-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-i386-dbgsym libc6-udeb libc6-x32 libc6-x32-dbgsym locales-all nscd nscd-dbgsym Architecture: amd64 Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-dev-i386 - GNU C Library: 32-bit development libraries for AMD64 libc6-dev-x32 - GNU C Library: X32 ABI Development Libraries for AMD64 libc6-i386 - GNU C Library: 32-bit shared libraries for AMD64 libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) libc6-x32 - GNU C Library: X32 ABI Shared libraries for AMD64 locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: 188c7ecce2d5ce11768363ef9a49d7b46f1a9d99 15757 glibc_2.41-12+deb13u5_amd64-buildd.buildinfo 33fb1e5cf97a4c90ce371ba396f0a12b0acd826b 2279028 libc-bin-dbgsym_2.41-12+deb13u5_amd64.deb 2eb8fe2591d95fd539437e3b3c7588a300f14472 638876 libc-bin_2.41-12+deb13u5_amd64.deb 7df4d620901776017d5577281467758d5426862a 31932 libc-dev-bin-dbgsym_2.41-12+deb13u5_amd64.deb 37422a7ef80d227ebdb5f97c41ea752e63912866 60532 libc-dev-bin_2.41-12+deb13u5_amd64.deb 5cbad6796dc1d646c698361d723eba5128af8016 47900 libc-devtools-dbgsym_2.41-12+deb13u5_amd64.deb ee8d4c0782ea9aea2d9c18820617078fc2c40b2d 70300 libc-devtools_2.41-12+deb13u5_amd64.deb 2461da4b8aa4dc527e86707112114cb54791f061 7364872 libc6-dbg_2.41-12+deb13u5_amd64.deb f9a0055daafb60226d8838c91cd8fb3b5c6845c6 14824 libc6-dev-dbgsym_2.41-12+deb13u5_amd64.deb b91dabec2a3f24194cf7a76e6a082e0d9a857edc 1429312 libc6-dev-i386_2.41-12+deb13u5_amd64.deb eb3158b1a702502658bc51b87aa17823477d81a3 1597516 libc6-dev-x32_2.41-12+deb13u5_amd64.deb 7297d6a985e527f1a5d1283f74a99f5c3e59ed5a 1991168 libc6-dev_2.41-12+deb13u5_amd64.deb c97cae4d7003e56264b489d12518533db7d75816 6887440 libc6-i386-dbgsym_2.41-12+deb13u5_amd64.deb 20c42f7054809a111bf13b393deb544dab11c53e 2539008 libc6-i386_2.41-12+deb13u5_amd64.deb 69b4f7698d89c8093cbe4f7d476d2a02ce9151ee 1425084 libc6-udeb_2.41-12+deb13u5_amd64.udeb 186660889b3654a1a8398336416321442a122ead 7140964 libc6-x32-dbgsym_2.41-12+deb13u5_amd64.deb c9b5fc22335653e5a23ef4550c676a3686c64a2a 2666844 libc6-x32_2.41-12+deb13u5_amd64.deb 2814165ecd61dee3d64ca4dedfbe47fc9da5e3d1 2850108 libc6_2.41-12+deb13u5_amd64.deb c7409210f06574e82043493bd86855d5f0f800ad 11203784 locales-all_2.41-12+deb13u5_amd64.deb a314018ce1aa43d2bc6f209590dddc90306f623e 220124 nscd-dbgsym_2.41-12+deb13u5_amd64.deb 9669418b2b31c44d8bd362eb0e1b86e287c8fd57 108292 nscd_2.41-12+deb13u5_amd64.deb Checksums-Sha256: a21c0716c6e0ccaedd90869a3b93fe57bde2fe9d173c575125e926df0d244408 15757 glibc_2.41-12+deb13u5_amd64-buildd.buildinfo 193721d134669ab163df4ad824c6f0e26c1afc4447b7670cb2daec1989ce3931 2279028 libc-bin-dbgsym_2.41-12+deb13u5_amd64.deb f30ee7381a9c6a3936165259bcd58e65f4b288e351606d200c8435724c5876dd 638876 libc-bin_2.41-12+deb13u5_amd64.deb ad3d02affbe640c26a844b0a7fdf236b816bb0bef7bca8a25e1d287615173317 31932 libc-dev-bin-dbgsym_2.41-12+deb13u5_amd64.deb 9546268f031bd598f32262ea3ca8f2558cd41dcaada13dd1af9ad329c3dbf30c 60532 libc-dev-bin_2.41-12+deb13u5_amd64.deb 81c43c760a00628e62da4c72e951e100c02064069bbd141aef5cfdb8fcb0e254 47900 libc-devtools-dbgsym_2.41-12+deb13u5_amd64.deb 3ca6761486284f8ac0e9ae00a58ab87058126d00e36182fd3f05811054f7974a 70300 libc-devtools_2.41-12+deb13u5_amd64.deb d382b1f72fc0089aeeea8efe7db4719a436ce65cb6ce7f096e9c799d32ead275 7364872 libc6-dbg_2.41-12+deb13u5_amd64.deb 67f71a75ac6185915d8314eb525ab2c3bccfdaa19622ab3fa15841a378806e9e 14824 libc6-dev-dbgsym_2.41-12+deb13u5_amd64.deb 9de820867ade87558bd7c42affd1f46a795f19d18843355219e79c1b4037bf11 1429312 libc6-dev-i386_2.41-12+deb13u5_amd64.deb b55ac12c499a9fb9f516111092a16347518f52373fcc2cc501a49eea921faecb 1597516 libc6-dev-x32_2.41-12+deb13u5_amd64.deb 858f4d477cc39324f3c6582cdebcf38928fb385bb17b40518c77a7dccd296428 1991168 libc6-dev_2.41-12+deb13u5_amd64.deb 5fe826119d3e24880f6ca9ab86309127272455b9650f501ec0400eb8c850bb6b 6887440 libc6-i386-dbgsym_2.41-12+deb13u5_amd64.deb 1e59f89ce33149849ffffc53c38ca54ffa7a15e48cd0394eb3f4ba02fe553ca4 2539008 libc6-i386_2.41-12+deb13u5_amd64.deb e80ed97d8be0530d135defbddfd18ec5758b9c0db8b452d727ddad76fdbc0855 1425084 libc6-udeb_2.41-12+deb13u5_amd64.udeb 21f9d500f567bec369b2bb72aa1a46bce8e9eecce318a931214547232146540e 7140964 libc6-x32-dbgsym_2.41-12+deb13u5_amd64.deb 5001447ba0b2a21d312ad944e12975e254a65c6633de0a04d862f9a7a4cb5100 2666844 libc6-x32_2.41-12+deb13u5_amd64.deb b59b0625cd1a791375d40dab23a4d5d3d0641e3d0a773501becdc3725b7f99cf 2850108 libc6_2.41-12+deb13u5_amd64.deb f6ab5ad40b16ac52c1062988b4f81709568d576f04db9cae247c0a8a2fc81739 11203784 locales-all_2.41-12+deb13u5_amd64.deb b79c774886bc32866a30e2d460dedf4b05fd4c4e30886d01b98f9d5707091527 220124 nscd-dbgsym_2.41-12+deb13u5_amd64.deb 328ccf5ff6dec73c3568f3edf66a12b7acea87dfca5a06a6cef129e6b93484ea 108292 nscd_2.41-12+deb13u5_amd64.deb Files: 86a8eac6eab1ad227f919b4776ee5cdf 15757 libs required glibc_2.41-12+deb13u5_amd64-buildd.buildinfo a1793a846b667f601cefaedaf18e8e86 2279028 debug optional libc-bin-dbgsym_2.41-12+deb13u5_amd64.deb e97e2b9851849d9a182350363883389b 638876 libs required libc-bin_2.41-12+deb13u5_amd64.deb 86f5e3e05a200042df52e0704624f315 31932 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_amd64.deb a76112ba1b0e4104b8065bcea53b9515 60532 libdevel optional libc-dev-bin_2.41-12+deb13u5_amd64.deb ed9359876411df3c44865d61baf3f971 47900 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_amd64.deb c8de00878e448ea20facd33bfd81bb5d 70300 devel optional libc-devtools_2.41-12+deb13u5_amd64.deb 5e8b48796abf6f1c63db7012769633ee 7364872 debug optional libc6-dbg_2.41-12+deb13u5_amd64.deb 11b2e8b45c3d0768b50cc8c9deffbc17 14824 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_amd64.deb ab03e090ea21d3573de1e14df4cb6a18 1429312 libdevel optional libc6-dev-i386_2.41-12+deb13u5_amd64.deb 346a8dd1c87fd5872deddd6b73e597c5 1597516 libdevel optional libc6-dev-x32_2.41-12+deb13u5_amd64.deb 96235d2b3f960feeb4537152ff27e72e 1991168 libdevel optional libc6-dev_2.41-12+deb13u5_amd64.deb 9004b168a52088ec9f05b2aca975886c 6887440 debug optional libc6-i386-dbgsym_2.41-12+deb13u5_amd64.deb 898aba8675a4067c0abaa247ac67730e 2539008 libs optional libc6-i386_2.41-12+deb13u5_amd64.deb 5c7ae2d704a53ea922a744f568d4117e 1425084 debian-installer optional libc6-udeb_2.41-12+deb13u5_amd64.udeb d1a98d7483ae3c590c6067112080baa6 7140964 debug optional libc6-x32-dbgsym_2.41-12+deb13u5_amd64.deb 7e02e9ec6136d6968777b9dfdf6ee17a 2666844 libs optional libc6-x32_2.41-12+deb13u5_amd64.deb 3cf652965605c5dc915ff47a929bbe84 2850108 libs optional libc6_2.41-12+deb13u5_amd64.deb 77a854d6e216b539cded1d0e1300603a 11203784 localization optional locales-all_2.41-12+deb13u5_amd64.deb 2ab26a4cc3e1208b843f8226eae0d1f4 220124 debug optional nscd-dbgsym_2.41-12+deb13u5_amd64.deb eec6782a9160068cfe1b1c1025a83a1f 108292 admin optional nscd_2.41-12+deb13u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmr4XWQACgkQYg9P9sm2 dfEIUw//VsC615KMC+gOsKr2rW7kXnu8M+fWKLsnop6cMTK9V9OotFzdymyucCcD SMCYXbsXat4bhOvu64BVvR+EGzUZpKIEtElwOw4zsXcsejUj05eJ3dEdMHaHCsB+ 70b8eqQMbp8VTM4VovFGh2KUrfJHWmdzCjIAJMLWiastouMDo86u2c/3KHvRSrj9 w2Z3tdQhQoqG2AIg/j0TSljrLbceELR3kg4lP4nWboy5KvGYTBm0Pb+1m3W73Ywo jveDP3w5ZLII2n+/PADO0I0pRvUVZtGHgnpQbBvLX/GgDAzjCLMO0wygPnMedsj2 Zuv3BI/J+ZS1f4IJ1QmSIz5gRv90exFmvN0fjdL4qZZ2NI4pODce9fxs1MMAeIJJ fPAqI34ymsII/5d/eWfZqaEOr+cvLRWiR1MvU0VJi/07X1hipAXDvWXSzFY4+3iW 81FIb3nfhqclT3/qhIpXRBIJBTkYCwfIjNWwKIWltLDv5CwCGSm7xeD2WussTCIj mLFaLdmVINAK7WigPRyJtRxpCe7B3dayJTw9lcvHFP5mBTg4HabA7U7L2tcERvz8 OOb+aPf5g7s9U74DzmXQEOXPPKTz3oi4dQG/5bx0BlHySM69mIOx9kNiv2GlXDHI fIZFpSO2+yn405259/Tk3UV7g861MYjqBSTn14X8hZ3XJ5tnNwU= =GBXv -----END PGP SIGNATURE-----