst-spawn4 bug-regex37 \ + bug-regex38 tst-regcomp-truncated tst-spawn-chdir \ + tst-wordexp-nocmd tst-execveat tst-spawn5 \ ++ tst-wordexp-reuse \ + tst-sched_getaffinity tst-spawn6 + + # Test for the glob symbol version that was replaced in glibc 2.27. +@@ -156,6 +157,7 @@ generated += $(addprefix wordexp-test-result, 1 2 3 4 5 6 7 8 9 10) \ + bug-glob2.mtrace bug-glob2-mem.out tst-vfork3-mem.out \ + tst-vfork3.mtrace getconf.speclist tst-fnmatch-mem.out \ + tst-fnmatch.mtrace bug-regex36.mtrace \ ++ tst-wordexp-reuse-mem.out tst-wordexp-reuse.mtrace \ + testcases.h ptestcases.h + + ifeq ($(run-built-tests),yes) +@@ -174,6 +176,7 @@ tests-special += $(objpfx)bug-regex2-mem.out $(objpfx)bug-regex14-mem.out \ + $(objpfx)tst-boost-mem.out $(objpfx)tst-getconf.out \ + $(objpfx)bug-glob2-mem.out $(objpfx)tst-vfork3-mem.out \ + $(objpfx)tst-fnmatch-mem.out $(objpfx)bug-regex36-mem.out \ ++ $(objpfx)tst-wordexp-reuse.out \ + $(objpfx)tst-glob-tilde-mem.out $(objpfx)bug-ga2-mem.out + endif + +@@ -451,3 +454,10 @@ $(objpfx)posix-conf-vars-def.h: $(..)scripts/gen-posix-conf-vars.awk \ + $(make-target-directory) + $(AWK) -f $(filter-out Makefile, $^) > $@.tmp + mv -f $@.tmp $@ ++ ++tst-wordexp-reuse-ENV += MALLOC_TRACE=$(objpfx)tst-wordexp-reuse.mtrace \ ++ LD_PRELOAD=$(common-objpfx)/malloc/libc_malloc_debug.so ++ ++$(objpfx)tst-wordexp-reuse-mem.out: $(objpfx)tst-wordexp-reuse.out \ ++ $(common-objpfx)malloc/mtrace $(objpfx)tst-wordexp-reuse.mtrace > $@; \ ++ $(evaluate-test) +diff --git a/posix/tst-wordexp-reuse.c b/posix/tst-wordexp-reuse.c +new file mode 100644 +index 00000000..c2c12fd1 +--- /dev/null ++++ b/posix/tst-wordexp-reuse.c +@@ -0,0 +1,89 @@ ++/* Test for wordexp with WRDE_REUSE flag. ++ Copyright (C) 2026 Free Software Foundation, Inc. ++ This file is part of the GNU C Library. ++ ++ The GNU C Library is free software; you can redistribute it and/or ++ modify it under the terms of the GNU Lesser General Public ++ License as published by the Free Software Foundation; either ++ version 2.1 of the License, or (at your option) any later version. ++ ++ The GNU C Library is distributed in the hope that it will be useful, ++ but WITHOUT ANY WARRANTY; without even the implied warranty of ++ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU ++ Lesser General Public License for more details. ++ ++ You should have received a copy of the GNU Lesser General Public ++ License along with the GNU C Library; if not, see ++ . */ ++ ++#include ++#include ++ ++#include ++ ++static int ++do_test (void) ++{ ++ mtrace (); ++ ++ { ++ wordexp_t p = { 0 }; ++ TEST_COMPARE (wordexp ("one", &p, 0), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[0], "one"); ++ TEST_COMPARE (wordexp ("two", &p, WRDE_REUSE), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[0], "two"); ++ wordfree (&p); ++ } ++ ++ { ++ wordexp_t p = { .we_offs = 2 }; ++ TEST_COMPARE (wordexp ("one", &p, 0), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[0], "one"); ++ TEST_COMPARE (wordexp ("two", &p, WRDE_REUSE | WRDE_DOOFFS), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[p.we_offs + 0], "two"); ++ wordfree (&p); ++ } ++ ++ { ++ wordexp_t p = { 0 }; ++ TEST_COMPARE (wordexp ("one", &p, 0), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[0], "one"); ++ TEST_COMPARE (wordexp ("two", &p, WRDE_REUSE | WRDE_APPEND), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[0], "two"); ++ wordfree (&p); ++ } ++ ++ { ++ wordexp_t p = { .we_offs = 2 }; ++ TEST_COMPARE (wordexp ("one", &p, WRDE_DOOFFS), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[p.we_offs + 0], "one"); ++ TEST_COMPARE (wordexp ("two", &p, WRDE_REUSE ++ | WRDE_DOOFFS), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[p.we_offs + 0], "two"); ++ wordfree (&p); ++ } ++ ++ { ++ wordexp_t p = { .we_offs = 2 }; ++ TEST_COMPARE (wordexp ("one", &p, WRDE_DOOFFS), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[p.we_offs + 0], "one"); ++ TEST_COMPARE (wordexp ("two", &p, WRDE_REUSE ++ | WRDE_DOOFFS | WRDE_APPEND), 0); ++ TEST_COMPARE (p.we_wordc, 1); ++ TEST_COMPARE_STRING (p.we_wordv[p.we_offs + 0], "two"); ++ wordfree (&p); ++ } ++ ++ return 0; ++} ++ ++#include +diff --git a/posix/wordexp.c b/posix/wordexp.c +index d4cb9c73..25f5b509 100644 +--- a/posix/wordexp.c ++++ b/posix/wordexp.c +@@ -2219,7 +2219,9 @@ wordexp (const char *words, wordexp_t *pwordexp, int flags) + { + /* Minimal implementation of WRDE_REUSE for now */ + wordfree (pwordexp); ++ old_word.we_wordc = 0; + old_word.we_wordv = NULL; ++ pwordexp->we_wordc = 0; + } + + if ((flags & WRDE_APPEND) == 0) +-- +2.45.4 + diff --git a/SPECS/glibc/glibc.spec b/SPECS/glibc/glibc.spec index 79a1857a032..1a1865c26e7 100644 --- a/SPECS/glibc/glibc.spec +++ b/SPECS/glibc/glibc.spec @@ -7,7 +7,7 @@ Summary: Main C library Name: glibc Version: 2.35 -Release: 9%{?dist} +Release: 10%{?dist} License: BSD AND GPLv2+ AND Inner-Net AND ISC AND LGPLv2+ AND MIT Vendor: Microsoft Corporation Distribution: Mariner @@ -38,6 +38,7 @@ Patch12: CVE-2024-33601.patch Patch13: CVE-2026-0861.patch Patch14: CVE-2026-0915.patch Patch15: CVE-2025-0395.patch +Patch16: CVE-2025-15281.patch BuildRequires: bison BuildRequires: gawk BuildRequires: gettext @@ -330,6 +331,9 @@ grep "^FAIL: nptl/tst-eintr1" tests.sum >/dev/null && n=$((n+1)) ||: %defattr(-,root,root) %changelog +* Tue Feb 03 2026 Aditya Singh - 2.35-10 +- Patch for CVE-2025-15281 + * Wed Jan 28 2026 Azure Linux Security Servicing Account - 2.35-9 - Patch for CVE-2025-0395 diff --git a/SPECS/kubernetes/kubernetes.spec b/SPECS/kubernetes/kubernetes.spec index ca71e597faf..86abba7bbc5 100644 --- a/SPECS/kubernetes/kubernetes.spec +++ b/SPECS/kubernetes/kubernetes.spec @@ -10,7 +10,7 @@ Summary: Microsoft Kubernetes Name: kubernetes Version: 1.28.4 -Release: 23%{?dist} +Release: 24%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Mariner @@ -36,7 +36,7 @@ Patch14: CVE-2025-31133.patch Patch15: CVE-2025-13281.patch Patch16: CVE-2025-65637.patch BuildRequires: flex-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: golang BuildRequires: rsync BuildRequires: systemd-devel @@ -280,6 +280,9 @@ fi %{_exec_prefix}/local/bin/pause %changelog +* Tue Feb 03 2026 Aditya Singh - 1.28.4-24 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 1.28.4-23 - Bump to rebuild with updated glibc diff --git a/SPECS/kubevirt/kubevirt.spec b/SPECS/kubevirt/kubevirt.spec index 97d71cb9581..8b56e67276f 100644 --- a/SPECS/kubevirt/kubevirt.spec +++ b/SPECS/kubevirt/kubevirt.spec @@ -19,7 +19,7 @@ Summary: Container native virtualization Name: kubevirt Version: 0.59.0 -Release: 35%{?dist} +Release: 36%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Mariner @@ -55,7 +55,7 @@ Patch22: CVE-2025-64437.patch %global debug_package %{nil} BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: golang BuildRequires: golang-packaging BuildRequires: pkgconfig @@ -232,6 +232,9 @@ install -p -m 0644 cmd/virt-handler/nsswitch.conf %{buildroot}%{_datadir}/kube-v %{_bindir}/virt-tests %changelog +* Tue Feb 03 2026 Aditya Singh - 0.59.0-36 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 0.59.0-35 - Bump to rebuild with updated glibc diff --git a/SPECS/libcap/libcap.spec b/SPECS/libcap/libcap.spec index 883edf44721..10fa938ed53 100644 --- a/SPECS/libcap/libcap.spec +++ b/SPECS/libcap/libcap.spec @@ -1,7 +1,7 @@ Summary: Libcap Name: libcap Version: 2.60 -Release: 6%{?dist} +Release: 7%{?dist} License: GPLv2+ Group: System Environment/Security URL: https://www.gnu.org/software/hurd/community/gsoc/project_ideas/libcap.html @@ -11,7 +11,7 @@ Distribution: Mariner Patch0: CVE-2023-2602.patch Patch1: CVE-2023-2603.patch Patch2: CVE-2025-1390.patch -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} %description The libcap package implements the user-space interfaces to the POSIX 1003.1e capabilities available @@ -64,6 +64,9 @@ sed -i '/echo "attempt to exploit kernel bug"/,/^fi$/d' quicktest.sh %{_mandir}/man3/* %changelog +* Tue Feb 03 2026 Aditya Singh - 2.60-7 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 2.60-6 - Bump to rebuild with updated glibc diff --git a/SPECS/libguestfs/libguestfs.spec b/SPECS/libguestfs/libguestfs.spec index 6bbb40d85be..e0ae015132b 100644 --- a/SPECS/libguestfs/libguestfs.spec +++ b/SPECS/libguestfs/libguestfs.spec @@ -25,7 +25,7 @@ Summary: Access and modify virtual machine disk images Name: libguestfs Version: 1.44.0 -Release: 22%{?dist} +Release: 23%{?dist} License: LGPLv2+ Vendor: Microsoft Corporation Distribution: Mariner @@ -89,7 +89,7 @@ BuildRequires: gcc-c++ BuildRequires: gdisk BuildRequires: genisoimage BuildRequires: gfs2-utils -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: gobject-introspection-devel BuildRequires: gperf BuildRequires: grep @@ -1236,6 +1236,9 @@ rm ocaml/html/.gitignore %endif %changelog +* Tue Feb 03 2026 Aditya Singh - 1.44.0-23 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 1.44.0-22 - Bump to rebuild with updated glibc diff --git a/SPECS/rust/rust.spec b/SPECS/rust/rust.spec index 347cd14e9aa..2fcb7f16bff 100644 --- a/SPECS/rust/rust.spec +++ b/SPECS/rust/rust.spec @@ -9,7 +9,7 @@ Summary: Rust Programming Language Name: rust Version: 1.72.0 -Release: 13%{?dist} +Release: 14%{?dist} License: (ASL 2.0 OR MIT) AND BSD AND CC-BY-3.0 Vendor: Microsoft Corporation Distribution: Mariner @@ -63,7 +63,7 @@ BuildRequires: ninja-build BuildRequires: openssl-devel BuildRequires: python3 %if %{with_check} -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: sudo %endif # rustc uses a C compiler to invoke the linker, and links to glibc in most cases @@ -183,6 +183,9 @@ rm %{buildroot}%{_bindir}/*.old %{_mandir}/man1/* %changelog +* Tue Feb 03 2026 Aditya Singh - 1.72.0-14 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 1.72.0-13 - Bump to rebuild with updated glibc diff --git a/SPECS/supermin/supermin.spec b/SPECS/supermin/supermin.spec index 028aabc8877..e209481db28 100644 --- a/SPECS/supermin/supermin.spec +++ b/SPECS/supermin/supermin.spec @@ -21,7 +21,7 @@ Summary: Tool for creating supermin appliances Name: supermin Version: 5.2.1 -Release: 12%{?dist} +Release: 13%{?dist} License: GPLv2+ Vendor: Microsoft Corporation Distribution: Mariner @@ -54,7 +54,7 @@ BuildRequires: systemd-udev %if %{with dietlibc} BuildRequires: dietlibc-devel %else -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} %endif %if %{with_check} @@ -129,6 +129,9 @@ make check || { %{_rpmconfigdir}/supermin-find-requires %changelog +* Tue Feb 03 2026 Aditya Singh - 5.2.1-13 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 5.2.1-12 - Bump to rebuild with updated glibc diff --git a/SPECS/tini/tini.spec b/SPECS/tini/tini.spec index d12d4841c7d..72b7aa91a85 100644 --- a/SPECS/tini/tini.spec +++ b/SPECS/tini/tini.spec @@ -1,7 +1,7 @@ Summary: A tiny but valid init for containers Name: tini Version: 0.19.0 -Release: 14%{?dist} +Release: 15%{?dist} License: MIT Vendor: Microsoft Corporation Distribution: Mariner @@ -13,7 +13,7 @@ BuildRequires: diffutils BuildRequires: file BuildRequires: gcc BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.35-9%{?dist} +BuildRequires: glibc-static >= 2.35-10%{?dist} BuildRequires: kernel-headers BuildRequires: make BuildRequires: sed @@ -66,6 +66,9 @@ ln -s %{_bindir}/tini-static %{buildroot}%{_bindir}/docker-init %{_bindir}/docker-init %changelog +* Tue Feb 03 2026 Aditya Singh - 0.19.0-15 +- Bump to rebuild with updated glibc + * Wed Jan 28 2026 Kanishk Bansal - 0.19.0-14 - Bump to rebuild with updated glibc diff --git a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt index 236cbf44eef..6240a8bec4d 100644 --- a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt @@ -1,12 +1,12 @@ filesystem-1.1-20.cm2.aarch64.rpm kernel-headers-5.15.186.1-1.cm2.noarch.rpm -glibc-2.35-9.cm2.aarch64.rpm -glibc-devel-2.35-9.cm2.aarch64.rpm -glibc-i18n-2.35-9.cm2.aarch64.rpm -glibc-iconv-2.35-9.cm2.aarch64.rpm -glibc-lang-2.35-9.cm2.aarch64.rpm -glibc-nscd-2.35-9.cm2.aarch64.rpm -glibc-tools-2.35-9.cm2.aarch64.rpm +glibc-2.35-10.cm2.aarch64.rpm +glibc-devel-2.35-10.cm2.aarch64.rpm +glibc-i18n-2.35-10.cm2.aarch64.rpm +glibc-iconv-2.35-10.cm2.aarch64.rpm +glibc-lang-2.35-10.cm2.aarch64.rpm +glibc-nscd-2.35-10.cm2.aarch64.rpm +glibc-tools-2.35-10.cm2.aarch64.rpm zlib-1.2.13-2.cm2.aarch64.rpm zlib-devel-1.2.13-2.cm2.aarch64.rpm file-5.40-3.cm2.aarch64.rpm @@ -170,8 +170,8 @@ openssl-devel-1.1.1k-37.cm2.aarch64.rpm openssl-libs-1.1.1k-37.cm2.aarch64.rpm openssl-perl-1.1.1k-37.cm2.aarch64.rpm openssl-static-1.1.1k-37.cm2.aarch64.rpm -libcap-2.60-6.cm2.aarch64.rpm -libcap-devel-2.60-6.cm2.aarch64.rpm +libcap-2.60-7.cm2.aarch64.rpm +libcap-devel-2.60-7.cm2.aarch64.rpm debugedit-5.0-2.cm2.aarch64.rpm libarchive-3.6.1-8.cm2.aarch64.rpm libarchive-devel-3.6.1-8.cm2.aarch64.rpm diff --git a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt index 2497a2c16e5..99a5ff409eb 100644 --- a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt @@ -1,12 +1,12 @@ filesystem-1.1-20.cm2.x86_64.rpm kernel-headers-5.15.186.1-1.cm2.noarch.rpm -glibc-2.35-9.cm2.x86_64.rpm -glibc-devel-2.35-9.cm2.x86_64.rpm -glibc-i18n-2.35-9.cm2.x86_64.rpm -glibc-iconv-2.35-9.cm2.x86_64.rpm -glibc-lang-2.35-9.cm2.x86_64.rpm -glibc-nscd-2.35-9.cm2.x86_64.rpm -glibc-tools-2.35-9.cm2.x86_64.rpm +glibc-2.35-10.cm2.x86_64.rpm +glibc-devel-2.35-10.cm2.x86_64.rpm +glibc-i18n-2.35-10.cm2.x86_64.rpm +glibc-iconv-2.35-10.cm2.x86_64.rpm +glibc-lang-2.35-10.cm2.x86_64.rpm +glibc-nscd-2.35-10.cm2.x86_64.rpm +glibc-tools-2.35-10.cm2.x86_64.rpm zlib-1.2.13-2.cm2.x86_64.rpm zlib-devel-1.2.13-2.cm2.x86_64.rpm file-5.40-3.cm2.x86_64.rpm @@ -170,8 +170,8 @@ openssl-devel-1.1.1k-37.cm2.x86_64.rpm openssl-libs-1.1.1k-37.cm2.x86_64.rpm openssl-perl-1.1.1k-37.cm2.x86_64.rpm openssl-static-1.1.1k-37.cm2.x86_64.rpm -libcap-2.60-6.cm2.x86_64.rpm -libcap-devel-2.60-6.cm2.x86_64.rpm +libcap-2.60-7.cm2.x86_64.rpm +libcap-devel-2.60-7.cm2.x86_64.rpm debugedit-5.0-2.cm2.x86_64.rpm libarchive-3.6.1-8.cm2.x86_64.rpm libarchive-devel-3.6.1-8.cm2.x86_64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_aarch64.txt b/toolkit/resources/manifests/package/toolchain_aarch64.txt index 4b3a7462b6f..8c39b972335 100644 --- a/toolkit/resources/manifests/package/toolchain_aarch64.txt +++ b/toolkit/resources/manifests/package/toolchain_aarch64.txt @@ -106,15 +106,15 @@ glib-debuginfo-2.71.0-9.cm2.aarch64.rpm glib-devel-2.71.0-9.cm2.aarch64.rpm glib-doc-2.71.0-9.cm2.noarch.rpm glib-schemas-2.71.0-9.cm2.aarch64.rpm -glibc-2.35-9.cm2.aarch64.rpm -glibc-debuginfo-2.35-9.cm2.aarch64.rpm -glibc-devel-2.35-9.cm2.aarch64.rpm -glibc-i18n-2.35-9.cm2.aarch64.rpm -glibc-iconv-2.35-9.cm2.aarch64.rpm -glibc-lang-2.35-9.cm2.aarch64.rpm -glibc-nscd-2.35-9.cm2.aarch64.rpm -glibc-static-2.35-9.cm2.aarch64.rpm -glibc-tools-2.35-9.cm2.aarch64.rpm +glibc-2.35-10.cm2.aarch64.rpm +glibc-debuginfo-2.35-10.cm2.aarch64.rpm +glibc-devel-2.35-10.cm2.aarch64.rpm +glibc-i18n-2.35-10.cm2.aarch64.rpm +glibc-iconv-2.35-10.cm2.aarch64.rpm +glibc-lang-2.35-10.cm2.aarch64.rpm +glibc-nscd-2.35-10.cm2.aarch64.rpm +glibc-static-2.35-10.cm2.aarch64.rpm +glibc-tools-2.35-10.cm2.aarch64.rpm gmp-6.2.1-4.cm2.aarch64.rpm gmp-debuginfo-6.2.1-4.cm2.aarch64.rpm gmp-devel-6.2.1-4.cm2.aarch64.rpm @@ -151,9 +151,9 @@ libassuan-2.5.5-2.cm2.aarch64.rpm libassuan-debuginfo-2.5.5-2.cm2.aarch64.rpm libassuan-devel-2.5.5-2.cm2.aarch64.rpm libbacktrace-static-11.2.0-9.cm2.aarch64.rpm -libcap-2.60-6.cm2.aarch64.rpm -libcap-debuginfo-2.60-6.cm2.aarch64.rpm -libcap-devel-2.60-6.cm2.aarch64.rpm +libcap-2.60-7.cm2.aarch64.rpm +libcap-debuginfo-2.60-7.cm2.aarch64.rpm +libcap-devel-2.60-7.cm2.aarch64.rpm libcap-ng-0.8.2-2.cm2.aarch64.rpm libcap-ng-debuginfo-0.8.2-2.cm2.aarch64.rpm libcap-ng-devel-0.8.2-2.cm2.aarch64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_x86_64.txt b/toolkit/resources/manifests/package/toolchain_x86_64.txt index 0bed1a71809..e23def0b917 100644 --- a/toolkit/resources/manifests/package/toolchain_x86_64.txt +++ b/toolkit/resources/manifests/package/toolchain_x86_64.txt @@ -111,15 +111,15 @@ glib-debuginfo-2.71.0-9.cm2.x86_64.rpm glib-devel-2.71.0-9.cm2.x86_64.rpm glib-doc-2.71.0-9.cm2.noarch.rpm glib-schemas-2.71.0-9.cm2.x86_64.rpm -glibc-2.35-9.cm2.x86_64.rpm -glibc-debuginfo-2.35-9.cm2.x86_64.rpm -glibc-devel-2.35-9.cm2.x86_64.rpm -glibc-i18n-2.35-9.cm2.x86_64.rpm -glibc-iconv-2.35-9.cm2.x86_64.rpm -glibc-lang-2.35-9.cm2.x86_64.rpm -glibc-nscd-2.35-9.cm2.x86_64.rpm -glibc-static-2.35-9.cm2.x86_64.rpm -glibc-tools-2.35-9.cm2.x86_64.rpm +glibc-2.35-10.cm2.x86_64.rpm +glibc-debuginfo-2.35-10.cm2.x86_64.rpm +glibc-devel-2.35-10.cm2.x86_64.rpm +glibc-i18n-2.35-10.cm2.x86_64.rpm +glibc-iconv-2.35-10.cm2.x86_64.rpm +glibc-lang-2.35-10.cm2.x86_64.rpm +glibc-nscd-2.35-10.cm2.x86_64.rpm +glibc-static-2.35-10.cm2.x86_64.rpm +glibc-tools-2.35-10.cm2.x86_64.rpm gmp-6.2.1-4.cm2.x86_64.rpm gmp-debuginfo-6.2.1-4.cm2.x86_64.rpm gmp-devel-6.2.1-4.cm2.x86_64.rpm @@ -157,9 +157,9 @@ libassuan-2.5.5-2.cm2.x86_64.rpm libassuan-debuginfo-2.5.5-2.cm2.x86_64.rpm libassuan-devel-2.5.5-2.cm2.x86_64.rpm libbacktrace-static-11.2.0-9.cm2.x86_64.rpm -libcap-2.60-6.cm2.x86_64.rpm -libcap-debuginfo-2.60-6.cm2.x86_64.rpm -libcap-devel-2.60-6.cm2.x86_64.rpm +libcap-2.60-7.cm2.x86_64.rpm +libcap-debuginfo-2.60-7.cm2.x86_64.rpm +libcap-devel-2.60-7.cm2.x86_64.rpm libcap-ng-0.8.2-2.cm2.x86_64.rpm libcap-ng-debuginfo-0.8.2-2.cm2.x86_64.rpm libcap-ng-devel-0.8.2-2.cm2.x86_64.rpm