-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2026 21:10:06 +0100 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: armhf Version: 2.41-12+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1125678 1125748 1126266 Changes: glibc (2.41-12+deb13u2) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a null pointer dereference in macros in multithreaded programs with multiple libc.so. - Fix _r_debug handling when interposed by the main executable, restoring compatibility with Dyninst. - Fix a null pointer dereference in symbol lookup when the symbol version hash value is zero. - Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor. - Preserve vector registers in the i386 TLS slow path. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on amd64. - Fix NSS group merge not reacting to ERANGE during merge. - Detect Intel Nova and Wildcat processors and use the same ifunc selection as for Intel Panther Lake. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix incorrect return values and improve special case handling in arm64 SVE pow/powf and tanpi/tanpif implementations. - Optimise SVE scalar callbacks on arm64. - Correct SME handling on arm64 by disabling ZA state in setjmp and sigsetjmp, clearing ZA state in clone/clone3. - Fix conform tests on arm64 when the toolchain does not default to -mbranch-protection=standard. - Fix performance instability in AdvSIMD tan and sinh function on arm64 - Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el, they got previously disabled 2.41-8 due to a security issue. - Fix POWER optimized rawmemchr function on ppc64el. - Validate pread size and offset for overflow when reading ELF headers in the sprof utility. - Minor fixes to testsuite support code. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Switch currency symbol for the bg_BG locale to euro. * Revert addition of symbol versions used as ABI flags, as the dpkg-shlibdeps version in trixie is not able to handle them (see #1122107): - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff Checksums-Sha1: c958eb2685ebdb11fc3f654eb55e564dff32eae0 12646 glibc_2.41-12+deb13u2_armhf-buildd.buildinfo 8eb9bbbac65441c2ef5d0131f5c5ccde2a273580 2212148 libc-bin-dbgsym_2.41-12+deb13u2_armhf.deb efe809d54b5f55d701e4b76965ea53abe8959eff 524008 libc-bin_2.41-12+deb13u2_armhf.deb c291744197f53c10dbbd2196ff28faf020f0fdbf 31980 libc-dev-bin-dbgsym_2.41-12+deb13u2_armhf.deb 624daec33eab69f14afc491af9b9468afe8fe7da 58048 libc-dev-bin_2.41-12+deb13u2_armhf.deb a222c9c7a53ce08dee5e23534caf0ed3d866acad 46640 libc-devtools-dbgsym_2.41-12+deb13u2_armhf.deb 9b2dc9087beeebb413b9f510be5ec0ae47d995ce 69996 libc-devtools_2.41-12+deb13u2_armhf.deb aaa0a215a28c5a04ecce8d6e97529ff8b0c4a6ec 6720376 libc6-dbg_2.41-12+deb13u2_armhf.deb 4be209784e23ffd47fa38bc0ec9c83ceaea36fd4 13616 libc6-dev-dbgsym_2.41-12+deb13u2_armhf.deb b1cd8c710fd8d277e260e712f3bd43aea0246b2c 1329316 libc6-dev_2.41-12+deb13u2_armhf.deb e59674e669f63ce42386565d2acb024c6837296f 800392 libc6-udeb_2.41-12+deb13u2_armhf.udeb 7dc44136a9ef7c04e963874e3285be68a3d080bf 2249556 libc6_2.41-12+deb13u2_armhf.deb c598832403f809e5c040ef7dc26f4d2cb3ff976a 11079284 locales-all_2.41-12+deb13u2_armhf.deb 119eb6a76007394d9aaeba1d38a1026d388fb46e 215964 nscd-dbgsym_2.41-12+deb13u2_armhf.deb 763841b6b761b681908265c5567a21d893be114b 101044 nscd_2.41-12+deb13u2_armhf.deb Checksums-Sha256: c0f7232bc93f46cfafc4aa7701b18cfc2ff17fada2d8f6d96d30a955a156787a 12646 glibc_2.41-12+deb13u2_armhf-buildd.buildinfo cf56163c9161745fbca2dc68ce581dddb8e1b11a5b1dc846a6dcc28a932a9c6c 2212148 libc-bin-dbgsym_2.41-12+deb13u2_armhf.deb 81e7d78ef525e9bf4052e720adb85682827c37e23bfaa3083b898953211bceb0 524008 libc-bin_2.41-12+deb13u2_armhf.deb 3bb1f87575dada7b859e5d720ae45e94ec0d09af6b8590fe49135889963898f1 31980 libc-dev-bin-dbgsym_2.41-12+deb13u2_armhf.deb f26bb554a88056f10e75fb6888427f35dce9cc8f3d7c47fae609f1d4412947e7 58048 libc-dev-bin_2.41-12+deb13u2_armhf.deb 4792278d15c0c28ba71af1d2541c6cd81e52956fc16bfd7dc1694947629a8762 46640 libc-devtools-dbgsym_2.41-12+deb13u2_armhf.deb 23091ec2592693dd13ab84a1de9f0cf981e706fb7368dda89c70acfe1696b86f 69996 libc-devtools_2.41-12+deb13u2_armhf.deb dc1319e73c34cf4b127ba173a030609f009dd1d7c5631d291f85f52305337c25 6720376 libc6-dbg_2.41-12+deb13u2_armhf.deb dda1836f0b723e5c7838237476d1b5d40dc761991ca7a982356149b953845937 13616 libc6-dev-dbgsym_2.41-12+deb13u2_armhf.deb 057df154034822d70840881721df8744f040ae9077270d89a35e8a745fe425db 1329316 libc6-dev_2.41-12+deb13u2_armhf.deb b2f6527ca6db0ade1f9bcd44ca16f6ffde063611160ee0dc7758438eee32416b 800392 libc6-udeb_2.41-12+deb13u2_armhf.udeb 5111f0399bdcd0e7cc517cf5d0a7796649c364c11f1e2cd52cce89fe30d230f8 2249556 libc6_2.41-12+deb13u2_armhf.deb 40b03961c21a18902a989a0d2077f44c97303055d916e92ddcb6231d8545e45e 11079284 locales-all_2.41-12+deb13u2_armhf.deb 6bcdad1694f3905aa9f59e30d957210558a0828a3847e5fd2a7a2bf209277bdd 215964 nscd-dbgsym_2.41-12+deb13u2_armhf.deb 778ef5bcf0f285121ecfb2be901afe78399000fe685a004171416eea99088062 101044 nscd_2.41-12+deb13u2_armhf.deb Files: 0f48876f0a775c3d9122033875c012a9 12646 libs required glibc_2.41-12+deb13u2_armhf-buildd.buildinfo a8684385309c4d4bd040e3001f302e87 2212148 debug optional libc-bin-dbgsym_2.41-12+deb13u2_armhf.deb ff1b61fb466f7ece5a198ff0b1a45a07 524008 libs required libc-bin_2.41-12+deb13u2_armhf.deb 253798a38085f9c81321953e074565bb 31980 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u2_armhf.deb 8221f5d17fd834dd7f1165cfe1ccce5e 58048 libdevel optional libc-dev-bin_2.41-12+deb13u2_armhf.deb c185159f6ee2d9bb661b5625eeda28c4 46640 debug optional libc-devtools-dbgsym_2.41-12+deb13u2_armhf.deb e8fa43d0c33c09db946a112e79ff6a89 69996 devel optional libc-devtools_2.41-12+deb13u2_armhf.deb 4d7216e2529c2c8f018ecebe3c830c4b 6720376 debug optional libc6-dbg_2.41-12+deb13u2_armhf.deb 261879b06cb4fe37db8fbf36954e751e 13616 debug optional libc6-dev-dbgsym_2.41-12+deb13u2_armhf.deb eac0489277bb56236929f86a9ef15665 1329316 libdevel optional libc6-dev_2.41-12+deb13u2_armhf.deb 266cba9db7b7b4fab043a8fbe350a6b9 800392 debian-installer optional libc6-udeb_2.41-12+deb13u2_armhf.udeb c4bd8a6efddde420ea4c3741eff3b516 2249556 libs optional libc6_2.41-12+deb13u2_armhf.deb f8b825d9f1c3b6f5671d4a223e3a3c4d 11079284 localization optional locales-all_2.41-12+deb13u2_armhf.deb 2c251956f7fb8e8aea8fa75f535b3abd 215964 debug optional nscd-dbgsym_2.41-12+deb13u2_armhf.deb 2075839481210459230575060290b804 101044 admin optional nscd_2.41-12+deb13u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEiIG3Q3DxwDgRKKeyLRECdjCZQkcFAmmmiqMACgkQLRECdjCZ Qkepbg//aE61Z5t9mJLgtIosRGHlcj8U3b/VM9TX+Kl2txFjLlgZ/hUbIWNkblfR uRO+oKsIlVyaS0OaKOu1tTj6BG/3hdw6jyJ/Pz+rXnM1LUSaYgFWbvrBe/yQBfr9 7I5LVZozfZ2eYvShVZzzk3tjapNyl9+uvqr/Q7M886Rmv0UCBlDVX6dDIJdtZXWY pfkJZROm67+mYhaw3PbbqUsNPmaeS0tI3zC7hu4HRdt0b5mdBUkUNAMwPdf2MYRe jVrS48bO8c2bCnZIS8d3V5Lk2x2znGf1WpADSP+v3xfX6+ID5yveeBzlZKrQ46I+ s7G+QPzPDLhKx165I/zYOhd+lfCZE5LkA4p5HgLU4JK+yUtlkLQbCIdHZNBpHuuO NG9AT4jJIC4xoNmYj6mWpOZOtvdaOOCj9g1DjGFP8fIemIs226pQ3cF2g9tMtBkI txm8roPMhG0B5xQlaXDRGguqTetyhpGN/qUkxEHQwPF6oJ0QVBX4vTnMA096fska Chu/tJWPJtYRXvApturXvvCXFisW5D+ramg1HKGkTf1Xoaf+nzhUM6no0CfdxU6W b0JrjPu5a81OHVK5lZjXR62X5zLHqqxiTPN14GGkQbe11OYuPvhoPzJLLzQbvp2G f26QJZihBnhkT5vk4zrVtNo297Jvr6a4dRU/w+y07JToZGb4mT4= =foQb -----END PGP SIGNATURE-----