[PATCH 2.39 0/4] Cherry-pick CVE-2026-5435 and CVE-2026-6238 fixes to release/2.39/master

[Jaipaul Cheernam]

Hi,

This series cherry-picks the fixes for CVE-2026-5435 (bug 34033) and
CVE-2026-6238 (bug 34069) to the release/2.39/master branch.

These are straight cherry-picks from mainline with one trivial conflict
resolution in patch 2/4: the ns_t_opt case removal conflicted because
release/2.39/master still had that case block (upstream had already
removed it in a different context).

Patch 1/5 from the original mainline series ("Update GLIBC-SA-2026-0012
to mention A6 records") is omitted since the advisories/ directory does
not exist on release/2.39/master.

The same fixes were already cherry-picked to release/2.43/master as
commits e64ae5a591f0, 3a418da6a393, and 8759917de589.

All patches apply cleanly on top of current release/2.39/master HEAD
(be1e627cd7).

glibc 2.39 is actively used in Yocto Project's scarthgap (LTS) release,
so this branch continues to have downstream consumers relying on it for
security fixes.

Thanks,
Jaipaul

Florian Weimer (4):
  resolv: Check for inet_ntop failure in ns_sprintrrf
  resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435)
  resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238)
  resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)

 resolv/Makefile          |   2 +
 resolv/ns_print.c        | 124 ++-------------
 resolv/tst-ns_sprintrr.c | 329 +++++++++++++++++++++++++++++++++++++++
 3 files changed, 348 insertions(+), 107 deletions(-)
 create mode 100644 resolv/tst-ns_sprintrr.c

-- 
2.34.1