diff mbox series

advisories: Fix GLIBC-SA-2026-0024 (CVE-2026-97399)

Message ID 20261001125853.663176-1-smonga@linux.ibm.com (mailing list archive)
State Committed
Commit 0a39ecb94c7b878cc867dfed1c8956d8a61772fa
Headers
Series advisories: Fix GLIBC-SA-2026-0024 (CVE-2026-97399) |

Checks

Context Check Description
redhat-pt-bot/TryBot-apply_patch success Patch applied to master at the time it was sent
redhat-pt-bot/TryBot-32bit success Build for i686
linaro-tcwg-bot/tcwg_glibc_build--master-aarch64 success Build passed
linaro-tcwg-bot/tcwg_glibc_check--master-aarch64 success Test passed
linaro-tcwg-bot/tcwg_glibc_build--master-arm success Build passed
linaro-tcwg-bot/tcwg_glibc_check--master-arm success Test passed

Commit Message

Sachin Monga Oct. 1, 2026, 12:58 p.m. UTC 
  - Fix CVE-Id tag typo: 'CVE Id:' -> 'CVE-Id:' so process-advisories.sh
  can parse the CVE number into the NEWS snippet.
- Add Fix-Commit for the master fix (e622f82ea8, glibc 2.45).
---
 advisories/GLIBC-SA-2026-0024 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

Comments

Siddhesh Poyarekar Oct. 1, 2026, 11:24 p.m. UTC | #1 
On 2026-10-01 08:58, Sachin Monga wrote:
> - Fix CVE-Id tag typo: 'CVE Id:' -> 'CVE-Id:' so process-advisories.sh
>    can parse the CVE number into the NEWS snippet.
> - Add Fix-Commit for the master fix (e622f82ea8, glibc 2.45).
> ---
>   advisories/GLIBC-SA-2026-0024 | 3 ++-
>   1 file changed, 2 insertions(+), 1 deletion(-)

LGTM.

Reviewed-by: Siddhesh Poyarekar <siddhesh@gotplt.org>

> 
> diff --git a/advisories/GLIBC-SA-2026-0024 b/advisories/GLIBC-SA-2026-0024
> index 30a494536a..c3eff0406e 100644
> --- a/advisories/GLIBC-SA-2026-0024
> +++ b/advisories/GLIBC-SA-2026-0024
> @@ -9,8 +9,9 @@ function are attacker controlled in an application and they match all
>   the way up to the edge of their page and the neighbouring page is either
>   not mapped or is not readable.
>   
> -CVE Id: CVE-2026-97399
> +CVE-Id: CVE-2026-97399
>   Public-Date: 2026-09-28
>   Vulnerable-Commit: c8376f3e07602aaef9cb843bb73cb5f2b860634a (2.23.90-474)
> +Fix-Commit: e622f82ea8797704ac8f761f88ed3e429e97fedd (2.45)
>   CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - 3.7
>   Reported-by: AISLE in partnership with Red Hat
diff mbox series

Patch

diff --git a/advisories/GLIBC-SA-2026-0024 b/advisories/GLIBC-SA-2026-0024
index 30a494536a..c3eff0406e 100644
--- a/advisories/GLIBC-SA-2026-0024
+++ b/advisories/GLIBC-SA-2026-0024
@@ -9,8 +9,9 @@  function are attacker controlled in an application and they match all
 the way up to the edge of their page and the neighbouring page is either
 not mapped or is not readable.
 
-CVE Id: CVE-2026-97399
+CVE-Id: CVE-2026-97399
 Public-Date: 2026-09-28
 Vulnerable-Commit: c8376f3e07602aaef9cb843bb73cb5f2b860634a (2.23.90-474)
+Fix-Commit: e622f82ea8797704ac8f761f88ed3e429e97fedd (2.45)
 CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - 3.7
 Reported-by: AISLE in partnership with Red Hat