Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2216947/?format=api
{ "id": 2216947, "url": "http://patchwork.ozlabs.org/api/patches/2216947/?format=api", "web_url": "http://patchwork.ozlabs.org/project/glibc/patch/20260327120954.2627122-1-carlos@redhat.com/", "project": { "id": 41, "url": "http://patchwork.ozlabs.org/api/projects/41/?format=api", "name": "GNU C Library", "link_name": "glibc", "list_id": "libc-alpha.sourceware.org", "list_email": "libc-alpha@sourceware.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260327120954.2627122-1-carlos@redhat.com>", "list_archive_url": null, "date": "2026-03-27T12:09:48", "name": "advisories: Update GLIBC-SA-2026-0005 and GLIBC-SA-2026-0006.", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "062f3fd4a62e9e60ae8a497d8987d5878220b709", "submitter": { "id": 22438, "url": "http://patchwork.ozlabs.org/api/people/22438/?format=api", "name": "Carlos O'Donell", "email": "carlos@redhat.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/glibc/patch/20260327120954.2627122-1-carlos@redhat.com/mbox/", "series": [ { "id": 497756, "url": "http://patchwork.ozlabs.org/api/series/497756/?format=api", "web_url": "http://patchwork.ozlabs.org/project/glibc/list/?series=497756", "date": "2026-03-27T12:09:48", "name": "advisories: Update GLIBC-SA-2026-0005 and GLIBC-SA-2026-0006.", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/497756/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2216947/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2216947/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org>", "X-Original-To": [ "incoming@patchwork.ozlabs.org", "libc-alpha@sourceware.org" ], "Delivered-To": [ "patchwork-incoming@legolas.ozlabs.org", "libc-alpha@sourceware.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=AGT8l4He;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=2620:52:6:3111::32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)", "sourceware.org;\n\tdkim=pass (1024-bit key,\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=AGT8l4He", "sourceware.org; dmarc=pass (p=quarantine dis=none)\n header.from=redhat.com", "sourceware.org; spf=pass smtp.mailfrom=redhat.com", "server2.sourceware.org;\n arc=none smtp.remote-ip=170.10.129.124" ], "Received": [ "from vm01.sourceware.org (vm01.sourceware.org\n [IPv6:2620:52:6:3111::32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fhzxG4r1Kz1y1j\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 27 Mar 2026 23:10:25 +1100 (AEDT)", "from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 45D1E4BA2E18\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 27 Mar 2026 12:10:23 +0000 (GMT)", "from us-smtp-delivery-124.mimecast.com\n (us-smtp-delivery-124.mimecast.com [170.10.129.124])\n by sourceware.org (Postfix) with ESMTP id 83B2F4BA2E12\n for <libc-alpha@sourceware.org>; Fri, 27 Mar 2026 12:10:01 +0000 (GMT)", "from mail-qk1-f199.google.com (mail-qk1-f199.google.com\n [209.85.222.199]) by relay.mimecast.com with ESMTP with STARTTLS\n (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id\n us-mta-567-k20GMpr8OjG7huNev4AFzA-1; Fri, 27 Mar 2026 08:09:59 -0400", "by mail-qk1-f199.google.com with SMTP id\n af79cd13be357-8cd7de0e161so60491485a.2\n for <libc-alpha@sourceware.org>; Fri, 27 Mar 2026 05:09:59 -0700 (PDT)", "from codonell-thinkpadp16vgen1.rmtcaon.csb ([198.48.244.52])\n by smtp.gmail.com with ESMTPSA id\n af79cd13be357-8d00e3c3a0dsm507596785a.13.2026.03.27.05.09.56\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Fri, 27 Mar 2026 05:09:57 -0700 (PDT)" ], "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 sourceware.org 45D1E4BA2E18", "OpenDKIM Filter v2.11.0 sourceware.org 83B2F4BA2E12" ], "DMARC-Filter": "OpenDMARC Filter v1.4.2 sourceware.org 83B2F4BA2E12", "ARC-Filter": "OpenARC Filter v1.0.0 sourceware.org 83B2F4BA2E12", "ARC-Seal": "i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1774613401; cv=none;\n b=Sww7hiU0K3ffAsIPldS9zHYkCTaj3Zd9U2eq34uR94kRLKDLZV7H/ZlAkdeTRsU6gwCADML6NA2tgFpk2u0uTjHvfmM/kUTU1O9OLgCRZrvJf3BV2MCJiCGmTUpWi5Aqh1y+WrDe6gm26Cy5qd8rSgiMK95ujqTPxHD1YCVTcsQ=", "ARC-Message-Signature": "i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1774613401; c=relaxed/simple;\n bh=BpFOq/8ygb2l7Jd4EqvKrw2MVI3kILSHHRB6LEYuauI=;\n h=DKIM-Signature:From:To:Subject:Date:Message-ID:MIME-Version;\n b=UOfWqH3ZicZjG2OTnhe9OhYfdSSg/qhv54ldptc7x7zNqBVhMDspmrLk5DXAqUZ7+25ryuk/B905LASOCy+oG6RD8AYvvVyKWhsR9a6U6LK69EGS3XsAvg/jA1rEhxDB7Rk3xcqzUZxjQKgWij8vw9KGn9vOvg47z5AOkYx5h6Y=", "ARC-Authentication-Results": "i=1; server2.sourceware.org", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com;\n s=mimecast20190719; t=1774613401;\n h=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n to:to:cc:cc:mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding;\n bh=FrNW1UTbJvbdzVaD0mdRNTCVWKOXveihfrsSwKjGCFw=;\n b=AGT8l4Hea9T/1NxslVapmn8cW5eHWrM7c8ZrLRQIok7A0cq6Tq/XY36lvyw11Wm8REm5Wj\n vy1lZO3gv69XOxuYnpxSwaqEZTMr6UdBNB1nHaEa+RmL6AV2WE+5qamLxejL2uyUJvNK1a\n wGcS0LheW+r3Igy5hFM7rbxtki0SK5s=", "X-MC-Unique": "k20GMpr8OjG7huNev4AFzA-1", "X-Mimecast-MFC-AGG-ID": "k20GMpr8OjG7huNev4AFzA_1774613399", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1774613399; x=1775218199;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=FrNW1UTbJvbdzVaD0mdRNTCVWKOXveihfrsSwKjGCFw=;\n b=Pj/SoSwyf+Y59LI8n11naO0j2uDrw7VI7tWPw6OSQrEwahHBwwea4NaqeovF7TYwzD\n Na3fQpV2Bkj5x5t0Kp2wWu6Cbj/xrEodwDVSfX39JIArm+u1g91IvolTAUlVt+doqeBa\n fsegCY3kPWE4F8YMMRNbDL7707Dk6ywLNx5p2UyXBCJUW/AaNFv1R9HiFeGUMCIL+lyd\n /x8tFRWWHl0B9E8JlrlcFVGljOpbmqiX2QO5GAzNcKfRUTzoyCiGd+q9M6x3qDGF4IVq\n tBlhDzgg6Vd49SnMEtrPDFuD1kdM4lH/IZXas5YfwecjBqTQyiI94/MfeqPNYoGHhF/3\n Siqg==", "X-Gm-Message-State": "AOJu0YyUhBV9aE61C5+2RHNcqwmMpQJEzagPbSBsHGsK29rzTmUfF7Hx\n HKQsKHpnyhP4f7gx/HHI18JVdhxmys46GtRJTxweKhyKI5ovJak4cARD23wGbHEXFKLT4vUjLbU\n PfAtkDcfeNaImkTz3Pwger06zxyfEYvHnYLQlQXCGIXKGzPn5teFUP4l+xf2UFDnJOEbjHhSXFC\n Up2HkOy7IjczqbHlVbKFpp4kxUeTNx1D0ec0+9jTcgI58=", "X-Gm-Gg": "ATEYQzxswLbGF45G+0uOxA264d2WzdYwvKHSbE81sosu2lt82fBLKLp5+Gg1BIwpyuG\n +BQkr/r0oc3QIxUfWw9rZOm6bpoQRnBdWvQ/Q1rIW9QOPYtj9rCEGY8d71Q0hpa5S6BhCYY4H2j\n uzOxHpkUKue/lwNXXjlRPfqaL5RybZSeDZiv4Uz5QMRKGBg70Jm6Up8pAFYPTT3zQ2geiwEc7mK\n TgcGDsmlC3hYEO4hjaXymm8QdQZJbde5yYGq3m/HczsR6m/ek5r8SfJmJIOKhR7gHUg4EgMEoGc\n IFbt1oKck7nqyd9XZjXGeQqCwDJCMkfL6OhKKTXJxzUUFNUN8EyGfmkYyVO+1s7B2pnPziiE7rG\n kSJjPZPS0+PZLjmga8BIfkkocdH0A7F7XqTZQ6CH02YkCnXMffigPXXMosF27MhEfDqAWOVZQjQ\n QeMnwDT6txOA4E1YRWHSNxIwwy51X41hYqAdeQ5b2WPY5897Ci9WA=", "X-Received": [ "by 2002:a05:620a:29c7:b0:8cb:5233:8f8a with SMTP id\n af79cd13be357-8d01c5e2feamr240856385a.11.1774613398488;\n Fri, 27 Mar 2026 05:09:58 -0700 (PDT)", "by 2002:a05:620a:29c7:b0:8cb:5233:8f8a with SMTP id\n af79cd13be357-8d01c5e2feamr240848685a.11.1774613397680;\n Fri, 27 Mar 2026 05:09:57 -0700 (PDT)" ], "From": "Carlos O'Donell <carlos@redhat.com>", "To": "libc-alpha@sourceware.org", "Cc": "Carlos O'Donell <carlos@redhat.com>", "Subject": "[PATCH] advisories: Update GLIBC-SA-2026-0005 and GLIBC-SA-2026-0006.", "Date": "Fri, 27 Mar 2026 08:09:48 -0400", "Message-ID": "<20260327120954.2627122-1-carlos@redhat.com>", "X-Mailer": "git-send-email 2.53.0", "MIME-Version": "1.0", "X-Mimecast-Spam-Score": "0", "X-Mimecast-MFC-PROC-ID": "T04VHS336bBbOwWDCJGqg8Eo9ZogQr5waJILC9HrX38_1774613399", "X-Mimecast-Originator": "redhat.com", "Content-Transfer-Encoding": "8bit", "content-type": "text/plain; charset=\"US-ASCII\"; x-default=true", "X-BeenThere": "libc-alpha@sourceware.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Libc-alpha mailing list <libc-alpha.sourceware.org>", "List-Unsubscribe": "<https://sourceware.org/mailman/options/libc-alpha>,\n <mailto:libc-alpha-request@sourceware.org?subject=unsubscribe>", "List-Archive": "<https://sourceware.org/pipermail/libc-alpha/>", "List-Post": "<mailto:libc-alpha@sourceware.org>", "List-Help": "<mailto:libc-alpha-request@sourceware.org?subject=help>", "List-Subscribe": "<https://sourceware.org/mailman/listinfo/libc-alpha>,\n <mailto:libc-alpha-request@sourceware.org?subject=subscribe>", "Errors-To": "libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org" }, "content": "Update advisories with Fix-Commit information for 2.43.9000 and 2.44.\n\nUpdate NEWS with advisory entries.\n---\n NEWS | 9 +++++++--\n advisories/GLIBC-SA-2026-0005 | 2 ++\n advisories/GLIBC-SA-2026-0006 | 2 ++\n 3 files changed, 11 insertions(+), 2 deletions(-)", "diff": "diff --git a/NEWS b/NEWS\nindex bb942fcc94..c6e9a83923 100644\n--- a/NEWS\n+++ b/NEWS\n@@ -34,8 +34,13 @@ Security related changes:\n The following CVEs were fixed in this release, details of which can be\n found in the advisories directory of the release tarball:\n \n- [The release manager will add the list generated by\n- scripts/process-advisories.sh just before the release.]\n+ GLIBC-SA-2026-0005:\n+ gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS\n+ response (CVE-2026-4437)\n+\n+ GLIBC-SA-2026-0006:\n+ gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames\n+ (CVE-2026-4438)\n \n The following bugs were resolved with this release:\n \ndiff --git a/advisories/GLIBC-SA-2026-0005 b/advisories/GLIBC-SA-2026-0005\nindex a1a9991f84..7a50a43263 100644\n--- a/advisories/GLIBC-SA-2026-0005\n+++ b/advisories/GLIBC-SA-2026-0005\n@@ -31,5 +31,7 @@ Vulnerable-Commit: 32e5db37684ffcbc6ae34fcc6cdcf28670506baa (2.34-323)\n Vulnerable-Commit: def97e7f71a07517810f7263213d607e08ad21f1 (2.35-188)\n Vulnerable-Commit: 77f523c473878ec0051582ef15161c6982879095 (2.36-30)\n Vulnerable-Commit: e32547d661a43da63368e488b6cfa9c53b4dcf92 (2.37)\n+Fix-Commit: 5c6fca0c62ce5bd6e68e259f138097756cbafd4d (2.43-16)\n+Fix-Commit: 9f5f18aab40ec6b61fa49a007615e6077e9a979b (2.44)\n Reported-by: Antonio Maini (0rbitingZer0) - 0rbitingZer0@proton.me\n Reported-by: Kevin Farrell\ndiff --git a/advisories/GLIBC-SA-2026-0006 b/advisories/GLIBC-SA-2026-0006\nindex 106cf4fd84..1ac70de4d9 100644\n--- a/advisories/GLIBC-SA-2026-0006\n+++ b/advisories/GLIBC-SA-2026-0006\n@@ -22,4 +22,6 @@ Vulnerable-Commit: 32e5db37684ffcbc6ae34fcc6cdcf28670506baa (2.34-323)\n Vulnerable-Commit: def97e7f71a07517810f7263213d607e08ad21f1 (2.35-188)\n Vulnerable-Commit: 77f523c473878ec0051582ef15161c6982879095 (2.36-30)\n Vulnerable-Commit: e32547d661a43da63368e488b6cfa9c53b4dcf92 (2.37)\n+Fix-Commit: dd9945c0ba40d2dbc9eb7c99291ba6b69bd66718 (2.43-17)\n+Fix-Commit: e10977481f4db4b2a3ce34fa4c3a1e26651ae312 (2.44)\n Reported-by: Antonio Maini (0rbitingZer0) - 0rbitingZer0@proton.me\n", "prefixes": [] }