Skip to content

Commit 9bb67d5

Browse files
committedNov 5, 2017
glibc: 2.25-49 -> 2.26-75
Security: the NEWS claims a couple more CVEs are fixed than what we patched, though perhaps nothing critical. I personally don't find DNS fragmentation attacks that interesting anymore, as it's just about weaker improvements for cases that choose not to use DNSSEC. Largest expected caveat: upstream bumped the minimal supportable kernel to 3.2.0. That's the oldest kernel still supported upstream, released in Jan 2012, but most notably RHEL 6 and derivates still use a heavily patched 2.6.32 kernel and those systems are still supported and in use (production support is scheduled to last till the end of 2020!).
1 parent 0c01c58 commit 9bb67d5

File tree

3 files changed

+7
-10
lines changed

3 files changed

+7
-10
lines changed
 
-87.6 KB
Binary file not shown.
Binary file not shown.

‎pkgs/development/libraries/glibc/common.nix

+7-10
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,9 @@
1919
} @ args:
2020

2121
let
22-
version = "2.25";
23-
patchSuffix = "-49";
24-
sha256 = "067bd9bb3390e79aa45911537d13c3721f1d9d3769931a30c2681bfee66f23a0";
22+
version = "2.26";
23+
patchSuffix = "-75";
24+
sha256 = "1ggnj1hzjym7sn93rbwydcqd562q73lsb7g7kd199g6j9j9hlkp5";
2525
cross = if buildPlatform != hostPlatform then hostPlatform else null;
2626
in
2727

@@ -46,7 +46,7 @@ stdenv.mkDerivation ({
4646
glibc-2.25-49-gbc5ace67fe
4747
$ git show --reverse glibc-2.25..release/2.25/master | gzip -n -9 --rsyncable - > 2.25-49.patch.gz
4848
*/
49-
./2.25-49.patch.gz
49+
./2.26-75.patch.gz
5050

5151
/* Have rpcgen(1) look for cpp(1) in $PATH. */
5252
./rpcgen-path.patch
@@ -100,15 +100,12 @@ stdenv.mkDerivation ({
100100
(if profilingLibraries
101101
then "--enable-profile"
102102
else "--disable-profile")
103-
] ++ lib.optionals (cross == null && withLinuxHeaders) [
104-
"--enable-kernel=2.6.32"
103+
] ++ lib.optionals withLinuxHeaders [
104+
"--enable-kernel=3.2.0" # can't get below with glibc >= 2.26
105105
] ++ lib.optionals (cross != null) [
106106
(if cross.withTLS then "--with-tls" else "--without-tls")
107107
(if cross ? float && cross.float == "soft" then "--without-fp" else "--with-fp")
108-
] ++ lib.optionals (cross != null
109-
&& cross.platform ? kernelMajor
110-
&& cross.platform.kernelMajor == "2.6") [
111-
"--enable-kernel=2.6.0"
108+
] ++ lib.optionals (cross != null) [
112109
"--with-__thread"
113110
] ++ lib.optionals (cross == null && stdenv.isArm) [
114111
"--host=arm-linux-gnueabi"

0 commit comments

Comments
 (0)
Please sign in to comment.