-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2026 21:10:06 +0100 Source: glibc Binary: glibc-doc glibc-source libc-l10n locales Architecture: all Version: 2.41-12+deb13u2 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Aurelien Jarno Description: glibc-doc - GNU C Library: Documentation glibc-source - GNU C Library: sources libc-l10n - GNU C Library: localization files locales - GNU C Library: National Language (locale) data [support] Closes: 1125678 1125748 1126266 Changes: glibc (2.41-12+deb13u2) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a null pointer dereference in macros in multithreaded programs with multiple libc.so. - Fix _r_debug handling when interposed by the main executable, restoring compatibility with Dyninst. - Fix a null pointer dereference in symbol lookup when the symbol version hash value is zero. - Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor. - Preserve vector registers in the i386 TLS slow path. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on amd64. - Fix NSS group merge not reacting to ERANGE during merge. - Detect Intel Nova and Wildcat processors and use the same ifunc selection as for Intel Panther Lake. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix incorrect return values and improve special case handling in arm64 SVE pow/powf and tanpi/tanpif implementations. - Optimise SVE scalar callbacks on arm64. - Correct SME handling on arm64 by disabling ZA state in setjmp and sigsetjmp, clearing ZA state in clone/clone3. - Fix conform tests on arm64 when the toolchain does not default to -mbranch-protection=standard. - Fix performance instability in AdvSIMD tan and sinh function on arm64 - Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el, they got previously disabled 2.41-8 due to a security issue. - Fix POWER optimized rawmemchr function on ppc64el. - Validate pread size and offset for overflow when reading ELF headers in the sprof utility. - Minor fixes to testsuite support code. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Switch currency symbol for the bg_BG locale to euro. * Revert addition of symbol versions used as ABI flags, as the dpkg-shlibdeps version in trixie is not able to handle them (see #1122107): - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff Checksums-Sha1: 1c7e55f04e2de04ec199bfbdc8a1cb928e89238b 3828748 glibc-doc_2.41-12+deb13u2_all.deb b4cee39731cb578d5ba91b96af4cb20941b121a2 20885368 glibc-source_2.41-12+deb13u2_all.deb 4f33ea2cfec82fc4fa5f25f96a9451d00de07051 10609 glibc_2.41-12+deb13u2_all-buildd.buildinfo c41a2f7f382ecac838aed40e3a37f94b8ff8258e 740160 libc-l10n_2.41-12+deb13u2_all.deb fbe66eac6b4dbf8444928d5e86034e9f7ccd1cb4 3924992 locales_2.41-12+deb13u2_all.deb Checksums-Sha256: a7bf87d90f9bcc1e1b294fe952c507cc62f21903a83b2b6a0dff918617136a4b 3828748 glibc-doc_2.41-12+deb13u2_all.deb 10b77c7e93a907f116c5a4fda4d40abe5fc1ddb5060e674e1185eddaa6b23eb1 20885368 glibc-source_2.41-12+deb13u2_all.deb 029be3c90a087b77b55bdd44ea9379ec7f143409974a30e1ed9f64edc51fb2ad 10609 glibc_2.41-12+deb13u2_all-buildd.buildinfo 8d13f4cfe34b5755ee8c507de4b80922eb048c4ba90be97cd12a94cf3f379c54 740160 libc-l10n_2.41-12+deb13u2_all.deb 9fb5e14961abe0befa5e94f984ef95858dc1816ac044708fc750da690750ebd7 3924992 locales_2.41-12+deb13u2_all.deb Files: aad41b14119820df4a01419cef483924 3828748 doc optional glibc-doc_2.41-12+deb13u2_all.deb 325f1b10c1f5d1538580e4f7a706e672 20885368 devel optional glibc-source_2.41-12+deb13u2_all.deb 43ae6256c3eae71434ccacf566fa07ad 10609 libs required glibc_2.41-12+deb13u2_all-buildd.buildinfo f67679347505a82815c2983f53fbcede 740160 localization standard libc-l10n_2.41-12+deb13u2_all.deb f8032020a409ef3c462fe785cd058cea 3924992 localization standard locales_2.41-12+deb13u2_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmmmg1oACgkQx30Wh8LX l/Zt+g/8CpMV1XNE1G4Vg/fTBNpzFRUGHdMcanJNOliT7xLMDvAzQxHBxX9VDMi9 ae+pBHMlDVJOdfkPrF583eYh6vRrNc4ODu3rVDfjm2U79Ug8/lJLc4IpdbBLuEsu SE4IRxj80sqKGr3UuA+mu+RpliYgxzvCY7wXabQu3YQcZiRxpn9gbkS+FEy0zbD+ Ah2jYI0U6/IynBD04hE9h8AH7dmR4kjxEZwRLxXj4D9W5zyykkNZyDuEGeoEBN06 9oNxuuJFs75o9Nq5tULxJV0dSLhZkEu9S4y3fAPgXTG63+awc2hvh/yIxFRcA/E5 DK2D4+nrgINw2BBtwSkl85ZsXMclVtF7giloFhoUzMVQ0gAEcQmz0MmUF03L48V4 oJN+Dih6nyAiZ2N/Vpoynk0QgQoChBSORLx1XYobFai+mrlfANxShaNXWbvJOSop vKVoET34cMAcph3i6lqG/8lXWsBa5YIHdkk3jYIelbU0Ido7YLFqkTDmOOlpLXAM 2jVMi3RBwpWAeH2r4gl0M4eZzl1m00XuLzu/i5/27AqmpOeYHCoePZq2L+XBulFq eiImMhn1xQNkR9AvnfUFhUJl0bznqA42D9L5phJIQo0wFb9y4hLhZWUI+xbgU1Rn YpifPqkDwA3ssO3WuVvC1Dr23KoZaTFK3qhix0O2qVDft+Edz8k= =7aOW -----END PGP SIGNATURE-----