-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: arm64 Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: bf83aefacfcdc8ee542495b8003775ae050d61df 13138 glibc_2.41-12+deb13u5_arm64-buildd.buildinfo 24c828da6ce1f2091ce0359205a26c9dee66d0f6 2193408 libc-bin-dbgsym_2.41-12+deb13u5_arm64.deb b7b1732f092dfcf9c5c4880f61da0fa8a8bcc8ab 552664 libc-bin_2.41-12+deb13u5_arm64.deb 4393e2d2c26fa9eab54551c59b06060efc9fad39 32364 libc-dev-bin-dbgsym_2.41-12+deb13u5_arm64.deb 0d7b1cf63eef6396b67441d0388ac8d45a2c1179 59704 libc-dev-bin_2.41-12+deb13u5_arm64.deb b7e074e1378ae648ea98113ecf4bcc8d17a6af2a 48412 libc-devtools-dbgsym_2.41-12+deb13u5_arm64.deb 75c2bfee65b2df31b1267503c6e0bf0ef164b125 68720 libc-devtools_2.41-12+deb13u5_arm64.deb 1b2374430948d59723ee58ed275adeb71c2ad784 6591804 libc6-dbg_2.41-12+deb13u5_arm64.deb 2e4b4f8e14d90b9e499a83c13e445d5984c31a42 14028 libc6-dev-dbgsym_2.41-12+deb13u5_arm64.deb dbb2e6e6523840424b304bd23d65c2560d73ad64 1626676 libc6-dev_2.41-12+deb13u5_arm64.deb 0f2dd7c686803c11aec0876b1b2404b924bd9c12 1043296 libc6-udeb_2.41-12+deb13u5_arm64.udeb 0211eeeed5b5ca90c8c47ed06e22e557a82795d2 2488872 libc6_2.41-12+deb13u5_arm64.deb bb44eff4f1890a6130e68876e8a536c5ff1b1565 11203784 locales-all_2.41-12+deb13u5_arm64.deb 17aa677982c16d1a5db942b8afb00a52a255cc6b 217132 nscd-dbgsym_2.41-12+deb13u5_arm64.deb fbbbbdf324a1d7d3137184edede82f9a9c9327db 102020 nscd_2.41-12+deb13u5_arm64.deb Checksums-Sha256: 2c9e2a01b57c08cf84fafb83f5dac923e5fa2f6dd9b3872527209b04363c0fae 13138 glibc_2.41-12+deb13u5_arm64-buildd.buildinfo ac762528dbc50c9917be9a41797f859bf3240e126c107cf621e735b03677cc77 2193408 libc-bin-dbgsym_2.41-12+deb13u5_arm64.deb 889850625c686a6d0b26a8baee5fb96f33e9f3305882f3a6751bb4c9433063e1 552664 libc-bin_2.41-12+deb13u5_arm64.deb aed038af6230105c292ec23f7ac05673bad676e02b4ffd41b52d2bb0acf8f000 32364 libc-dev-bin-dbgsym_2.41-12+deb13u5_arm64.deb 44c20e31afd22ddbd40983c908377627b2f95c12b01f2989db8ead23f7f8aaeb 59704 libc-dev-bin_2.41-12+deb13u5_arm64.deb 0a2ff43bb7255d339ebe6859fdea25df8d90d68a159f29ae3ddcb3eed68981ba 48412 libc-devtools-dbgsym_2.41-12+deb13u5_arm64.deb fdf0b90642f56a2301726a1c349aff262d83df0e527658c6156b465e5ee34764 68720 libc-devtools_2.41-12+deb13u5_arm64.deb 20256affe3d70c8cc534efedd58cd21395d96d1d7721aba62948bedf676013e8 6591804 libc6-dbg_2.41-12+deb13u5_arm64.deb f4c0b16a1363a70f7c9f3a6865d97976e54430a010ac746ebe5b6d894747d399 14028 libc6-dev-dbgsym_2.41-12+deb13u5_arm64.deb ff13ef61799ef4a9526a9e9568a8b91311f25f4211ea2ab1dd63028c000b0451 1626676 libc6-dev_2.41-12+deb13u5_arm64.deb c4e2c4f8b06740ff6362d83e77fb57b1522bd1a3538a3af7db278ffa39f4f5ee 1043296 libc6-udeb_2.41-12+deb13u5_arm64.udeb 0966fc3da1a26cc57647c68b5736f791b6e7eb498173a7993f63b6c89b4ed4f5 2488872 libc6_2.41-12+deb13u5_arm64.deb a81f042bfbd74f9afc5b67354347b2719130265b1e90635328c87e5160be9a8c 11203784 locales-all_2.41-12+deb13u5_arm64.deb ec5faae1a44765428517a18acec0763ac4f15e767f486c3d8e71385f5fd5aeba 217132 nscd-dbgsym_2.41-12+deb13u5_arm64.deb b2bb7d1d5952dece9a05145ffe4ec715e8605d9f8d5b072a66ae02103825edb3 102020 nscd_2.41-12+deb13u5_arm64.deb Files: 06dd47798d32a146ea335ca0d97cb129 13138 libs required glibc_2.41-12+deb13u5_arm64-buildd.buildinfo 809084134a8d275503fe730e7ca92f7f 2193408 debug optional libc-bin-dbgsym_2.41-12+deb13u5_arm64.deb d12f3c1a80ee4617a41b7f150383816a 552664 libs required libc-bin_2.41-12+deb13u5_arm64.deb 1154b55e0601d9295f2628e2dbfc4179 32364 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_arm64.deb bdfccd38a622fb9b44535d575e62e1bf 59704 libdevel optional libc-dev-bin_2.41-12+deb13u5_arm64.deb 0b327d6921c6d9f925d23145e1d051a0 48412 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_arm64.deb 64fb75db700728d654bfc3a0f2b4fbbc 68720 devel optional libc-devtools_2.41-12+deb13u5_arm64.deb 7e26e48f43a8cbddbc2719eb818f2879 6591804 debug optional libc6-dbg_2.41-12+deb13u5_arm64.deb a98ed8f674b7d5f14634202649b4fab2 14028 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_arm64.deb 55f6d9dcfb9b4af591adf0503410ccd5 1626676 libdevel optional libc6-dev_2.41-12+deb13u5_arm64.deb 20a41c3aba29becc07608c3e058515e3 1043296 debian-installer optional libc6-udeb_2.41-12+deb13u5_arm64.udeb 1e84f6e2cba8aca38cc0c64689710562 2488872 libs optional libc6_2.41-12+deb13u5_arm64.deb cbc1e3c1a5e5651e1e9c355edf79fe75 11203784 localization optional locales-all_2.41-12+deb13u5_arm64.deb eeaf2e055cc0224b0c1585ba4278c382 217132 debug optional nscd-dbgsym_2.41-12+deb13u5_arm64.deb fef1c59294a6ede4977427f006afdb94 102020 admin optional nscd_2.41-12+deb13u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmr4WPAACgkQxqCFmsOW goYMMA//RuydFKn7u74IjllOWbfUqTRvD7jhf39ELuiPRNjFa+L9X3wszGIEajJk 3OTdnn38zV25yoc44DBMtyO2dHTkhO2CNvp4Vvf3M9vElMtzejUPXUyiLBZ+eKOp TI8Gtr25Fe/sQVDynSSE7LfgsHwuYtNbYLEVexcgBF6GHCpGZq0KPhcgR6DfkP2f LQk8kr/ewY2G61SnjNEm5PxcfZ3hctrRgFTjd3N+Ws4pCu+nCfdcQWkKTE/L+gby kj9DD2Y7vFz0zqZ44oC4/qV6Wc9Q7TvO03EO1EtYEAuWkLJ2xSMoLDKNz3S3LDgV wRHKy5CkcZLnamWmwWN9tlABAOjKYIgjPrcjQ2KnCxIwzU+AdOn/TZZini2tcG2e BT9+OaNMnyoA6a4R59wdXPOldXgNeBn3l6m92aNRVZ+W0HuQX9V4wgcGwFTkejGZ YAWdfvlbBUOXn/h9OGnrnevw0/9GsaWqF+j9bZeC7nhMeWnUqpQ3ZB2noyXmDNCr eAqh2ZrQ8K/cBK/qqRkHZ9bj0PGR+8fq1zv1H+dPYQsdWxsJUKufBW4s665vrTb7 OoN4U4oDAmTET+TGoIVMN9YzH0nEWtPl5LioN1/TVcQsJMx/mWdh8hEz3RZIfy2u 6g2/8+ecXa3NHAmanOyiOU4IXfLEjQI4d2IKdClcmtRzjFF9tu4= =T38M -----END PGP SIGNATURE-----