-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2026 21:10:06 +0100 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: armel Version: 2.41-12+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1125678 1125748 1126266 Changes: glibc (2.41-12+deb13u2) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a null pointer dereference in macros in multithreaded programs with multiple libc.so. - Fix _r_debug handling when interposed by the main executable, restoring compatibility with Dyninst. - Fix a null pointer dereference in symbol lookup when the symbol version hash value is zero. - Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor. - Preserve vector registers in the i386 TLS slow path. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on amd64. - Fix NSS group merge not reacting to ERANGE during merge. - Detect Intel Nova and Wildcat processors and use the same ifunc selection as for Intel Panther Lake. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix incorrect return values and improve special case handling in arm64 SVE pow/powf and tanpi/tanpif implementations. - Optimise SVE scalar callbacks on arm64. - Correct SME handling on arm64 by disabling ZA state in setjmp and sigsetjmp, clearing ZA state in clone/clone3. - Fix conform tests on arm64 when the toolchain does not default to -mbranch-protection=standard. - Fix performance instability in AdvSIMD tan and sinh function on arm64 - Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el, they got previously disabled 2.41-8 due to a security issue. - Fix POWER optimized rawmemchr function on ppc64el. - Validate pread size and offset for overflow when reading ELF headers in the sprof utility. - Minor fixes to testsuite support code. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Switch currency symbol for the bg_BG locale to euro. * Revert addition of symbol versions used as ABI flags, as the dpkg-shlibdeps version in trixie is not able to handle them (see #1122107): - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff Checksums-Sha1: 571f422c480fe65e296994ca3947956993b02aa9 12632 glibc_2.41-12+deb13u2_armel-buildd.buildinfo b6a22be8a8e30d04f1781952307872f849177f86 2209428 libc-bin-dbgsym_2.41-12+deb13u2_armel.deb 83c8ac06dcd233e654bce974b587c3090dcdfbc7 517676 libc-bin_2.41-12+deb13u2_armel.deb 12be4bd873997a5fbdc4c48e1b6a9138d66fa058 31804 libc-dev-bin-dbgsym_2.41-12+deb13u2_armel.deb bfd5726a57aaa2af83122c1e31cbd89e0103f2c0 58116 libc-dev-bin_2.41-12+deb13u2_armel.deb fad96d41051ff780865c979ced368bcef8ea4a49 46292 libc-devtools-dbgsym_2.41-12+deb13u2_armel.deb 6f955f34d855648d9fbf6bf4275b8ae52ecc2283 70628 libc-devtools_2.41-12+deb13u2_armel.deb 2986e547399b0a846a43433d5406529e69a5d1e1 6844820 libc6-dbg_2.41-12+deb13u2_armel.deb 4aeb37fc3468434f8c702a9885e024de040698d3 13452 libc6-dev-dbgsym_2.41-12+deb13u2_armel.deb 5c43aa0b5f365354a7e049f15f62abc6904844da 1362804 libc6-dev_2.41-12+deb13u2_armel.deb cfed5c8d3fb9ba4c062abaa72fb85efa7db79f8d 825228 libc6-udeb_2.41-12+deb13u2_armel.udeb 1d98b7642586286f4969d975cc86e8b488fd0a3a 2266704 libc6_2.41-12+deb13u2_armel.deb af58584a15488a7a9632f92fcc3959fdb27fdb16 11079332 locales-all_2.41-12+deb13u2_armel.deb 6c3654933212ba04c3053e6c41255cd80dc4c078 213768 nscd-dbgsym_2.41-12+deb13u2_armel.deb c5a2e086149c26fb01c2581aca0f783182d60df9 100520 nscd_2.41-12+deb13u2_armel.deb Checksums-Sha256: 2ca89125522bdc71f600862a89f4e72bbef5b321630d6c3146d13f020c29d15b 12632 glibc_2.41-12+deb13u2_armel-buildd.buildinfo 7ea33954781a246fed5bbc713c707a255046eaf8769e2fd6d38bc358a70bdada 2209428 libc-bin-dbgsym_2.41-12+deb13u2_armel.deb 357740d87f6d4d4a47bdbbe0afd56099de50f9031a3432458e23dd9a3188b665 517676 libc-bin_2.41-12+deb13u2_armel.deb 1ee3847ded00628f332b4d54be389645cc0274cbefc19e88a9c5d59ba06e6de5 31804 libc-dev-bin-dbgsym_2.41-12+deb13u2_armel.deb 26a409889e2e2924cc3b3f0aec9c9ebea7bc5ed5fe25a49917e7f995385ff8c9 58116 libc-dev-bin_2.41-12+deb13u2_armel.deb f4361b04eaf0a42cff39d3ad60bc30a453ed1e83e4796f7f303ad02d2747dc27 46292 libc-devtools-dbgsym_2.41-12+deb13u2_armel.deb c1898aca221209b430adfdc9b0627619aa569b88e5abecbe43cf6da19bcf15ab 70628 libc-devtools_2.41-12+deb13u2_armel.deb 8051b8744c02ce5c1b1f102e5e01bd552b8fd2542647e6ce6fe71644132e5bfd 6844820 libc6-dbg_2.41-12+deb13u2_armel.deb 96cb2824cb242d26eeb743009c0fead73aa4fb28b754e99e1e0c828212f41819 13452 libc6-dev-dbgsym_2.41-12+deb13u2_armel.deb 97bdfc25146a92e3978f3648a0e26378fdd0f7a3d2b1e1c4592d370ab7b2ce0f 1362804 libc6-dev_2.41-12+deb13u2_armel.deb 1966ee816d8fb5c947c20c25b17286b607e1718b124dec922282f3e12be75f95 825228 libc6-udeb_2.41-12+deb13u2_armel.udeb a6008709009fb0953b94b8ee7886a2f1e2a5cf235de3aea072da93d94476c605 2266704 libc6_2.41-12+deb13u2_armel.deb defeb683d45c584709eff512871ba85c5cb756c3350ac480b3639a32156f59a8 11079332 locales-all_2.41-12+deb13u2_armel.deb 805779b54b3913c184b852b09dc2485bd4ee5ecf9cee06f38605a37f45ca41e5 213768 nscd-dbgsym_2.41-12+deb13u2_armel.deb b8055285bc999985364699a50a800e21adebfdf8f2b863f3c00af72d9b90a008 100520 nscd_2.41-12+deb13u2_armel.deb Files: cacba8219ed2c8ad1da9ce126b320de9 12632 libs required glibc_2.41-12+deb13u2_armel-buildd.buildinfo 30de8fbae45b29b9d306839d6a68448b 2209428 debug optional libc-bin-dbgsym_2.41-12+deb13u2_armel.deb be0f9825be1832a636a4c52a56ee74d0 517676 libs required libc-bin_2.41-12+deb13u2_armel.deb f8a1b3682639fa30a7a57ffb90e16ed0 31804 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u2_armel.deb b65eac49bbfa573d6b2a085793642d8a 58116 libdevel optional libc-dev-bin_2.41-12+deb13u2_armel.deb 994ded033c5a78454a19b369882b229f 46292 debug optional libc-devtools-dbgsym_2.41-12+deb13u2_armel.deb 3c332f3f3bd78af2952a912411bfa7e9 70628 devel optional libc-devtools_2.41-12+deb13u2_armel.deb 491e97a4c999746ccbcc04555fdeae9d 6844820 debug optional libc6-dbg_2.41-12+deb13u2_armel.deb 565c97b794d7f6b08252560d1eee674b 13452 debug optional libc6-dev-dbgsym_2.41-12+deb13u2_armel.deb 4722b5837a9135c66555c7885515a732 1362804 libdevel optional libc6-dev_2.41-12+deb13u2_armel.deb 89c0132c85f62bcde5b7a4209c7e81af 825228 debian-installer optional libc6-udeb_2.41-12+deb13u2_armel.udeb f48c16eb80215300b4107849031d8671 2266704 libs optional libc6_2.41-12+deb13u2_armel.deb f66c1330e3302afe906f47c25dc31130 11079332 localization optional locales-all_2.41-12+deb13u2_armel.deb a550dd10c933d02609d5d3fd2f7e8f35 213768 debug optional nscd-dbgsym_2.41-12+deb13u2_armel.deb bedb06a92cffaea830375c620618cd49 100520 admin optional nscd_2.41-12+deb13u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmmmivUACgkQVLd4YzMS DKGcbRAAq9hOMGRwFdSs5YAkk8Opv6HPRiggTxWoSboCNReQKDuHn7noRXcOMIWF O+jgEhuXc6oQrDeEojYkoR5nsw8WBnycPQ01abH5qSip9ZXZwImu+ycgGeFlH8x9 yzSEqSVwX06snB55x2QAEpxVq8maS4l44u+JTwbDq1tTGfTVnF3wTQf5fGI3PSG6 zAmdNQ5xGdvjt3SKYKITvzJzVpcMCSEtJdB/o/aZbnj8qdJGu1et7N8LKLVwV8a3 S4B/aiD+rVM1iPVaYEWd/CepAb6u6ZsOxrhTN6wsvy6rl3gjQe5eOjo9t58R1er3 57dr61RAzWQhAdZLi53noFC1i2+Zn3RawVBhbExFOoFHH810ym9VhzEanzxwy9Jr s1IPfrlOOCx3rxKM+sHZOZtYKuD8N3NzPHWkXMhXZTPmrCwn42xWNgdYpA3rAOXv IBZvYZXFxTK4PVZr7XIckXsfd6D5d0M5v4E0Q/A0I9oljbLEaxIA5IxAe4k/tE5e S+GWp4mWwcx0E03JnfzNKQE68yNX9widsjRyM5DzgllgTQ1Yyb4LdEWsb6pguh9O 4w2L0DfzO26BxYy+x2Pf4GQqcGU/8KP0FzNM1CZLiSu/IeDI6i6EHFtUP/U7/aa5 XawQE/g9QEKNdDwsTA6IaP/+vxLQ4qG1YEJ/nH/bKCPQrdCQayA= =KtWW -----END PGP SIGNATURE-----