From ddcfc4fa7d9f3418e5aaaf535c7a4de3cbc8ac9f Mon Sep 17 00:00:00 2001 From: Kshitiz Godara Date: Wed, 12 Aug 2026 03:15:25 +0000 Subject: [PATCH 1/2] glibc: raise the test timeout so the huge page malloc test passes malloc/tst-malloc-too-large-malloc-hugetlb2 was the only %check failure not covered by the expected failure list, so the whole test run was reported as failed. It is not a wrong result: the test is killed at the 20s default timeout while it needs about 35s, nearly all of it kernel time because the glibc.malloc.hugetlb=2 tunable exercises automatic huge pages. The plain and hugetlb1 variants of the same test pass. Set TIMEOUTFACTOR=10 so it runs to completion and actually asserts, rather than adding it to the tolerated failures. Verified locally: the only remaining failures are the ones already listed, plus two WSL specific misc/tst-preadvwritev2 failures that do not occur in the pipeline. Update the glibc NVRs in the toolchain and pkggen_core manifests for the release bump. The packages that BuildRequire glibc-static use a >= floor of 2.38-20, which 2.38-21 still satisfies, and the library itself is unchanged, so no dependent packages need rebuilding. --- SPECS/glibc/glibc.spec | 12 ++++++++++- .../manifests/package/pkggen_core_aarch64.txt | 16 +++++++-------- .../manifests/package/pkggen_core_x86_64.txt | 16 +++++++-------- .../manifests/package/toolchain_aarch64.txt | 20 +++++++++---------- .../manifests/package/toolchain_x86_64.txt | 20 +++++++++---------- 5 files changed, 47 insertions(+), 37 deletions(-) diff --git a/SPECS/glibc/glibc.spec b/SPECS/glibc/glibc.spec index 8cd303fd287..bf7c4ad6e75 100644 --- a/SPECS/glibc/glibc.spec +++ b/SPECS/glibc/glibc.spec @@ -10,7 +10,7 @@ Summary: Main C library Name: glibc Version: 2.38 -Release: 20%{?dist} +Release: 21%{?dist} License: BSD AND GPLv2+ AND Inner-Net AND ISC AND LGPLv2+ AND MIT Vendor: Microsoft Corporation Distribution: Azure Linux @@ -285,6 +285,10 @@ cd %{_builddir}/glibc-build # 79 UNSUPPORTED # 12 XFAIL # 8 XPASS +# Several tests only failed because they were killed at the 20s default timeout, +# e.g. tst-malloc-too-large-malloc-hugetlb2 needs ~35s here (nearly all of it +# kernel time for huge pages). Scale the timeout so slow tests still assert. +export TIMEOUTFACTOR=10 make %{?_smp_mflags} check ||: n=0 # expected failures in local VM @@ -388,6 +392,12 @@ grep "^FAIL: string/test-mempcpy" tests.sum >/dev/null && n=$((n+1)) ||: %exclude %{_libdir}/locale/C.utf8 %changelog +* Wed Aug 12 2026 Kshitiz Godara - 2.38-21 +- Set TIMEOUTFACTOR=10 in %%check. malloc/tst-malloc-too-large-malloc-hugetlb2 + was killed at the 20s default timeout while it needs ~35s here, almost all of + it kernel time for huge pages, and it was the only failure not in the expected + list. It now passes instead of being tolerated. + * Thu May 07 2026 Aditya Singh - 2.38-20 - Patch for CVE-2026-4046 diff --git a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt index 6b68018f28b..715ebeb501f 100644 --- a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt @@ -1,13 +1,13 @@ filesystem-1.1-21.azl3.aarch64.rpm kernel-headers-6.6.150.1-1.azl3.noarch.rpm -glibc-2.38-20.azl3.aarch64.rpm -glibc-devel-2.38-20.azl3.aarch64.rpm -glibc-i18n-2.38-20.azl3.aarch64.rpm -glibc-iconv-2.38-20.azl3.aarch64.rpm -glibc-lang-2.38-20.azl3.aarch64.rpm -glibc-locales-all-2.38-20.azl3.aarch64.rpm -glibc-nscd-2.38-20.azl3.aarch64.rpm -glibc-tools-2.38-20.azl3.aarch64.rpm +glibc-2.38-21.azl3.aarch64.rpm +glibc-devel-2.38-21.azl3.aarch64.rpm +glibc-i18n-2.38-21.azl3.aarch64.rpm +glibc-iconv-2.38-21.azl3.aarch64.rpm +glibc-lang-2.38-21.azl3.aarch64.rpm +glibc-locales-all-2.38-21.azl3.aarch64.rpm +glibc-nscd-2.38-21.azl3.aarch64.rpm +glibc-tools-2.38-21.azl3.aarch64.rpm zlib-1.3.2-1.azl3.aarch64.rpm zlib-devel-1.3.2-1.azl3.aarch64.rpm file-5.45-1.azl3.aarch64.rpm diff --git a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt index 8ba94c77d38..6591d50da7c 100644 --- a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt @@ -1,13 +1,13 @@ filesystem-1.1-21.azl3.x86_64.rpm kernel-headers-6.6.150.1-1.azl3.noarch.rpm -glibc-2.38-20.azl3.x86_64.rpm -glibc-devel-2.38-20.azl3.x86_64.rpm -glibc-i18n-2.38-20.azl3.x86_64.rpm -glibc-iconv-2.38-20.azl3.x86_64.rpm -glibc-lang-2.38-20.azl3.x86_64.rpm -glibc-locales-all-2.38-20.azl3.x86_64.rpm -glibc-nscd-2.38-20.azl3.x86_64.rpm -glibc-tools-2.38-20.azl3.x86_64.rpm +glibc-2.38-21.azl3.x86_64.rpm +glibc-devel-2.38-21.azl3.x86_64.rpm +glibc-i18n-2.38-21.azl3.x86_64.rpm +glibc-iconv-2.38-21.azl3.x86_64.rpm +glibc-lang-2.38-21.azl3.x86_64.rpm +glibc-locales-all-2.38-21.azl3.x86_64.rpm +glibc-nscd-2.38-21.azl3.x86_64.rpm +glibc-tools-2.38-21.azl3.x86_64.rpm zlib-1.3.2-1.azl3.x86_64.rpm zlib-devel-1.3.2-1.azl3.x86_64.rpm file-5.45-1.azl3.x86_64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_aarch64.txt b/toolkit/resources/manifests/package/toolchain_aarch64.txt index 23e2b92974c..b8d5e04d8f4 100644 --- a/toolkit/resources/manifests/package/toolchain_aarch64.txt +++ b/toolkit/resources/manifests/package/toolchain_aarch64.txt @@ -127,16 +127,16 @@ glib-debuginfo-2.78.6-11.azl3.aarch64.rpm glib-devel-2.78.6-11.azl3.aarch64.rpm glib-doc-2.78.6-11.azl3.noarch.rpm glib-schemas-2.78.6-11.azl3.aarch64.rpm -glibc-2.38-20.azl3.aarch64.rpm -glibc-debuginfo-2.38-20.azl3.aarch64.rpm -glibc-devel-2.38-20.azl3.aarch64.rpm -glibc-i18n-2.38-20.azl3.aarch64.rpm -glibc-iconv-2.38-20.azl3.aarch64.rpm -glibc-lang-2.38-20.azl3.aarch64.rpm -glibc-locales-all-2.38-20.azl3.aarch64.rpm -glibc-nscd-2.38-20.azl3.aarch64.rpm -glibc-static-2.38-20.azl3.aarch64.rpm -glibc-tools-2.38-20.azl3.aarch64.rpm +glibc-2.38-21.azl3.aarch64.rpm +glibc-debuginfo-2.38-21.azl3.aarch64.rpm +glibc-devel-2.38-21.azl3.aarch64.rpm +glibc-i18n-2.38-21.azl3.aarch64.rpm +glibc-iconv-2.38-21.azl3.aarch64.rpm +glibc-lang-2.38-21.azl3.aarch64.rpm +glibc-locales-all-2.38-21.azl3.aarch64.rpm +glibc-nscd-2.38-21.azl3.aarch64.rpm +glibc-static-2.38-21.azl3.aarch64.rpm +glibc-tools-2.38-21.azl3.aarch64.rpm gmp-6.3.0-1.azl3.aarch64.rpm gmp-debuginfo-6.3.0-1.azl3.aarch64.rpm gmp-devel-6.3.0-1.azl3.aarch64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_x86_64.txt b/toolkit/resources/manifests/package/toolchain_x86_64.txt index bb6ca83a5ec..ae596b4512d 100644 --- a/toolkit/resources/manifests/package/toolchain_x86_64.txt +++ b/toolkit/resources/manifests/package/toolchain_x86_64.txt @@ -134,16 +134,16 @@ glib-debuginfo-2.78.6-11.azl3.x86_64.rpm glib-devel-2.78.6-11.azl3.x86_64.rpm glib-doc-2.78.6-11.azl3.noarch.rpm glib-schemas-2.78.6-11.azl3.x86_64.rpm -glibc-2.38-20.azl3.x86_64.rpm -glibc-debuginfo-2.38-20.azl3.x86_64.rpm -glibc-devel-2.38-20.azl3.x86_64.rpm -glibc-i18n-2.38-20.azl3.x86_64.rpm -glibc-iconv-2.38-20.azl3.x86_64.rpm -glibc-lang-2.38-20.azl3.x86_64.rpm -glibc-locales-all-2.38-20.azl3.x86_64.rpm -glibc-nscd-2.38-20.azl3.x86_64.rpm -glibc-static-2.38-20.azl3.x86_64.rpm -glibc-tools-2.38-20.azl3.x86_64.rpm +glibc-2.38-21.azl3.x86_64.rpm +glibc-debuginfo-2.38-21.azl3.x86_64.rpm +glibc-devel-2.38-21.azl3.x86_64.rpm +glibc-i18n-2.38-21.azl3.x86_64.rpm +glibc-iconv-2.38-21.azl3.x86_64.rpm +glibc-lang-2.38-21.azl3.x86_64.rpm +glibc-locales-all-2.38-21.azl3.x86_64.rpm +glibc-nscd-2.38-21.azl3.x86_64.rpm +glibc-static-2.38-21.azl3.x86_64.rpm +glibc-tools-2.38-21.azl3.x86_64.rpm gmp-6.3.0-1.azl3.x86_64.rpm gmp-debuginfo-6.3.0-1.azl3.x86_64.rpm gmp-devel-6.3.0-1.azl3.x86_64.rpm From 2298855afe55993e746d08c0eb83d0d944723418 Mon Sep 17 00:00:00 2001 From: Kshitiz Godara Date: Wed, 12 Aug 2026 03:25:03 +0000 Subject: [PATCH 2/2] Bump packages that BuildRequire glibc-static for glibc 2.38-21 check_static_glibc.py requires every spec with a glibc-static BuildRequires to name the current glibc release exactly, so the release bump has to be mirrored in all 16 consumers. Bump their releases and add changelog entries. libcap is also pinned in the toolchain and pkggen_core manifests, so update its NVRs there to match its own release bump. --- SPECS-EXTENDED/buildah/buildah.spec | 7 +++++-- SPECS-EXTENDED/catatonit/catatonit.spec | 7 +++++-- SPECS-EXTENDED/crun/crun.spec | 7 +++++-- SPECS-EXTENDED/dyninst/dyninst.spec | 7 +++++-- SPECS-EXTENDED/podman/podman.spec | 7 +++++-- SPECS/busybox/busybox.spec | 7 +++++-- SPECS/flannel/flannel.spec | 7 +++++-- SPECS/kubernetes/kubernetes.spec | 7 +++++-- SPECS/kubevirt/kubevirt.spec | 7 +++++-- SPECS/libcap/libcap.spec | 7 +++++-- SPECS/libguestfs/libguestfs.spec | 7 +++++-- SPECS/qemu/qemu.spec | 7 +++++-- SPECS/rust/rust-1.75.spec | 7 +++++-- SPECS/rust/rust.spec | 7 +++++-- SPECS/supermin/supermin.spec | 7 +++++-- SPECS/tini/tini.spec | 7 +++++-- .../resources/manifests/package/pkggen_core_aarch64.txt | 4 ++-- toolkit/resources/manifests/package/pkggen_core_x86_64.txt | 4 ++-- toolkit/resources/manifests/package/toolchain_aarch64.txt | 6 +++--- toolkit/resources/manifests/package/toolchain_x86_64.txt | 6 +++--- 20 files changed, 90 insertions(+), 42 deletions(-) diff --git a/SPECS-EXTENDED/buildah/buildah.spec b/SPECS-EXTENDED/buildah/buildah.spec index a1ebfb5cefc..91d829365c4 100644 --- a/SPECS-EXTENDED/buildah/buildah.spec +++ b/SPECS-EXTENDED/buildah/buildah.spec @@ -30,7 +30,7 @@ Epoch: 0 Version: 1.43.1 # The `AND` needs to be uppercase in the License for SPDX compatibility License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 -Release: 2%{?dist} +Release: 3%{?dist} Vendor: Microsoft Corporation Distribution: Azure Linux ExclusiveArch: aarch64 ppc64le s390x x86_64 @@ -44,7 +44,7 @@ BuildRequires: device-mapper-devel BuildRequires: git-core BuildRequires: golang >= 1.25.0 BuildRequires: glib2-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} %if !%{defined gobuild} BuildRequires: go-rpm-macros %endif @@ -174,6 +174,9 @@ make test-unit %{_datadir}/%{name}/test %changelog +* Wed Aug 12 2026 Kshitiz Godara - 0:1.43.1-3 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 0:1.43.1-2 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/catatonit/catatonit.spec b/SPECS-EXTENDED/catatonit/catatonit.spec index b0d7bc8c2a6..942d2902d44 100644 --- a/SPECS-EXTENDED/catatonit/catatonit.spec +++ b/SPECS-EXTENDED/catatonit/catatonit.spec @@ -3,7 +3,7 @@ Distribution: Azure Linux Name: catatonit Version: 0.1.7 -Release: 28%{?dist} +Release: 29%{?dist} Summary: A signal-forwarding process manager for containers License: GPLv3+ URL: https://github.com/openSUSE/catatonit @@ -13,7 +13,7 @@ BuildRequires: automake BuildRequires: file BuildRequires: gcc BuildRequires: git -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: libtool BuildRequires: make @@ -61,6 +61,9 @@ ln -s %{_libexecdir}/%{name}/%{name} %{buildroot}%{_libexecdir}/podman/%{name} %{_libexecdir}/podman/%{name} %changelog +* Wed Aug 12 2026 Kshitiz Godara - 0.1.7-29 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 0.1.7-28 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/crun/crun.spec b/SPECS-EXTENDED/crun/crun.spec index b1a6d5ece4b..fd896b99235 100644 --- a/SPECS-EXTENDED/crun/crun.spec +++ b/SPECS-EXTENDED/crun/crun.spec @@ -12,7 +12,7 @@ Summary: OCI runtime written in C Name: crun Version: 1.24 -Release: 5%{?dist} +Release: 6%{?dist} Vendor: Microsoft Corporation Distribution: Azure Linux URL: https://github.com/containers/%{name} @@ -48,7 +48,7 @@ BuildRequires: wasmedge-devel %endif BuildRequires: python -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} Provides: oci-runtime %description @@ -114,6 +114,9 @@ rm -rf %{buildroot}%{_prefix}/lib* %endif %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.24-6 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 1.24-5 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/dyninst/dyninst.spec b/SPECS-EXTENDED/dyninst/dyninst.spec index 0004e737b54..b6443a9bb25 100644 --- a/SPECS-EXTENDED/dyninst/dyninst.spec +++ b/SPECS-EXTENDED/dyninst/dyninst.spec @@ -1,7 +1,7 @@ Summary: An API for Run-time Code Generation License: LGPLv2+ Name: dyninst -Release: 30%{?dist} +Release: 31%{?dist} Vendor: Microsoft Corporation Distribution: Azure Linux URL: http://www.dyninst.org @@ -31,7 +31,7 @@ BuildRequires: tbb tbb-devel # Extra requires just for the testsuite BuildRequires: gcc-gfortran libstdc++-static libxml2-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} # Testsuite files should not provide/require anything %{?filter_setup: @@ -194,6 +194,9 @@ echo "%{_libdir}/dyninst" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf %attr(644,root,root) %{_libdir}/dyninst/testsuite/*.a %changelog +* Wed Aug 12 2026 Kshitiz Godara - 10.1.0-31 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 10.1.0-30 - Bump to rebuild with updated glibc diff --git a/SPECS-EXTENDED/podman/podman.spec b/SPECS-EXTENDED/podman/podman.spec index 64fbca0fe5e..6f78122a50a 100644 --- a/SPECS-EXTENDED/podman/podman.spec +++ b/SPECS-EXTENDED/podman/podman.spec @@ -31,7 +31,7 @@ Epoch: 0 # If you're reading this on dist-git, the version is automatically filled in by Packit. Version: 5.6.1 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 -Release: 9%{?dist} +Release: 10%{?dist} ExclusiveArch: aarch64 ppc64le s390x x86_64 riscv64 Summary: Manage Pods, Containers and Container Images Vendor: Microsoft Corporation @@ -48,7 +48,7 @@ BuildRequires: btrfs-progs-devel BuildRequires: gcc BuildRequires: glib2-devel BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: golang BuildRequires: git-core @@ -298,6 +298,9 @@ make localunit # rhcontainerbot account currently managed by lsm5 %changelog +* Wed Aug 12 2026 Kshitiz Godara - 0:5.6.1-10 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 0:5.6.1-9 - Bump to rebuild with updated glibc diff --git a/SPECS/busybox/busybox.spec b/SPECS/busybox/busybox.spec index 02768699da3..446d43dad38 100644 --- a/SPECS/busybox/busybox.spec +++ b/SPECS/busybox/busybox.spec @@ -1,7 +1,7 @@ Summary: Statically linked binary providing simplified versions of system commands Name: busybox Version: 1.36.1 -Release: 26%{?dist} +Release: 27%{?dist} License: GPLv2 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -24,7 +24,7 @@ Patch10: CVE-2026-38755.patch Patch11: CVE-2026-38752.patch Patch12: CVE-2026-38753.patch BuildRequires: gcc -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: libselinux-devel >= 1.27.7-2 BuildRequires: libsepol-devel %if 0%{?with_check} @@ -114,6 +114,9 @@ cd testsuite %{_mandir}/man1/busybox.petitboot.1.gz %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.36.1-27 +- Bump to rebuild with updated glibc + * Tue Jul 21 2026 Azure Linux Security Servicing Account - 1.36.1-26 - Patch for CVE-2026-38753, CVE-2026-38752 diff --git a/SPECS/flannel/flannel.spec b/SPECS/flannel/flannel.spec index 68bc10a986a..b18262e63cc 100644 --- a/SPECS/flannel/flannel.spec +++ b/SPECS/flannel/flannel.spec @@ -3,7 +3,7 @@ Summary: Simple and easy way to configure a layer 3 network fabric designed for Kubernetes Name: flannel Version: 0.24.2 -Release: 29%{?dist} +Release: 30%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -22,7 +22,7 @@ Patch7: CVE-2026-39821.patch Patch8: CVE-2026-56852.patch BuildRequires: gcc BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: golang < 1.25 BuildRequires: kernel-headers @@ -56,6 +56,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld %{_bindir}/flanneld %changelog +* Wed Aug 12 2026 Kshitiz Godara - 0.24.2-30 +- Bump to rebuild with updated glibc + * Mon Jul 27 2026 Azure Linux Security Servicing Account - 0.24.2-29 - Patch for CVE-2026-56852 diff --git a/SPECS/kubernetes/kubernetes.spec b/SPECS/kubernetes/kubernetes.spec index 048486b5f0f..c48102dc03e 100644 --- a/SPECS/kubernetes/kubernetes.spec +++ b/SPECS/kubernetes/kubernetes.spec @@ -10,7 +10,7 @@ Summary: Microsoft Kubernetes Name: kubernetes Version: 1.30.10 -Release: 27%{?dist} +Release: 28%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -51,7 +51,7 @@ Patch29: CVE-2026-56852.patch Patch30: CVE-2024-7598.patch BuildRequires: flex-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: golang < 1.25 BuildRequires: rsync BuildRequires: systemd-devel @@ -301,6 +301,9 @@ fi %{_exec_prefix}/local/bin/pause %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.30.10-28 +- Bump to rebuild with updated glibc + * Mon Jul 27 2026 Azure Linux Security Servicing Account - 1.30.10-27 - Patch for CVE-2024-7598 diff --git a/SPECS/kubevirt/kubevirt.spec b/SPECS/kubevirt/kubevirt.spec index 3ddf87ce505..202739b4565 100644 --- a/SPECS/kubevirt/kubevirt.spec +++ b/SPECS/kubevirt/kubevirt.spec @@ -20,7 +20,7 @@ Summary: Container native virtualization Name: kubevirt Version: 1.7.1 -Release: 8%{?dist} +Release: 9%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -49,7 +49,7 @@ Patch17: CVE-2026-56852.patch %global debug_package %{nil} BuildRequires: swtpm-tools BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: golang >= 1.24 BuildRequires: golang-packaging BuildRequires: pkgconfig @@ -282,6 +282,9 @@ install -p -m 0644 cmd/virt-launcher/qemu.conf %{buildroot}%{_datadir}/kube-virt %{_bindir}/virt-tests %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.7.1-9 +- Bump to rebuild with updated glibc + * Mon Jul 27 2026 Azure Linux Security Servicing Account - 1.7.1-8 - Patch for CVE-2026-56852 diff --git a/SPECS/libcap/libcap.spec b/SPECS/libcap/libcap.spec index 76ffa708969..16ef44c1243 100644 --- a/SPECS/libcap/libcap.spec +++ b/SPECS/libcap/libcap.spec @@ -1,7 +1,7 @@ Summary: Libcap Name: libcap Version: 2.69 -Release: 15%{?dist} +Release: 16%{?dist} License: GPLv2+ Group: System Environment/Security URL: https://www.gnu.org/software/hurd/community/gsoc/project_ideas/libcap.html @@ -10,7 +10,7 @@ Patch0: CVE-2025-1390.patch Patch1: CVE-2026-4878.patch Vendor: Microsoft Corporation Distribution: Azure Linux -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} %description The libcap package implements the user-space interfaces to the POSIX 1003.1e capabilities available @@ -63,6 +63,9 @@ sed -i '/echo "attempt to exploit kernel bug"/,/^fi$/d' quicktest.sh %{_mandir}/man3/* %changelog +* Wed Aug 12 2026 Kshitiz Godara - 2.69-16 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 2.69-15 - Bump to rebuild with updated glibc diff --git a/SPECS/libguestfs/libguestfs.spec b/SPECS/libguestfs/libguestfs.spec index f2f714b3050..790c6b0e7e8 100644 --- a/SPECS/libguestfs/libguestfs.spec +++ b/SPECS/libguestfs/libguestfs.spec @@ -25,7 +25,7 @@ Summary: Access and modify virtual machine disk images Name: libguestfs Version: 1.52.0 -Release: 23%{?dist} +Release: 24%{?dist} License: LGPLv2+ Vendor: Microsoft Corporation Distribution: Azure Linux @@ -82,7 +82,7 @@ BuildRequires: gcc-c++ BuildRequires: gdisk BuildRequires: genisoimage BuildRequires: gfs2-utils -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: gobject-introspection-devel BuildRequires: gperf BuildRequires: grep @@ -1154,6 +1154,9 @@ rm ocaml/html/.gitignore %endif %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.52.0-24 +- Bump to rebuild with updated glibc + * Wed Jun 17 2026 Kshitiz Godara - 1.52.0-23 - Use direct backend with force_tcg in %%check so make quickcheck does not require a running libvirtd / /var/run/libvirt/libvirt-sock in the build diff --git a/SPECS/qemu/qemu.spec b/SPECS/qemu/qemu.spec index 9be5a24a08d..9058e570928 100644 --- a/SPECS/qemu/qemu.spec +++ b/SPECS/qemu/qemu.spec @@ -432,7 +432,7 @@ Obsoletes: sgabios-bin <= 1:0.20180715git-10.fc38 Summary: QEMU is a FAST! processor emulator Name: qemu Version: 9.1.0 -Release: 11%{?dist} +Release: 12%{?dist} License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND FSFAP AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-2.0-or-later WITH GCC-exception-2.0 AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND MIT AND LicenseRef-Fedora-Public-Domain AND CC-BY-3.0 URL: http://www.qemu.org/ @@ -676,7 +676,7 @@ BuildRequires: rutabaga-gfx-ffi-devel %endif %if %{user_static} -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: glib2-static zlib-static BuildRequires: pcre2-devel-static %endif @@ -3523,6 +3523,9 @@ fi # endif !tools_only %endif %changelog +* Wed Aug 12 2026 Kshitiz Godara - 9.1.0-12 +- Bump to rebuild with updated glibc + * Mon Jul 20 2026 Azure Linux Security Servicing Account - 9.1.0-11 - Patch for CVE-2026-3842 diff --git a/SPECS/rust/rust-1.75.spec b/SPECS/rust/rust-1.75.spec index 2c9be3d34e4..f558e96a368 100644 --- a/SPECS/rust/rust-1.75.spec +++ b/SPECS/rust/rust-1.75.spec @@ -9,7 +9,7 @@ Summary: Rust Programming Language Name: rust Version: 1.75.0 -Release: 30%{?dist} +Release: 31%{?dist} License: (ASL 2.0 OR MIT) AND BSD AND CC-BY-3.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -75,7 +75,7 @@ BuildRequires: python3 # make sure rust depends on system zlib BuildRequires: zlib-devel %if 0%{?with_check} -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: sudo %endif # rustc uses a C compiler to invoke the linker, and links to glibc in most cases @@ -191,6 +191,9 @@ rm %{buildroot}%{_bindir}/*.old %{_mandir}/man1/* %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.75.0-31 +- Bump to rebuild with updated glibc + * Thu Jun 04 2026 BinduSri Adabala - 1.75.0-30 - Add patch for CVE-2026-5222, CVE-2026-5223 - Backport patch for CVE-2026-40034 diff --git a/SPECS/rust/rust.spec b/SPECS/rust/rust.spec index 598ebf79894..92c603f9ee5 100644 --- a/SPECS/rust/rust.spec +++ b/SPECS/rust/rust.spec @@ -9,7 +9,7 @@ Summary: Rust Programming Language Name: rust Version: 1.90.0 -Release: 10%{?dist} +Release: 11%{?dist} License: (ASL 2.0 OR MIT) AND BSD AND CC-BY-3.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -79,7 +79,7 @@ BuildRequires: python3 # make sure rust depends on system zlib BuildRequires: zlib-devel %if 0%{?with_check} -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: sudo %endif # rustc uses a C compiler to invoke the linker, and links to glibc in most cases @@ -205,6 +205,9 @@ rmdir %{buildroot}%{_docdir}/rustc/licenses %{_mandir}/man1/* %changelog +* Wed Aug 12 2026 Kshitiz Godara - 1.90.0-11 +- Bump to rebuild with updated glibc + * Tue Jul 28 2026 SumitJenaHCL - 1.90.0-10 - Patch for CVE-2026-47143 - Update CVE-2026-25541.patch to apply cleanly against vendored bytes 1.10.1 diff --git a/SPECS/supermin/supermin.spec b/SPECS/supermin/supermin.spec index 631cf197362..4ee2ad8a2dd 100644 --- a/SPECS/supermin/supermin.spec +++ b/SPECS/supermin/supermin.spec @@ -21,7 +21,7 @@ Summary: Tool for creating supermin appliances Name: supermin Version: 5.3.4 -Release: 15%{?dist} +Release: 16%{?dist} License: GPLv2+ Vendor: Microsoft Corporation Distribution: Azure Linux @@ -54,7 +54,7 @@ BuildRequires: systemd-udev %if %{with dietlibc} BuildRequires: dietlibc-devel %else -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} %endif %if 0%{?with_check} @@ -129,6 +129,9 @@ make check || { %{_rpmconfigdir}/supermin-find-requires %changelog +* Wed Aug 12 2026 Kshitiz Godara - 5.3.4-16 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 5.3.4-15 - Bump to rebuild with updated glibc diff --git a/SPECS/tini/tini.spec b/SPECS/tini/tini.spec index 4930741d76b..e833ee95154 100644 --- a/SPECS/tini/tini.spec +++ b/SPECS/tini/tini.spec @@ -1,7 +1,7 @@ Summary: A tiny but valid init for containers Name: tini Version: 0.19.0 -Release: 30%{?dist} +Release: 31%{?dist} License: MIT Vendor: Microsoft Corporation Distribution: Azure Linux @@ -13,7 +13,7 @@ BuildRequires: diffutils BuildRequires: file BuildRequires: gcc BuildRequires: glibc-devel -BuildRequires: glibc-static >= 2.38-20%{?dist} +BuildRequires: glibc-static >= 2.38-21%{?dist} BuildRequires: kernel-headers BuildRequires: make BuildRequires: sed @@ -66,6 +66,9 @@ ln -s %{_bindir}/tini-static %{buildroot}%{_bindir}/docker-init %{_bindir}/docker-init %changelog +* Wed Aug 12 2026 Kshitiz Godara - 0.19.0-31 +- Bump to rebuild with updated glibc + * Thu May 07 2026 Aditya Singh - 0.19.0-30 - Bump to rebuild with updated glibc diff --git a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt index 715ebeb501f..8a8af8e92b9 100644 --- a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt @@ -175,8 +175,8 @@ openssl-devel-3.3.7-4.azl3.aarch64.rpm openssl-libs-3.3.7-4.azl3.aarch64.rpm openssl-perl-3.3.7-4.azl3.aarch64.rpm openssl-static-3.3.7-4.azl3.aarch64.rpm -libcap-2.69-15.azl3.aarch64.rpm -libcap-devel-2.69-15.azl3.aarch64.rpm +libcap-2.69-16.azl3.aarch64.rpm +libcap-devel-2.69-16.azl3.aarch64.rpm debugedit-5.0-3.azl3.aarch64.rpm libarchive-3.7.7-7.azl3.aarch64.rpm libarchive-devel-3.7.7-7.azl3.aarch64.rpm diff --git a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt index 6591d50da7c..864fcf082fc 100644 --- a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt @@ -175,8 +175,8 @@ openssl-devel-3.3.7-4.azl3.x86_64.rpm openssl-libs-3.3.7-4.azl3.x86_64.rpm openssl-perl-3.3.7-4.azl3.x86_64.rpm openssl-static-3.3.7-4.azl3.x86_64.rpm -libcap-2.69-15.azl3.x86_64.rpm -libcap-devel-2.69-15.azl3.x86_64.rpm +libcap-2.69-16.azl3.x86_64.rpm +libcap-devel-2.69-16.azl3.x86_64.rpm debugedit-5.0-3.azl3.x86_64.rpm libarchive-3.7.7-7.azl3.x86_64.rpm libarchive-devel-3.7.7-7.azl3.x86_64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_aarch64.txt b/toolkit/resources/manifests/package/toolchain_aarch64.txt index b8d5e04d8f4..8e1e50a1f7c 100644 --- a/toolkit/resources/manifests/package/toolchain_aarch64.txt +++ b/toolkit/resources/manifests/package/toolchain_aarch64.txt @@ -177,9 +177,9 @@ libassuan-devel-2.5.6-1.azl3.aarch64.rpm libattr-2.6.0-1.azl3.aarch64.rpm libattr-devel-2.6.0-1.azl3.aarch64.rpm libbacktrace-static-13.2.0-7.azl3.aarch64.rpm -libcap-2.69-15.azl3.aarch64.rpm -libcap-debuginfo-2.69-15.azl3.aarch64.rpm -libcap-devel-2.69-15.azl3.aarch64.rpm +libcap-2.69-16.azl3.aarch64.rpm +libcap-debuginfo-2.69-16.azl3.aarch64.rpm +libcap-devel-2.69-16.azl3.aarch64.rpm libcap-ng-0.8.4-1.azl3.aarch64.rpm libcap-ng-debuginfo-0.8.4-1.azl3.aarch64.rpm libcap-ng-devel-0.8.4-1.azl3.aarch64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_x86_64.txt b/toolkit/resources/manifests/package/toolchain_x86_64.txt index ae596b4512d..4900a65e469 100644 --- a/toolkit/resources/manifests/package/toolchain_x86_64.txt +++ b/toolkit/resources/manifests/package/toolchain_x86_64.txt @@ -185,9 +185,9 @@ libassuan-devel-2.5.6-1.azl3.x86_64.rpm libattr-2.6.0-1.azl3.x86_64.rpm libattr-devel-2.6.0-1.azl3.x86_64.rpm libbacktrace-static-13.2.0-7.azl3.x86_64.rpm -libcap-2.69-15.azl3.x86_64.rpm -libcap-debuginfo-2.69-15.azl3.x86_64.rpm -libcap-devel-2.69-15.azl3.x86_64.rpm +libcap-2.69-16.azl3.x86_64.rpm +libcap-debuginfo-2.69-16.azl3.x86_64.rpm +libcap-devel-2.69-16.azl3.x86_64.rpm libcap-ng-0.8.4-1.azl3.x86_64.rpm libcap-ng-debuginfo-0.8.4-1.azl3.x86_64.rpm libcap-ng-devel-0.8.4-1.azl3.x86_64.rpm