-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2026 21:10:06 +0100 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-i386-dbgsym libc6-udeb libc6-x32 libc6-x32-dbgsym locales-all nscd nscd-dbgsym Architecture: amd64 Version: 2.41-12+deb13u2 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-dev-i386 - GNU C Library: 32-bit development libraries for AMD64 libc6-dev-x32 - GNU C Library: X32 ABI Development Libraries for AMD64 libc6-i386 - GNU C Library: 32-bit shared libraries for AMD64 libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) libc6-x32 - GNU C Library: X32 ABI Shared libraries for AMD64 locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1125678 1125748 1126266 Changes: glibc (2.41-12+deb13u2) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a null pointer dereference in macros in multithreaded programs with multiple libc.so. - Fix _r_debug handling when interposed by the main executable, restoring compatibility with Dyninst. - Fix a null pointer dereference in symbol lookup when the symbol version hash value is zero. - Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor. - Preserve vector registers in the i386 TLS slow path. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on amd64. - Fix NSS group merge not reacting to ERANGE during merge. - Detect Intel Nova and Wildcat processors and use the same ifunc selection as for Intel Panther Lake. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix incorrect return values and improve special case handling in arm64 SVE pow/powf and tanpi/tanpif implementations. - Optimise SVE scalar callbacks on arm64. - Correct SME handling on arm64 by disabling ZA state in setjmp and sigsetjmp, clearing ZA state in clone/clone3. - Fix conform tests on arm64 when the toolchain does not default to -mbranch-protection=standard. - Fix performance instability in AdvSIMD tan and sinh function on arm64 - Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el, they got previously disabled 2.41-8 due to a security issue. - Fix POWER optimized rawmemchr function on ppc64el. - Validate pread size and offset for overflow when reading ELF headers in the sprof utility. - Minor fixes to testsuite support code. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Switch currency symbol for the bg_BG locale to euro. * Revert addition of symbol versions used as ABI flags, as the dpkg-shlibdeps version in trixie is not able to handle them (see #1122107): - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff Checksums-Sha1: ce437cacbe0ad7fc3a1eba42f201c0b05c68d989 15386 glibc_2.41-12+deb13u2_amd64-buildd.buildinfo d17fd8f38b9e2bfcc56a94f4ddbeafafeb32ee58 2280040 libc-bin-dbgsym_2.41-12+deb13u2_amd64.deb 11317969a79272af880affff100b026909ef97b3 637928 libc-bin_2.41-12+deb13u2_amd64.deb a1cf18fc8449766f5924b0233340e9271f99c8e8 31928 libc-dev-bin-dbgsym_2.41-12+deb13u2_amd64.deb 0d29d6c644a7f47c5526eb1fe9a00023e397fd74 59436 libc-dev-bin_2.41-12+deb13u2_amd64.deb d7edcfa95be050d2f8ec6ce37f443dc72264aebe 47900 libc-devtools-dbgsym_2.41-12+deb13u2_amd64.deb d1f22558f4bb17a8fa8ca7155feb503e6db4a0c7 69216 libc-devtools_2.41-12+deb13u2_amd64.deb b738e62be3e5da871e4ffe825f6fcc7652dd4020 7366072 libc6-dbg_2.41-12+deb13u2_amd64.deb 8c256a4fc6ae46a2fcba924767e31155cdd2e68c 14824 libc6-dev-dbgsym_2.41-12+deb13u2_amd64.deb 9cdcc91b56dfcafa399e654a4f0fec0a64fc1261 1429304 libc6-dev-i386_2.41-12+deb13u2_amd64.deb 41010cab40986179bf406fc2b0009e4f8803bf0d 1595884 libc6-dev-x32_2.41-12+deb13u2_amd64.deb d52548be689a6f8bf2e40896b26e91d46980a6db 1996136 libc6-dev_2.41-12+deb13u2_amd64.deb b7b6e8654f47b2d80f65136a7357e703eb5182e5 6936820 libc6-i386-dbgsym_2.41-12+deb13u2_amd64.deb 8aa56cfb88b7b1a45e2cd805be6b03f6fe4950f2 2539880 libc6-i386_2.41-12+deb13u2_amd64.deb 7b93834b6171158dbe8053d0748d52933fc239a9 1424708 libc6-udeb_2.41-12+deb13u2_amd64.udeb 2325eca3642adf633ba8e3bbfb2f45fdf88de5a0 7191608 libc6-x32-dbgsym_2.41-12+deb13u2_amd64.deb 7132bfa3105344bd29146e355bc425ac896b63d2 2665584 libc6-x32_2.41-12+deb13u2_amd64.deb 6244d6faa86ae6b703de595b8b5a45bb8153ac0e 2847424 libc6_2.41-12+deb13u2_amd64.deb c2de9727868adcb75523ac4f3ce1169b0970491e 11079280 locales-all_2.41-12+deb13u2_amd64.deb 4f1bb610ebdf233f845e03cc5331f69d23785f96 220064 nscd-dbgsym_2.41-12+deb13u2_amd64.deb 2286f6f6bcf76e4289e09da7cb62a3127c779926 106908 nscd_2.41-12+deb13u2_amd64.deb Checksums-Sha256: 5c2b896977f96b956f8d0ddaf459333f86be9a6e783be9746be76ff517c1e804 15386 glibc_2.41-12+deb13u2_amd64-buildd.buildinfo 997ea4f5a58827ce1993f104c911dc957d7a47756498f86bb175ae9012364ca6 2280040 libc-bin-dbgsym_2.41-12+deb13u2_amd64.deb e30df1bcd947889cd96b5a094e0bf6be6acb4d6d7d2b6def0507f36b432916be 637928 libc-bin_2.41-12+deb13u2_amd64.deb c78338c558c3c665cea08c3d010fc8ed5ded920b2811bfc4e5d530b380d1810e 31928 libc-dev-bin-dbgsym_2.41-12+deb13u2_amd64.deb 6eaf8b62c86ff0fa53cdf37e638dca635098b81e81a33890dfc30f2bcdb5aeab 59436 libc-dev-bin_2.41-12+deb13u2_amd64.deb 8ab7d701ebea7a601a766bf95a69638e373874bffe389982d302ea714e89f9fa 47900 libc-devtools-dbgsym_2.41-12+deb13u2_amd64.deb 9ab1fdb2f7d597e357e714eec63e76909eb98634d6b6bd147527e4b3c542ea5f 69216 libc-devtools_2.41-12+deb13u2_amd64.deb 77ccb07933984ddf8d63ff50baec1656104f208a40cdf7602c3e1dfede33c64d 7366072 libc6-dbg_2.41-12+deb13u2_amd64.deb d9ee373576b1d5a1563dd28322995fad1a9fa135ee8cf4731013d1a320b59bbd 14824 libc6-dev-dbgsym_2.41-12+deb13u2_amd64.deb 787dc33143c8bffedc3020bf745e295747e499bf189a943158b4ae09f1300e3c 1429304 libc6-dev-i386_2.41-12+deb13u2_amd64.deb 794080b6cd069b3e4f9a4425a624aa949dd29d7d55f0e1dda2c37875ac4f7d47 1595884 libc6-dev-x32_2.41-12+deb13u2_amd64.deb eb4699442ec3ee4cac5cfc59e74792d02de819c9285459b48965e7dab3b793de 1996136 libc6-dev_2.41-12+deb13u2_amd64.deb f251996ec8565bb558036384210f4abcd7e477988445e03442dee54c33345670 6936820 libc6-i386-dbgsym_2.41-12+deb13u2_amd64.deb 5eb15c7bc9334e71b13db58c265b2cfd7a2e8f3ed23a3630457c3a152b285b25 2539880 libc6-i386_2.41-12+deb13u2_amd64.deb 85676a0d4fe0235e9abb231cc965873bb0037cced72b88c473ebba4d0ee2af43 1424708 libc6-udeb_2.41-12+deb13u2_amd64.udeb 74a9bc0fc38a2d7df550cfaff6357f84c3715b33811ef37282dda08ee6060ea1 7191608 libc6-x32-dbgsym_2.41-12+deb13u2_amd64.deb 3b99b942db3313e1c3bbd58642ec84a498d415fff2b48d5208c6dc8936089922 2665584 libc6-x32_2.41-12+deb13u2_amd64.deb 8f9ddeb958cec3a05c4c303d4c85fddf30cb994747b16b1eb715ac49049f6d4a 2847424 libc6_2.41-12+deb13u2_amd64.deb bfaa81762bc101eec4df3b4ed230e5a2417421623a764107478c1e0502b91af0 11079280 locales-all_2.41-12+deb13u2_amd64.deb ac83cccb60a32d2bcb1406fad9466b02da66257390319f6a9bc8d1e464b3517b 220064 nscd-dbgsym_2.41-12+deb13u2_amd64.deb 89401138fa1ae9fdcbc56f6d15dacc4cabca9143c9ba32eba8200d9e13ceef00 106908 nscd_2.41-12+deb13u2_amd64.deb Files: 8aa1d2fd13d1989f370d003f65b13a0b 15386 libs required glibc_2.41-12+deb13u2_amd64-buildd.buildinfo 498f9f68577abbd7d270256974d4faef 2280040 debug optional libc-bin-dbgsym_2.41-12+deb13u2_amd64.deb 20dee41d12ffd9deaa76d1693bc05157 637928 libs required libc-bin_2.41-12+deb13u2_amd64.deb bdd3eedcac293b7b79410707a94b6601 31928 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u2_amd64.deb 1bd20e57126c4a1c1b7e18cd6d190317 59436 libdevel optional libc-dev-bin_2.41-12+deb13u2_amd64.deb 0d10a077435dcbb12712be7b1b883cd9 47900 debug optional libc-devtools-dbgsym_2.41-12+deb13u2_amd64.deb ea7280156e5fbad744b0d4b315b91386 69216 devel optional libc-devtools_2.41-12+deb13u2_amd64.deb 7b34d07cc2512260d2a365bc3c055d44 7366072 debug optional libc6-dbg_2.41-12+deb13u2_amd64.deb d5771a367d9fc2ec24865d8a4de108c4 14824 debug optional libc6-dev-dbgsym_2.41-12+deb13u2_amd64.deb 870a766fbc227f76909a1475e7363b9f 1429304 libdevel optional libc6-dev-i386_2.41-12+deb13u2_amd64.deb 3c4a36ada717be16120bd7fc760c4862 1595884 libdevel optional libc6-dev-x32_2.41-12+deb13u2_amd64.deb 624d8d4bc552cf27364b229af251363f 1996136 libdevel optional libc6-dev_2.41-12+deb13u2_amd64.deb 704761d19f90ac2b3db1c4c7b21ad8cd 6936820 debug optional libc6-i386-dbgsym_2.41-12+deb13u2_amd64.deb a7ec8a21fb2eadcbb5a1f1c2edfc1850 2539880 libs optional libc6-i386_2.41-12+deb13u2_amd64.deb 82eb4d5d9be15790348267a6d5b2b678 1424708 debian-installer optional libc6-udeb_2.41-12+deb13u2_amd64.udeb 1ca4c48ea02cb13fb52ce6252b1ca0e4 7191608 debug optional libc6-x32-dbgsym_2.41-12+deb13u2_amd64.deb 479cc4b3210a8f4ec130c4e60716d476 2665584 libs optional libc6-x32_2.41-12+deb13u2_amd64.deb 1f0a99acff36c4febd8e507a5ff734c1 2847424 libs optional libc6_2.41-12+deb13u2_amd64.deb 741d43e3e4891048c5050c4800f3fee7 11079280 localization optional locales-all_2.41-12+deb13u2_amd64.deb 1fdff0d0f67d328f5bccfc272d5541d0 220064 debug optional nscd-dbgsym_2.41-12+deb13u2_amd64.deb ef514fed19fdaec108470610f0b9551c 106908 admin optional nscd_2.41-12+deb13u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmmmj8QACgkQIy3Pg040 HrDSHxAAoLCBcetUEme7+BG+tYBI1xvTZY7pEEeRrDjss5yIQ2XaGVzLgNPaxBQi ffNr0uLVqUVqISN6u5imxhF5+kDBiqDVs/H6Z8BFafHfBdt7k0yd6xXJsG86tpNu VwWMxXz1TE4o+Fmzf9brWb2HYDNqU4pZJoNrHRtYqQ7Wp5+XLWoe/jJ784YN25lr UoWYkwswqSU2idr5QvD236AYwznq9L5s3AHZib/S7Zx75QYueHRqSV9bx6geg6Qt QvnxynCzECNLSfjRIOkvmnBL2E+NnQyGm01WdLAnEjVRACy15PkDB1SfmqiyK3PQ NOaC3b76/7ASw9d3JVbxw/GGER5pZvS7/gAMV5siesnEUn6xJtKs6FywoAWou4rH MXwBpmvQOHxZW4W3vkUs4ehrclQoiR7atCGhJlc1F+clbD7BejhUZGfQQd6kxyKD luJRycK/NpQnK+U4t7l2uZpdUG3tGXQRAohTMKeKkJI6ajFwFdMGX55kJ6LLwzJv YRiHjnhRILAz3zX50zRlESmqpH9gNqn7HoG1RIuj9DQ7Xnxq31yZIg//4CRN8pqm rTjyxBUcBDPUOlCgQ/e59UwMPjBLOS5wb0Vzp30qbg+o7FZ4sey0hfel3TxIqHVz QHAG8MsqDp8iZIDPjqZ6eM1vFIRJjd5U+Si+jYYvwmFGZL8zfic= =GAbI -----END PGP SIGNATURE-----