[{"id":3679979,"web_url":"http://patchwork.ozlabs.org/comment/3679979/","msgid":"<87zf2w6yrm.fsf@mid.deneb.enyo.de>","list_archive_url":null,"date":"2026-04-21T16:53:17","subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","submitter":{"id":5264,"url":"http://patchwork.ozlabs.org/api/people/5264/","name":"Florian Weimer","email":"fw@deneb.enyo.de"},"content":"* Carlos O'Donell:\n\n> +NIS+ support in the GNU C Library was never officially supported even\n> +though an incomplete implementation of the APIs was made pulibc.\n> +Applications should not use any of the NIS+ APIs and should move to\n> +modern identity and access management services.\n\nMaybe also mention that there to the glibc team's knowledge, there are\nno server implementations available that this code could interact with?","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=38.145.34.32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n dmarc=none (p=none dis=none) header.from=deneb.enyo.de","sourceware.org; spf=pass smtp.mailfrom=deneb.enyo.de","server2.sourceware.org;\n arc=none smtp.remote-ip=79.140.189.114"],"Received":["from vm01.sourceware.org (vm01.sourceware.org [38.145.34.32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0T2Z2rysz1yGs\n\tfor ; Wed, 22 Apr 2026 02:53:42 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 831864BA9021\n\tfor ; Tue, 21 Apr 2026 16:53:40 +0000 (GMT)","from cygnus.enyo.de (cygnus.enyo.de [79.140.189.114])\n by sourceware.org (Postfix) with ESMTPS id C39474BA902C\n for ; Tue, 21 Apr 2026 16:53:20 +0000 (GMT)","from [172.17.203.2] (port=52783 helo=deneb.enyo.de)\n by albireo.enyo.de ([172.17.140.2]) with esmtps\n (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)\n id 1wFELd-00000001AV7-0anh; Tue, 21 Apr 2026 16:53:17 +0000","from fw by deneb.enyo.de with local (Exim 4.98.2)\n (envelope-from ) id 1wFELd-00000000MkL-0I2i;\n Tue, 21 Apr 2026 18:53:17 +0200"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 831864BA9021","OpenDKIM Filter v2.11.0 sourceware.org C39474BA902C"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org C39474BA902C","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org C39474BA902C","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1776790400; cv=none;\n b=NyJBlr2hYzYSY0W9H+oJE3H8NG8zV/ouGmIIHKd6icfbTQlPW42fwgNIXshyw9WiHQvuRC8Sk306Wv/IrPCbeFZqwfzuiZwbs46hf/LLqjmcElOWCZtZ6nZBejLUrPOINd/ApQGazigqxvXJTC15fKQTAgpBAtv4uSbX5bbABWE=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776790400; c=relaxed/simple;\n bh=ZHuwhCLVfjg0WoyrR+/SrwqNbhXemKn8Vw7XwZ+7RCs=;\n h=From:To:Subject:Date:Message-ID:MIME-Version;\n b=Fg88X1PJ7CGhp6+eWUNkQSBGs0kaxEdzhDIJk6VCmIQEkGL4Gk09uJiJ+zYytHMW4zZP9JhB9TKJJvOVKbRfBN/vf33HCwxGdmqVCealxYmz1L5iksWACX4Quk4uc2uuAUP1glunjGUNzAmd/wP9twBaWXKTRZOU0OcO2Hkd4QM=","ARC-Authentication-Results":"i=1; server2.sourceware.org","From":"Florian Weimer ","To":"Carlos O'Donell ","Cc":"libc-alpha@sourceware.org, siddhesh@gotplt.org,\n adhemerval.zanella@linaro.org","Subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","In-Reply-To":"<20260421164416.4031726-2-carlos@redhat.com> (Carlos O'Donell's\n message of \"Tue, 21 Apr 2026 12:43:48 -0400\")","References":"<20260421164416.4031726-1-carlos@redhat.com>\n <20260421164416.4031726-2-carlos@redhat.com>","Date":"Tue, 21 Apr 2026 18:53:17 +0200","Message-ID":"<87zf2w6yrm.fsf@mid.deneb.enyo.de>","MIME-Version":"1.0","Content-Type":"text/plain","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"}},{"id":3679995,"web_url":"http://patchwork.ozlabs.org/comment/3679995/","msgid":"<5dcc8de6-2926-41c4-955b-3b752a5805b7@redhat.com>","list_archive_url":null,"date":"2026-04-21T17:17:51","subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","submitter":{"id":22438,"url":"http://patchwork.ozlabs.org/api/people/22438/","name":"Carlos O'Donell","email":"carlos@redhat.com"},"content":"On 4/21/26 12:53 PM, Florian Weimer wrote:\n> * Carlos O'Donell:\n> \n>> +NIS+ support in the GNU C Library was never officially supported even\n>> +though an incomplete implementation of the APIs was made pulibc.\n>> +Applications should not use any of the NIS+ APIs and should move to\n>> +modern identity and access management services.\n> \n> Maybe also mention that there to the glibc team's knowledge, there are\n> no server implementations available that this code could interact with?\n> \n\n\ndiff --git a/advisories/GLIBC-SA-2026-0008 b/advisories/GLIBC-SA-2026-0008\nindex 748c0c8944..04b3eeee3e 100644\n--- a/advisories/GLIBC-SA-2026-0008\n+++ b/advisories/GLIBC-SA-2026-0008\n@@ -10,9 +10,11 @@ The use of a trusted server means no trust boundary is crossed and this\n is therefore considered a normal bug.\n \n NIS+ support in the GNU C Library was never officially supported even\n-though an incomplete implementation of the APIs was made pulibc.\n-Applications should not use any of the NIS+ APIs and should move to\n-modern identity and access management services.\n+though an incomplete implementation of the APIs was made pulibc. To the\n+best knowledge of the glibc security team no open-source NIS+ server\n+implementations were ever released for use with this API. Applications\n+should not use any of the NIS+ APIs and should move to modern identity\n+and access management services.\n \n CVE-Id: CVE-2026-5358\n Public-Date: 2026-04-10\n---\n\nLike that?\n\nNotes:\nhttps://tldp.org/HOWTO/NIS-HOWTO/nisplus.html\nhttps://community.unix.com/t/nis-plus-on-linux-redhat/146365\nhttps://www.linuxquestions.org/questions/linux-newbie-8/nis-606831/","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=f4eXJ0Q/;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=2620:52:6:3111::32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n\tdkim=pass (1024-bit key,\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=f4eXJ0Q/","sourceware.org; dmarc=pass (p=quarantine dis=none)\n header.from=redhat.com","sourceware.org; spf=pass smtp.mailfrom=redhat.com","server2.sourceware.org;\n arc=none smtp.remote-ip=170.10.129.124"],"Received":["from vm01.sourceware.org (vm01.sourceware.org\n [IPv6:2620:52:6:3111::32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0TbK4cnPz1yGt\n\tfor ; Wed, 22 Apr 2026 03:18:37 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 9368E4BA9011\n\tfor ; Tue, 21 Apr 2026 17:18:35 +0000 (GMT)","from us-smtp-delivery-124.mimecast.com\n (us-smtp-delivery-124.mimecast.com [170.10.129.124])\n by sourceware.org (Postfix) with ESMTP id AB77A4BA900B\n for ; Tue, 21 Apr 2026 17:17:56 +0000 (GMT)","from mail-qt1-f199.google.com (mail-qt1-f199.google.com\n [209.85.160.199]) by relay.mimecast.com with ESMTP with STARTTLS\n (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id\n us-mta-303-bg4UKP4zM4S90g-c2yXxPA-1; Tue, 21 Apr 2026 13:17:55 -0400","by mail-qt1-f199.google.com with SMTP id\n d75a77b69052e-50da31af14cso122160211cf.1\n for ; Tue, 21 Apr 2026 10:17:55 -0700 (PDT)","from [192.168.0.116] ([198.48.244.52])\n by smtp.gmail.com with ESMTPSA id\n d75a77b69052e-50fafe9674csm38794091cf.3.2026.04.21.10.17.51\n (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);\n Tue, 21 Apr 2026 10:17:52 -0700 (PDT)"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 9368E4BA9011","OpenDKIM Filter v2.11.0 sourceware.org AB77A4BA900B"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org AB77A4BA900B","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org AB77A4BA900B","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1776791876; cv=none;\n b=pU9CRzAVzlBux9zYmqvrnKac7kVNRhJcDPNNFO48iVj1kfyGn3xaXLLG5Qqv45GgJqK0/gdLQgrFqmn/VAP8V2ydfaNwdWdTPnvMEQ655gmv3cjsJlc2DvHYP3Oey1sRdjbzow0bn/L+PRexwkz7VB5v7UPN9Bn6aQzc8KmvsuU=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776791876; c=relaxed/simple;\n bh=UKUanRCsHwA9Viy5fQObzfrLpxignRDNDy/qShmV8pU=;\n h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:To:From;\n b=kaWbJXWUtZsQi5EMCVRc+a2Ki1VIy/15/2yM27LgT0X2EXmQ1m1zlDbgoteor3TTUuGnzskUHXZg/SZVxjJohDDCsO26+5aExZo4VSR/cNhCVveL0/p/+EINHk5q/n9szw2aYW/ZL0OF2OUozj7EF+fZ4v3kUAT/QF6bHnWpguI=","ARC-Authentication-Results":"i=1; server2.sourceware.org","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com;\n s=mimecast20190719; t=1776791876;\n h=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n to:to:cc:cc:mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding:\n in-reply-to:in-reply-to:references:references;\n bh=0YzjShuvR1Ebn81VNvS3TaUH9NeC0YNmzCAgTbg7z1o=;\n b=f4eXJ0Q/7pZnuHLkxFWGVYtjE6aJ8+9BL/NcAoUwckg6QcZcw90sr1cT5jAq4pyqR+LsKT\n S7ZNYsWBdIW7cU7qVwfD8HZOJCYZ0zU95a1XXtecJ6B5ZRrwZPAFQZn0IFTw9pEBbMpGXy\n wrz7QKPv0YuhoNKXpTlkidgiGfZb17w=","X-MC-Unique":"bg4UKP4zM4S90g-c2yXxPA-1","X-Mimecast-MFC-AGG-ID":"bg4UKP4zM4S90g-c2yXxPA_1776791874","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776791874; x=1777396674;\n h=content-transfer-encoding:in-reply-to:organization:from\n :content-language:references:cc:to:subject:user-agent:mime-version\n :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=0YzjShuvR1Ebn81VNvS3TaUH9NeC0YNmzCAgTbg7z1o=;\n b=hZ2bNApNHM+3R6WQ1HrHO0LbnRHBcz+DGDyworKzJFufCHebPfAMjRpha9gu42tzFG\n qIVWtHUguPI9Nibt7qupWCtNk87tF1O94wkOlMdXaYGu6siIfO6kj/7XqFR7KQDuxde1\n MLF0t1xwlPDydCNw2phFmTsr714JHMRR2YF9dxWxzNSnjDxVStA9qCBm3QAkWCmXbdrN\n CC+PuXvdWynhWBqtzmI7dtl2sHt2uWcSrIpLInh4oMsiL9HjmcDw7+jpvXd4HpQDR97V\n HLbe+EGK0sJDR/N02SXvA14v4to3MAb9HcjloohvHeMmYZmqWOtdZ5wRM954j4XmAUf4\n gBxg==","X-Gm-Message-State":"AOJu0YzexW8LGHQgauEf3mJqvsqrrxDU5u8xYyWhGQoFu1eIZ0G6ein+\n BxNH64TXdJJxoCo1ITU4UZdUB0DHNUlPFvTfFj2Zd5mPmjcs1eRIllvO0D4iv9kUVb1scAdTAhi\n vh3vHMmnzZmWv3GPdQV/sdgJ2keVY++OLpA+ls3aXRHsMqg7UoQOY4lg0QOrfcixd6AyFKw==","X-Gm-Gg":"AeBDies75B9L37b8Xl1mk/3F4wdIPeETvi3boEUxpHQzNGRIUtvt47pRRXk32Sdz016\n xaryD7QFg/W/ScKx+C4QcczM607TqYyUawpCOG0mWUq40xmKSTZkbD4eX13rZgWQ2gmSNDRDcmC\n MyV4pONRSZLYQVN7d1MQqdRw4eR3mP+rB1rTmTGRll8u7Wgl+wncGm9RdXzlFI69fOA3QZ149Z3\n AQII7Z7q+RKEJw/K6ySyys4TBFPTvj3ub5m8AXAnPLx4Yn4AqYYR8DmpoCqW+s+mzdNZ4RKbQUn\n wC8sakMuQeEZlYqQpqrgEc+Ui6K/ljD0ZMwjU1/xiMbUHS9u3dSxc1GQwtD3/ngq1vqZY9+lCRk\n E4HcXQeFialoS7xqcQTqP4W4XU3jMs1cLsPzp0fJw8LbQ6d1Mo4n8/DqbvA4NPRV1inPgSB+Lsy\n KzIkvgPsP+8i8OOy0CEXLH2RaqdCQ51GaP","X-Received":["by 2002:a05:622a:2299:b0:509:26f4:64e9 with SMTP id\n d75a77b69052e-50e36c6914dmr275671851cf.51.1776791873913;\n Tue, 21 Apr 2026 10:17:53 -0700 (PDT)","by 2002:a05:622a:2299:b0:509:26f4:64e9 with SMTP id\n d75a77b69052e-50e36c6914dmr275671251cf.51.1776791873427;\n Tue, 21 Apr 2026 10:17:53 -0700 (PDT)"],"Message-ID":"<5dcc8de6-2926-41c4-955b-3b752a5805b7@redhat.com>","Date":"Tue, 21 Apr 2026 13:17:51 -0400","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","Subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","To":"Florian Weimer ","Cc":"libc-alpha@sourceware.org, siddhesh@gotplt.org,\n adhemerval.zanella@linaro.org","References":"<20260421164416.4031726-1-carlos@redhat.com>\n <20260421164416.4031726-2-carlos@redhat.com>\n <87zf2w6yrm.fsf@mid.deneb.enyo.de>","From":"Carlos O'Donell ","Organization":"Red Hat, LLC.","In-Reply-To":"<87zf2w6yrm.fsf@mid.deneb.enyo.de>","X-Mimecast-Spam-Score":"0","X-Mimecast-MFC-PROC-ID":"nxDLZchu8N34Y8wdQysubiB4JEb9L4IuP0SwIJHfgOg_1776791874","X-Mimecast-Originator":"redhat.com","Content-Language":"en-US","Content-Type":"text/plain; charset=UTF-8; format=flowed","Content-Transfer-Encoding":"7bit","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"}},{"id":3680002,"web_url":"http://patchwork.ozlabs.org/comment/3680002/","msgid":"<87v7dk6vtr.fsf@mid.deneb.enyo.de>","list_archive_url":null,"date":"2026-04-21T17:56:48","subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","submitter":{"id":5264,"url":"http://patchwork.ozlabs.org/api/people/5264/","name":"Florian Weimer","email":"fw@deneb.enyo.de"},"content":"* Carlos O'Donell:\n\n> On 4/21/26 12:53 PM, Florian Weimer wrote:\n>> * Carlos O'Donell:\n>> \n>>> +NIS+ support in the GNU C Library was never officially supported even\n>>> +though an incomplete implementation of the APIs was made pulibc.\n>>> +Applications should not use any of the NIS+ APIs and should move to\n>>> +modern identity and access management services.\n>> \n>> Maybe also mention that there to the glibc team's knowledge, there are\n>> no server implementations available that this code could interact with?\n>> \n>\n> diff --git a/advisories/GLIBC-SA-2026-0008 b/advisories/GLIBC-SA-2026-0008\n> index 748c0c8944..04b3eeee3e 100644\n> --- a/advisories/GLIBC-SA-2026-0008\n> +++ b/advisories/GLIBC-SA-2026-0008\n> @@ -10,9 +10,11 @@ The use of a trusted server means no trust boundary is crossed and this\n> is therefore considered a normal bug.\n> \n> NIS+ support in the GNU C Library was never officially supported even\n> -though an incomplete implementation of the APIs was made pulibc.\n> -Applications should not use any of the NIS+ APIs and should move to\n> -modern identity and access management services.\n> +though an incomplete implementation of the APIs was made pulibc. To the\n> +best knowledge of the glibc security team no open-source NIS+ server\n> +implementations were ever released for use with this API. Applications\n> +should not use any of the NIS+ APIs and should move to modern identity\n> +and access management services.\n> \n> CVE-Id: CVE-2026-5358\n> Public-Date: 2026-04-10\n> ---\n>\n> Like that?\n\nYes, it's fine with me. Let's wait a bit what others think.","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=2620:52:6:3111::32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n dmarc=none (p=none dis=none) header.from=deneb.enyo.de","sourceware.org; spf=pass smtp.mailfrom=deneb.enyo.de","server2.sourceware.org;\n arc=none smtp.remote-ip=79.140.189.114"],"Received":["from vm01.sourceware.org (vm01.sourceware.org\n [IPv6:2620:52:6:3111::32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0VRs6Dtqz1yHB\n\tfor ; Wed, 22 Apr 2026 03:57:13 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id E77264B9DB4A\n\tfor ; Tue, 21 Apr 2026 17:57:11 +0000 (GMT)","from cygnus.enyo.de (cygnus.enyo.de [79.140.189.114])\n by sourceware.org (Postfix) with ESMTPS id 4ABB84BA2E04\n for ; Tue, 21 Apr 2026 17:56:51 +0000 (GMT)","from [172.17.203.2] (port=50987 helo=deneb.enyo.de)\n by albireo.enyo.de ([172.17.140.2]) with esmtps\n (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)\n id 1wFFL6-00000001BAw-3ZIH; Tue, 21 Apr 2026 17:56:48 +0000","from fw by deneb.enyo.de with local (Exim 4.98.2)\n (envelope-from ) id 1wFFL6-00000000Oz0-2LBj;\n Tue, 21 Apr 2026 19:56:48 +0200"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org E77264B9DB4A","OpenDKIM Filter v2.11.0 sourceware.org 4ABB84BA2E04"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org 4ABB84BA2E04","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org 4ABB84BA2E04","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1776794211; cv=none;\n b=kfI2LSCvWvu3jom+f067bDk6bILBeLFBw07iVpg0bXlA5dfl9eTCnp9rLb9rwC5XP/VN+iayeM801sA+TQxnTMD0FczgDqySnD8jVLJWWDqQHTTxd1S7i8HWRn+I0P3IkwaCsrtwuojHl81/fL89MQIZRhirNO+AS2gATfXdP6k=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776794211; c=relaxed/simple;\n bh=o1v2tOjkc2JE+o3SxZFJ9md8wRyIHHCcnaGMjsG9kV8=;\n h=From:To:Subject:Date:Message-ID:MIME-Version;\n b=T2SQnXjotmPGNxhF9aKV3j0SzjKsVgy7Dclryh27/9/tCDfcQQtxT0wHK8uftsSlaCbz8vZ71k8KGIS+t+N1dVYQ1Navxim0iAoQB7mULGJIVm3bWl2h7jbPzg7lFOyXxY5BJAlE6IQYgQHLg4sWsBZ7B1fZ0c5YWRyAs3skIco=","ARC-Authentication-Results":"i=1; server2.sourceware.org","From":"Florian Weimer ","To":"Carlos O'Donell ","Cc":"libc-alpha@sourceware.org, siddhesh@gotplt.org,\n adhemerval.zanella@linaro.org","Subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","In-Reply-To":"<5dcc8de6-2926-41c4-955b-3b752a5805b7@redhat.com> (Carlos\n O'Donell's message of \"Tue, 21 Apr 2026 13:17:51 -0400\")","References":"<20260421164416.4031726-1-carlos@redhat.com>\n <20260421164416.4031726-2-carlos@redhat.com>\n <87zf2w6yrm.fsf@mid.deneb.enyo.de>\n <5dcc8de6-2926-41c4-955b-3b752a5805b7@redhat.com>","Date":"Tue, 21 Apr 2026 19:56:48 +0200","Message-ID":"<87v7dk6vtr.fsf@mid.deneb.enyo.de>","MIME-Version":"1.0","Content-Type":"text/plain","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"}},{"id":3680032,"web_url":"http://patchwork.ozlabs.org/comment/3680032/","msgid":"","list_archive_url":null,"date":"2026-04-21T19:29:34","subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","submitter":{"id":69150,"url":"http://patchwork.ozlabs.org/api/people/69150/","name":"Siddhesh Poyarekar","email":"siddhesh@gotplt.org"},"content":"On 21/04/2026 13:56, Florian Weimer wrote:\n> * Carlos O'Donell:\n> \n>> On 4/21/26 12:53 PM, Florian Weimer wrote:\n>>> * Carlos O'Donell:\n>>>\n>>>> +NIS+ support in the GNU C Library was never officially supported even\n>>>> +though an incomplete implementation of the APIs was made pulibc.\n>>>> +Applications should not use any of the NIS+ APIs and should move to\n>>>> +modern identity and access management services.\n>>>\n>>> Maybe also mention that there to the glibc team's knowledge, there are\n>>> no server implementations available that this code could interact with?\n>>>\n>>\n>> diff --git a/advisories/GLIBC-SA-2026-0008 b/advisories/GLIBC-SA-2026-0008\n>> index 748c0c8944..04b3eeee3e 100644\n>> --- a/advisories/GLIBC-SA-2026-0008\n>> +++ b/advisories/GLIBC-SA-2026-0008\n>> @@ -10,9 +10,11 @@ The use of a trusted server means no trust boundary is crossed and this\n>> is therefore considered a normal bug.\n>> \n>> NIS+ support in the GNU C Library was never officially supported even\n>> -though an incomplete implementation of the APIs was made pulibc.\n>> -Applications should not use any of the NIS+ APIs and should move to\n>> -modern identity and access management services.\n>> +though an incomplete implementation of the APIs was made pulibc. To the\n>> +best knowledge of the glibc security team no open-source NIS+ server\n>> +implementations were ever released for use with this API. Applications\n>> +should not use any of the NIS+ APIs and should move to modern identity\n>> +and access management services.\n>> \n>> CVE-Id: CVE-2026-5358\n>> Public-Date: 2026-04-10\n>> ---\n>>\n>> Like that?\n> \n> Yes, it's fine with me. Let's wait a bit what others think.\n> \n\nLGTM too.\n\nReviewed-by: Siddhesh Poyarekar ","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gotplt.org header.i=@gotplt.org header.a=rsa-sha256\n header.s=dreamhost header.b=kaFV7nAE;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=38.145.34.32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n\tdkim=pass (2048-bit key,\n unprotected) header.d=gotplt.org header.i=@gotplt.org header.a=rsa-sha256\n header.s=dreamhost header.b=kaFV7nAE","sourceware.org;\n dmarc=none (p=none dis=none) header.from=gotplt.org","sourceware.org; spf=pass smtp.mailfrom=gotplt.org","server2.sourceware.org;\n arc=pass smtp.remote-ip=23.83.209.82"],"Received":["from vm01.sourceware.org (vm01.sourceware.org [38.145.34.32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0XVx2D5Xz1yJG\n\tfor ; Wed, 22 Apr 2026 05:30:01 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 5B2F34BA900B\n\tfor ; Tue, 21 Apr 2026 19:29:59 +0000 (GMT)","from heron.birch.relay.mailchannels.net\n (heron.birch.relay.mailchannels.net [23.83.209.82])\n by sourceware.org (Postfix) with ESMTPS id 076164BA23CB\n for ; Tue, 21 Apr 2026 19:29:37 +0000 (GMT)","from relay.mailchannels.net (localhost [127.0.0.1])\n by relay.mailchannels.net (Postfix) with ESMTP id F2A2F3807CD;\n Tue, 21 Apr 2026 19:29:36 +0000 (UTC)","from pdx1-sub0-mail-a203.dreamhost.com\n (100-96-238-10.trex-nlb.outbound.svc.cluster.local [100.96.238.10])\n (Authenticated sender: dreamhost)\n by relay.mailchannels.net (Postfix) with ESMTPA id 998713829D9;\n Tue, 21 Apr 2026 19:29:36 +0000 (UTC)","from pdx1-sub0-mail-a203.dreamhost.com (pop.dreamhost.com\n [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)\n by 100.96.238.10 (trex/7.1.5); Tue, 21 Apr 2026 19:29:36 +0000","from [192.168.0.247] (unknown [38.23.181.90])\n (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n (Authenticated sender: siddhesh@gotplt.org)\n by pdx1-sub0-mail-a203.dreamhost.com (Postfix) with ESMTPSA id 4g0XVR6Hgtz20;\n Tue, 21 Apr 2026 12:29:35 -0700 (PDT)"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 5B2F34BA900B","OpenDKIM Filter v2.11.0 sourceware.org 076164BA23CB"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org 076164BA23CB","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org 076164BA23CB","ARC-Seal":["i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1776799778; cv=pass;\n b=Qf/GnHlpjHDhYBNIqdakW1wZowMvf2i7YYSsxdprgAe9XLpOOEC4yr0fGGpHaFN2uAYLrWvxCkyrxjL4us/mLbi0E0fDHQcQnKuZLq9lDVL2ulX+WToWl1wVR6R5tJkg0WLaE8r9p0/amDg5Z1o05cnHOA4qLDE4Sr/CuSrLoCU=","i=1; a=rsa-sha256; d=mailchannels.net; s=arc-2022; cv=none;\n t=1776799776;\n b=GmoxgQTrBzl7GJcF0HndJiCW9wCvHbx2CgsliAhcGTWyWXRwsjjr6ZzcUyMh1mS2UchDmX\n LpUMnEmbuBvkpn2mSsoiN5Eseodjw/5BkDqUjxxmfXHf38Zn6e9IQBPcU1uzQloaBwqH7e\n 9C9HW4pUxfiG8bp7U1OsGB1HgW2INN+0WoI2VPSlJ13p2YLrxqY3EPTCINrtnPDKWBC54i\n OiAQI1e5Ea9/PVxGM9/JYdGM5glL/bJnW2ccF3c0x+uulgspvpkPB9p3At5wGNsGszuVt/\n dg9iayW/3BGS5wcyOWiYPCkmJKxLZwpy7TnpvrLBeYGU8UTaj6vWcO8QlnM/Ug=="],"ARC-Message-Signature":["i=2; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776799778; c=relaxed/simple;\n bh=N34ocN3662cKCtqNdlJCsnhlBIX8Zqc1FIXs1emiwU4=;\n h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:To:From;\n b=D9eMxqon1pkx2bL5TM27+2Rmpu0PMdU8mNtnE0jz09TySLa2SZsbmlL34p2jlHxS7DjR4Vd8gpT/9cIFyEZ5sTQAfHJp8fLVDfKbGRbVbWConr+eP7O+AWr2c3FMKLHZ4jLRVVASeC25EEkkA+92WHKX4vnQQyNeZu7lM5Qw7I4=","i=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mailchannels.net; s=arc-2022; t=1776799776;\n h=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n to:to:cc:cc:mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding:\n in-reply-to:in-reply-to:references:references:dkim-signature;\n bh=roOyYR6eOScMHCLnfUHniqLlvEMpyoozBJutphPykZ0=;\n b=ICOMWUgaOBj8z2BHrfp6cuvJSdFfXAnxbX0Wpj6QybASEYF2DHs2cxxVIZG252A+spn7ES\n 9P9sa37kNzpYsXetWkzTlna2jmGoK/jPL2HLqG8fqa9qslLLINto3oefyFUBMoU1j7Lpi5\n iqN8Bdf/nHiRgaGpWQgRkbcd9gGLr6iNZXNNTTLN5P9xpOR0S2TmBJI/hGOsorF+3u1icE\n ChGkywmMuWJy0k0Q8xsHQQdZnOlS7wLL6MzOVkPwW5tS6sHRTt1P3ZBPRBXLlUH2tUnanf\n 0bHXjTudcEU1YAORSWpiVTLUufCM4eeq48X8xigURc54BBrd/TYHv00CdR3E7g=="],"ARC-Authentication-Results":["i=2; server2.sourceware.org","i=1; rspamd-97d8f7d55-6nxsz;\n auth=pass smtp.auth=dreamhost smtp.mailfrom=siddhesh@gotplt.org"],"X-Sender-Id":["dreamhost|x-authsender|siddhesh@gotplt.org","dreamhost|x-authsender|siddhesh@gotplt.org"],"X-MC-Relay":"Neutral","X-MailChannels-SenderId":"dreamhost|x-authsender|siddhesh@gotplt.org","X-MailChannels-Auth-Id":"dreamhost","X-Dime-Whimsical":"53ed2bb53c8f475e_1776799776855_1967308169","X-MC-Loop-Signature":"1776799776855:2975353346","X-MC-Ingress-Time":"1776799776855","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=gotplt.org;\n s=dreamhost; t=1776799776;\n bh=roOyYR6eOScMHCLnfUHniqLlvEMpyoozBJutphPykZ0=;\n h=Date:Subject:To:Cc:From:Content-Type:Content-Transfer-Encoding;\n b=kaFV7nAEH4a6UbPAkjQTq+NNFtdYkFXN0O0bMWjCYJZNEBEJN+z0mcNHSzO1YnGjJ\n 8+s41PsonPTgwPuA3ZD1AnwPx53hEkq9Xhh2Q3VspoNAbmSD26Opw5aWU3vOEOOUFY\n QpoOAh+yr9kru9o1QfvkPTJ8AuAgr6ODFG2SJXdbL+6CXE7UmSi+59JnqzUAqSsHMe\n Fx7TVUTL43MxTBXx3yoRUwzVN1sCFP8JvQskAkze+p4q6wUePH3abgq/sKPaLK8TNf\n lwQFW71TaGUyQh7Qgv/qLwWzAGtmyJ+QFAavccnWN3+4TnfgWJTN4Q7MZU3YVl/i9J\n a8aCaQ+6/K+qQ==","Message-ID":"","Date":"Tue, 21 Apr 2026 15:29:34 -0400","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","Subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","To":"Florian Weimer , Carlos O'Donell ","Cc":"libc-alpha@sourceware.org, adhemerval.zanella@linaro.org","References":"<20260421164416.4031726-1-carlos@redhat.com>\n <20260421164416.4031726-2-carlos@redhat.com>\n <87zf2w6yrm.fsf@mid.deneb.enyo.de>\n <5dcc8de6-2926-41c4-955b-3b752a5805b7@redhat.com>\n <87v7dk6vtr.fsf@mid.deneb.enyo.de>","Content-Language":"en-US","From":"Siddhesh Poyarekar ","In-Reply-To":"<87v7dk6vtr.fsf@mid.deneb.enyo.de>","Content-Type":"text/plain; charset=UTF-8; format=flowed","Content-Transfer-Encoding":"7bit","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"}},{"id":3681417,"web_url":"http://patchwork.ozlabs.org/comment/3681417/","msgid":"<2eb7cde7-b096-4359-9f29-7e97dbe2dbe1@redhat.com>","list_archive_url":null,"date":"2026-04-23T12:13:41","subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","submitter":{"id":22438,"url":"http://patchwork.ozlabs.org/api/people/22438/","name":"Carlos O'Donell","email":"carlos@redhat.com"},"content":"On 4/21/26 3:29 PM, Siddhesh Poyarekar wrote:\n> On 21/04/2026 13:56, Florian Weimer wrote:\n>> * Carlos O'Donell:\n>>\n>>> On 4/21/26 12:53 PM, Florian Weimer wrote:\n>>>> * Carlos O'Donell:\n>>>>\n>>>>> +NIS+ support in the GNU C Library was never officially supported even\n>>>>> +though an incomplete implementation of the APIs was made pulibc.\n>>>>> +Applications should not use any of the NIS+ APIs and should move to\n>>>>> +modern identity and access management services.\n>>>>\n>>>> Maybe also mention that there to the glibc team's knowledge, there are\n>>>> no server implementations available that this code could interact with?\n>>>>\n>>>\n>>> diff --git a/advisories/GLIBC-SA-2026-0008 b/advisories/GLIBC-SA-2026-0008\n>>> index 748c0c8944..04b3eeee3e 100644\n>>> --- a/advisories/GLIBC-SA-2026-0008\n>>> +++ b/advisories/GLIBC-SA-2026-0008\n>>> @@ -10,9 +10,11 @@ The use of a trusted server means no trust boundary is crossed and this\n>>>    is therefore considered a normal bug.\n>>>    NIS+ support in the GNU C Library was never officially supported even\n>>> -though an incomplete implementation of the APIs was made pulibc.\n>>> -Applications should not use any of the NIS+ APIs and should move to\n>>> -modern identity and access management services.\n>>> +though an incomplete implementation of the APIs was made pulibc.  To the\n>>> +best knowledge of the glibc security team no open-source NIS+ server\n>>> +implementations were ever released for use with this API.  Applications\n>>> +should not use any of the NIS+ APIs and should move to modern identity\n>>> +and access management services.\n>>>    CVE-Id: CVE-2026-5358\n>>>    Public-Date: 2026-04-10\n>>> ---\n>>>\n>>> Like that?\n>>\n>> Yes, it's fine with me.  Let's wait a bit what others think.\n>>\n> \n> LGTM too.\n> \n> Reviewed-by: Siddhesh Poyarekar \n> \n\nThanks. Pushed. CVE is now marked as rejected with MITRE.","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=GfF2qKQn;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=2620:52:6:3111::32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n\tdkim=pass (1024-bit key,\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=GfF2qKQn","sourceware.org; dmarc=pass (p=quarantine dis=none)\n header.from=redhat.com","sourceware.org; spf=pass smtp.mailfrom=redhat.com","server2.sourceware.org;\n arc=none smtp.remote-ip=170.10.129.124"],"Received":["from vm01.sourceware.org (vm01.sourceware.org\n [IPv6:2620:52:6:3111::32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g1ZlN3yRYz1y2d\n\tfor ; Thu, 23 Apr 2026 22:14:24 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 7B2C24BBCDF2\n\tfor ; Thu, 23 Apr 2026 12:14:22 +0000 (GMT)","from us-smtp-delivery-124.mimecast.com\n (us-smtp-delivery-124.mimecast.com [170.10.129.124])\n by sourceware.org (Postfix) with ESMTP id BF8D64BBCD97\n for ; Thu, 23 Apr 2026 12:13:46 +0000 (GMT)","from mail-oi1-f200.google.com (mail-oi1-f200.google.com\n [209.85.167.200]) by relay.mimecast.com with ESMTP with STARTTLS\n (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id\n us-mta-347-52zfVVnAOmauhCQGJ56rpg-1; Thu, 23 Apr 2026 08:13:45 -0400","by mail-oi1-f200.google.com with SMTP id\n 5614622812f47-471618e2082so5691671b6e.1\n for ; Thu, 23 Apr 2026 05:13:45 -0700 (PDT)","from [192.168.0.116] ([198.48.244.52])\n by smtp.gmail.com with ESMTPSA id\n 5614622812f47-479f6705d7asm4753816b6e.10.2026.04.23.05.13.42\n (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);\n Thu, 23 Apr 2026 05:13:43 -0700 (PDT)"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 7B2C24BBCDF2","OpenDKIM Filter v2.11.0 sourceware.org BF8D64BBCD97"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org BF8D64BBCD97","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org BF8D64BBCD97","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1776946426; cv=none;\n b=fvNHfKmRW584TfU2bhvHW6bH7P3y2R5LJPKn52+vUb6Z+nG4gzbFBHU8GKfDGL1K5/cyuDo+JEnv3Q9Vhfv+rPyRVzYfIvxM4EKaqTs56emiVzSz0OFY7t1YJgvtS7my4pxUlH319FQrOhaOEEer+mUxvYYFyYc61qszzmddxv4=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776946426; c=relaxed/simple;\n bh=PvjcLUkoxV+FCwsYUu+9JOyhbYVvZiHLl+S//TvlxUs=;\n h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:To:From;\n b=KC/lGkKP0aiKwWRUbc1n4/b2RbSbkhOC/BXXhzFooTXO+wewm+621W1ymEfmxsE6s8uJrE0G+Z0Jz0aqf6RtF0ckzpqBrbC3B7/ZYNp338cLtWlWzowQbBR/neEcuyV6dyj8O4jyo9y469V3mrZxB8vaI/L0RNwN1x4zMNqEDJs=","ARC-Authentication-Results":"i=1; server2.sourceware.org","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com;\n s=mimecast20190719; t=1776946426;\n h=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n to:to:cc:cc:mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding:\n in-reply-to:in-reply-to:references:references;\n bh=a6TyPR7KmIr0wJ1X2yqSga8R93xte2lsox9lxqNZnMo=;\n b=GfF2qKQnFaRSh1r87W4rPCsmROs6VXRwAisRGSy92jgX62Xv62Uei8E5vVBQ7+viGWzRb/\n m/6DSlqBwc9f0UJ8Wt90winCOrqyYMmwPRkQnC2MjOZF5NlynUeMVWVjJsoWJXqxcIx4Qf\n ejuQKveo8ouoKCPvcU3qO8oZ6ILgDiU=","X-MC-Unique":"52zfVVnAOmauhCQGJ56rpg-1","X-Mimecast-MFC-AGG-ID":"52zfVVnAOmauhCQGJ56rpg_1776946424","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776946424; x=1777551224;\n h=content-transfer-encoding:in-reply-to:organization:from\n :content-language:references:cc:to:subject:user-agent:mime-version\n :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=a6TyPR7KmIr0wJ1X2yqSga8R93xte2lsox9lxqNZnMo=;\n b=gp8IuOz80hYFU5AUwIBkKmWh2F4K9Msjr3ui65B4B2t1VYOUEiyuuEvCKWp+7bC7Ua\n hA2PkZTXEZxXUcBP+iKBldAZkmap5tVSlqDwGM3FaQvtzGcyKyPAAjx7+aSU9YteASvj\n LXInhoSjY0YmHC7FjElOo+8o8PHS8Rt/CAI8hsvxX7VkJhPgMKo9zLaecx+fv3S52TZm\n FnOUJATWPd/hoeF7lxQ6MZ29Jc/OELdM2B843MX1kIoLrt92fjLCAoxEuasHmm6jRI8n\n wi6bSJrfX57ytPFVigFeSnlL0vPdmiwLPOMlss8F5TwwVqwlFvIiGUQW/Pi8RJWu1Xdh\n 6z0w==","X-Gm-Message-State":"AOJu0YzGd3Cwnuc7v+q7G8r5EPkdduS70//CZgXMA7C20XJXOBdqB+sP\n Y7pxzStZISeLKIeiXzBwXYq2Gn1ebB2BxAgFkQe3eseqAN5hv5MCvPpRP369zPRHMPSwrsedKyI\n 0Sqi6jgg8vMeS2nvEozgXxdwsM2sGZWp7I+K4SKLe0M6LuCtXQ4mkTvsI1dTkmA==","X-Gm-Gg":"AeBDiesD5Q0xPypaNdiFzOHYkE/tvTf7HBs6maORkNaeApbhTQ/pmlS2vQoAY2dg9hI\n 1Hz2PEd8RHa+7AbY4Ln4AOpytOm7ngWHyHe2T0XkNzYqXVe+3oGI5kl960npxSEvHU/QSFYj8U2\n /aUzu0sgD/pGFNURgE37KKMQubB5mOeH8aRBD0SPtDZrG4oJJcDwDurZnbeL1rzz6w8LhDFwIK9\n EoQZHBs8dxZvAovzx9Fhh1LIbEroq36MJQClHYgOXxnXAJhhVk++YCnEYBsHQq9jmxJ28vvPGmm\n jFgz1ETL4TNKc0QVRm3BI5SyUIjHH4E4tYFQsDRuml5hg9PprQonACo2IN7B4DrGMIZZ/NTAnR/\n LVD1iQVHztmDprSihPhikpJS/Pw7zPoUwl0pDMSanoS2eHrs/2ncatl42VekDGefly9Fbta4eQv\n woqm61n/EOgC0UucneKCYqmdE9tBAyaV1p","X-Received":["by 2002:a05:6808:e40c:b0:479:e75e:e3 with SMTP id\n 5614622812f47-479e75e2d1emr6313199b6e.43.1776946424300;\n Thu, 23 Apr 2026 05:13:44 -0700 (PDT)","by 2002:a05:6808:e40c:b0:479:e75e:e3 with SMTP id\n 5614622812f47-479e75e2d1emr6313181b6e.43.1776946423742;\n Thu, 23 Apr 2026 05:13:43 -0700 (PDT)"],"Message-ID":"<2eb7cde7-b096-4359-9f29-7e97dbe2dbe1@redhat.com>","Date":"Thu, 23 Apr 2026 08:13:41 -0400","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","Subject":"Re: [PATCH 2/2] advisories: Reject GLIBC-SA-2026-0008","To":"Siddhesh Poyarekar ,\n Florian Weimer ","Cc":"libc-alpha@sourceware.org, adhemerval.zanella@linaro.org","References":"<20260421164416.4031726-1-carlos@redhat.com>\n <20260421164416.4031726-2-carlos@redhat.com>\n <87zf2w6yrm.fsf@mid.deneb.enyo.de>\n <5dcc8de6-2926-41c4-955b-3b752a5805b7@redhat.com>\n <87v7dk6vtr.fsf@mid.deneb.enyo.de>\n ","From":"Carlos O'Donell ","Organization":"Red Hat, LLC.","In-Reply-To":"","X-Mimecast-Spam-Score":"0","X-Mimecast-MFC-PROC-ID":"BID8sZBXVofVUk5xKAYYWiyb3va2YJ4W_fiiWjtuHms_1776946424","X-Mimecast-Originator":"redhat.com","Content-Language":"en-US","Content-Type":"text/plain; charset=UTF-8; format=flowed","Content-Transfer-Encoding":"8bit","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"}}]