glibc: 2.40-66 -> 2.40-142, fix CVE-2025-8058

See https://nvd.nist.gov/vuln/detail/CVE-2025-8058

Updating to the latest patch-level of the 2.40 branch to address this.

(cherry picked from commit 7c104c9ba3)
This commit is contained in:
Maximilian Bosch
2025-07-24 16:17:55 +02:00
committed by github-actions[bot]
parent a765f5b057
commit d7024bf503
2 changed files with 17093 additions and 1 deletions

File diff suppressed because it is too large Load Diff

View File

@@ -68,7 +68,7 @@ stdenv.mkDerivation (
/*
No tarballs for stable upstream branch, only https://sourceware.org/git/glibc.git and using git would complicate bootstrapping.
$ git fetch --all -p && git checkout origin/release/2.40/master && git describe
glibc-2.40-66-g7d4b6bcae9
glibc-2.40-142-g2eb180377b
$ git show --minimal --reverse glibc-2.40.. ':!ADVISORIES' > 2.40-master.patch
To compare the archive contents zdiff can be used.