Sync Collecting Fix Commits: Wed May 20 01:08:24 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://gitweb.gentoo.org/repo/gentoo.git",
   "vulnerabilities": {
+    "CVE-2026-41054": {
+      "57607c11ca0bfec89208497dedb093900c95dbee": "sys-apps/haveged: add 1.9.21 to fix CVE-2026-41054\n\nBug: https://bugs.gentoo.org/975496\nSigned-off-by: Agostino Sarubbo <ago@gentoo.org>"
+    },
     "CVE-2026-4046": {
       "6724bc3b508a14b2071accf0a0de6a3cbfa17ecc": "sys-libs/glibc: keyword 2.43-r2\n\nPatchset changelog:\n2b179153ea (HEAD -> gentoo/2.43, tag: gentoo/glibc-2.43-3, gentoo/gentoo/2.43) abilist.awk: Handle weak unversioned defined symbols\nb8408369b8 Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)\n1f41c59d32 include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h\ne0a7106a8d Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)\nb180ac98ab tests: fix tst-rseq with Linux 7.0\n971bff92c6 riscv: Resolve calls to memcpy using memcpy-generic in early startup\na254024c43 elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen\n6622325eb8 elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso\n\nSigned-off-by: Andreas K. H\u00fcttel <dilfridge@gentoo.org>",
       "c2b64d69eca79929c75d4d4972cc40222412d540": "sys-libs/glibc: keyword 2.42-r7\n\nPatchset changelog:\nea00c0ff4c (HEAD -> gentoo/2.42, tag: gentoo/glibc-2.42-9, gentoo/gentoo/2.42) abilist.awk: Handle weak unversioned defined symbols\n7e922b3376 Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)\nbfb29cea5f include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h\n5cc06cfe10 Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)\nde3b37df3a tests: fix tst-rseq with Linux 7.0\nc05a0fe6d1 elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso\n2fe8056371 resolv: Check hostname for validity (CVE-2026-4438)\n\nSigned-off-by: Andreas K. H\u00fcttel <dilfridge@gentoo.org>"