Upgrade glibc from 2.42 to 2.43 and fix + update other dev packages

[KCSesh]

Description of changes:

Upgrade glibc from 2.42 to 2.43 and resolve downstream build failures caused by glibc 2.43's C23 type-generic string functions (memchr, strchr, strstr, strrchr, bsearch), which now return const-qualified
pointers when given const-qualified input. Also includes version bumps for packages that already had upstream fixes.

Changes

glibc 2.43

• Introduces C23 type-generic string functions that return const-qualified pointers when given const-qualified input
• Replaced 26 backport patches from release/2.42/master with 10 patches from release/2.43/master
• Updated %license for renamed license files (COPYING → COPYINGv2, added COPYINGv3)

C23 const-correctness fixes

Package	Approach
libxcrypt	Upstream patch (besser82/libxcrypt#220)
libelf	const qualification
libcrypto (aws-lc)	(void *) cast on OPENSSL_memchr C path
procps	51 fix sites (mix of const additions and (char *) casts); removed 2 obsolete patches already upstream
open-vm-tools	Not yet merged Upstream patches (vmware/open-vm-tools#783, #779)
os (vendored aws-lc crates)	-Wno-error=discarded-qualifiers via CMAKE_C_FLAGS_RELEASE in toolchain file

libcrypto

• Added aws-lc patches 1017–1026 - 1017 put directly in the cache as it is 4MB+

Version bumps

Package	From	To	Reason
glibc	2.42	2.43	Primary upgrade
libbpf	1.6.2	1.6.3	Const fixes already upstream
procps	4.0.5	4.0.6	Const fixes + removed obsolete patches
open-vm-tools	13.0.5	13.0.10	Const fixes + GLib stub macro conflict
libnetfilter_conntrack	1.1.0	1.1.1	Required by conntrack-tools 1.4.9
conntrack-tools	1.4.8	1.4.9	Version bump
coreutils	9.9	9.10	Opportunistic update
hwloc	2.12.2	2.13.0	Opportunistic update
aws-lc-rs	1.13.0	1.16.1	os package crate update
aws-lc-sys	0.28.2	0.38.0	os package crate update
aws-lc-fips-sys	0.13.11	0.13.12	os package crate update

os package

• Updated aws-lc/LICENSE hash in clarify.toml

Testing done:

Package-level validation

• glibc — System boot across different archs/kernels
• libxcrypt — System boot across different archs/kernels
• libbpf — System boot across different archs/kernels
• libelf — makedumpfile -d 31 -f /proc/kcore /tmp/test-dumpfile
• libcrypto — Compiled and ran test program against OpenSSL_version()
• procps — ps -ef
• coreutils — sha256sum
• open-vm-tools — vSphere validation
• conntrack-tools — conntrack CLI
• libnetfilter_conntrack — conntrack CLI
• hwloc — hwloc-ls

hwloc-ls output

Machine (15GB total)
Package L#0
NUMANode L#0 (P#0 15GB)
L3 L#0 (32MB)
L2 L#0 (1024KB) + L1d L#0 (64KB) + L1i L#0 (64KB) + Core L#0 + PU L#0 (P#0)
L2 L#1 (1024KB) + L1d L#1 (64KB) + L1i L#1 (64KB) + Core L#1 + PU L#1 (P#1)
L2 L#2 (1024KB) + L1d L#2 (64KB) + L1i L#2 (64KB) + Core L#2 + PU L#2 (P#2)
L2 L#3 (1024KB) + L1d L#3 (64KB) + L1i L#3 (64KB) + Core L#3 + PU L#3 (P#3)
L2 L#4 (1024KB) + L1d L#4 (64KB) + L1i L#4 (64KB) + Core L#4 + PU L#4 (P#4)
L2 L#5 (1024KB) + L1d L#5 (64KB) + L1i L#5 (64KB) + Core L#5 + PU L#5 (P#5)
L2 L#6 (1024KB) + L1d L#6 (64KB) + L1i L#6 (64KB) + Core L#6 + PU L#6 (P#6)
L2 L#7 (1024KB) + L1d L#7 (64KB) + L1i L#7 (64KB) + Core L#7 + PU L#7 (P#7)
HostBridge
PCI 00:04.0 (NVMExp)
Block(Disk) "nvme0n1"
PCI 00:05.0 (Ethernet)
Net "eth0"
PCI 00:06.0 (Ethernet)
Net "eth1"
PCI 00:1e.0 (NVMExp)
Block(Disk) "nvme1n1"
PCI 00:1f.0 (3D)

Other testing

• NVIDIA workload
• EKS Kubernetes conformance: K8s 1.31, 1.32, 1.34, 1.35 on both amd64 and arm64

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[ytsssun]

Commits does not seems to be signed, can you confirm?

[ytsssun]

LGTM

[KCSesh]

^ Fixed comments, aws-lc-rs = "1", no number on patch